Privacy Policy

Effective Date: November 5, 2025

PECS Health Inc. ("PECS Health," "we," "our," or "us") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect information when you use the PECS Health website at pecs-health.com (the "Site") and the PECS Health mobile application (the "App"). Together, the Site and App are referred to as the "Services."

By using the Services, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Services.

1. About PECS Health

PECS Health provides patient education tools designed to help people learn about their chronic conditions. The Services are intended for informational and educational purposes only and are not a substitute for professional medical advice, diagnosis, or treatment. The Services are not a medical device and do not provide medical care.

2. Information We Collect

We may collect the following categories of information:

Information you provide directly:

  • Account information (such as name and email address)
  • Information you submit when contacting us, including the content of your communications
  • Optional profile information related to learning preferences and educational topics of interest
  • Feedback, survey responses, and other information you choose to share

Information collected automatically:

  • Device information, such as device type, operating system, and unique device identifiers
  • Usage information, such as pages or screens viewed, features used, and time spent in the Services
  • Log data, including IP address and access times
  • Information collected through cookies and similar technologies on the Site

Information from third parties:

  • Information from analytics providers and infrastructure partners that help us operate the Services
  • Information from healthcare partners only when you have specifically authorized that sharing

3. Health Information and HIPAA

PECS Health may, in some cases, operate as a Business Associate under the Health Insurance Portability and Accountability Act ("HIPAA") when working with healthcare provider partners. In those cases, protected health information ("PHI") is handled under a Business Associate Agreement and applicable HIPAA requirements.

When the App is used directly by an individual without a healthcare partner, the information collected is generally not PHI under HIPAA, but we treat health-related information you provide with appropriate care and confidentiality.

We do not sell health information. We do not use health information for advertising.

4. How We Use Information

We use information to:

  • Provide, operate, maintain, and improve the Services
  • Personalize educational content to your stated interests and learning needs
  • Respond to your questions, requests, and support inquiries
  • Send service-related communications (such as account or update notices)
  • Monitor and analyze usage to improve the quality and performance of the Services
  • Detect, prevent, and respond to security incidents, fraud, or misuse
  • Comply with legal obligations

5. AI Features and Automated Processing

The PECS Health app includes AI-powered features that help deliver educational content and respond to your questions. These features rely on third-party large language model providers operating under contractual data protection obligations with PECS Health.

When you interact with AI features in the app:

  • Your questions and the responses are processed to generate clear, sourced educational answers
  • We do not use your personal health information to train any AI model
  • AI responses are intended as educational information only and are not medical advice
  • We design the AI to direct you to your care team for questions that require clinical judgment
  • You may stop using AI features at any time without losing access to other parts of the app

AI-generated responses are not perfect. Always discuss medical questions with your healthcare provider.

6. How We Share Information

We do not sell your personal information. We may share information in the following limited circumstances:

  • Service providers. We share information with vendors that help us operate the Services, such as cloud hosting, analytics, communications, and security providers. These vendors are bound by contract to protect your information and use it only for the purposes we specify.
  • Healthcare partners. If you access the Services through a healthcare partner (such as a clinic or health system), we may share information with that partner as needed to support your educational experience, in accordance with applicable agreements and HIPAA where it applies.
  • Legal and safety. We may disclose information when required by law, in response to valid legal process, to protect the rights, property, or safety of PECS Health or others, or in connection with investigations of suspected misuse.
  • Business transfers. If PECS Health is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to applicable confidentiality obligations.

7. Your Choices and Rights

You have the following choices regarding your information:

  • Access and correction. You may request a copy of the personal information we hold about you, or ask us to correct inaccurate information.
  • Deletion. You may request that we delete your account and associated personal information, subject to limited exceptions where we are required to retain information.
  • Communications. You may opt out of non-essential communications at any time. We may still send service-related messages necessary to operate the Services.
  • State-specific rights. Depending on where you live, you may have additional rights under applicable state privacy laws (including in California, Colorado, Connecticut, Virginia, and other states with comprehensive privacy laws). To exercise these rights, contact us at the email below.

To exercise any of these rights, contact us at support@pecs-health.com.

8. Data Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information from loss, theft, misuse, and unauthorized access, disclosure, alteration, and destruction. However, no security system is impenetrable. We cannot guarantee the absolute security of information transmitted to or stored by the Services.

9. Data Retention

We retain personal information for as long as necessary to provide the Services, comply with our legal obligations, resolve disputes, and enforce our agreements. When information is no longer needed, we take reasonable steps to delete or anonymize it.

10. Children's Privacy

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected such information, we will take steps to delete it. If you believe a child has provided us with personal information, please contact us.

11. International Users

The Services are operated from the United States. If you access the Services from outside the United States, you understand that your information may be transferred to, stored in, and processed in the United States, where data protection laws may differ from those in your country.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the Effective Date above and, where appropriate, provide additional notice through the Services. Your continued use of the Services after an update means you accept the revised Privacy Policy.

13. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us at:

PECS Health Inc.
support@pecs-health.com