JourneyWell, LLC ("JourneyWell," "we," "us," or "our") provides an experience designed to help patients and their care partners capture what matters, replay clinician guidance, stay engaged between visits, and see progress over time.

This Privacy Policy explains how JourneyWell collects, uses, stores, shares, and protects information when you use the JourneyWell mobile application, website, and related services.

By using JourneyWell, you acknowledge the practices described in this Privacy Policy.

1. Information We Collect

The information JourneyWell collects depends on how you use the app and your role as a patient, care partner, or clinician.

Account information

When you create or use an account, we may collect information such as:

· Name

· Email address

· Account role

· Profile information

· Account creation and login information

· Care Team relationships and invitations

· Subscription status and related account information

Information you provide through JourneyWell

JourneyWell allows users to capture and organize information related to their care and progress. Depending on the features you use, this may include:

· Voice session recaps

· Audio recordings

· Transcripts

· Session summaries

· Care plans and plan activities

· Reminders

· Milestones and other progress information

· Photos

· PDF documents and other attachments

· Information contributed by linked care partners or clinicians

Some of this information may relate to your health, care, treatment, recovery, or interactions with healthcare professionals.

Usage and technical information

We may collect information about how JourneyWell is used, such as:

· Login and account activity

· Features used

· Session captures and recaps

· Interaction with plans and progress features

· Device and application information

· Error and diagnostic information

· Push-notification identifiers

We use this information to operate, secure, maintain, understand, and improve JourneyWell.

2. How JourneyWell Uses Your Information

We use information collected through JourneyWell to provide and improve the experience, including to:

· Create and maintain your account

· Capture and organize information from care sessions

· Transcribe voice recaps

· Create summaries and suggested follow-through

· Support plans, reminders, and progress tracking

· Allow authorized members of your Care Team to collaborate with you

· Deliver notifications and reminders

· Provide customer support

· Manage subscriptions and account access

· Maintain security and troubleshoot technical problems

· Understand how JourneyWell features are being used

· Improve the JourneyWell experience

JourneyWell is intended to support communication, organization, engagement, and follow-through. It does not provide medical diagnosis or treatment and is not a substitute for professional medical advice or the judgment of your healthcare providers.

3. Artificial Intelligence

JourneyWell uses artificial intelligence to help structure information you provide into useful summaries and follow-through.

For example, JourneyWell may process a session transcript together with relevant information from your current plan, reminders, milestones, or other JourneyWell information to generate:

· Session summaries

· Suggested plan updates

· Suggested reminders

· Suggested progress updates

· Other organized follow-through

JourneyWell currently uses OpenAI's API to provide certain artificial-intelligence processing services. Information necessary to generate these results may therefore be transmitted to and processed by OpenAI.

JourneyWell has entered into a Business Associate Agreement with OpenAI covering eligible API services used to process protected health information. JourneyWell's OpenAI API organization is provisioned with Modified Retention, and JourneyWell uses HIPAA-eligible OpenAI API services when processing protected health information.

OpenAI does not use JourneyWell's API inputs or outputs to train or improve its models by default. JourneyWell does not opt in to sharing patient information with OpenAI for model training or improvement.

AI-generated content may be incomplete or inaccurate. JourneyWell's AI features are intended to help organize information, not independently provide medical advice, diagnosis, or treatment.

4. Voice Recordings and Transcription

JourneyWell allows patients, care partners, and clinicians to create voice recaps related to care sessions. Voice recaps may include clinician guidance recorded at or near the end of a session, allowing that guidance to be replayed and carried forward between visits.

Voice recordings may be processed using Apple's speech-recognition technology to create a transcript. Depending on the user's device and Apple's speech-recognition capabilities, audio may be processed on the device or transmitted to Apple for speech processing.

JourneyWell does not control Apple's independent data-processing and retention practices.

After transcription, JourneyWell may store the audio recording and transcript so they can be accessed as part of the user's JourneyWell experience.

5. How Information Is Stored

JourneyWell uses Amazon Web Services ("AWS") infrastructure to operate portions of the JourneyWell service.

Information such as transcripts, session recaps, care-plan information, reminders, milestones, and related account information may be stored in JourneyWell's database infrastructure.

Audio recordings, photographs, PDF documents, and other uploaded files may be stored in private file storage.

JourneyWell uses security measures designed to protect information while it is transmitted and stored. Encryption at rest is enabled for JourneyWell's production database and private file storage.

No method of electronic transmission or storage can be guaranteed to be completely secure.

6. Your Care Team and Information Sharing

JourneyWell is designed around patient-controlled Care Team relationships.

Patients can choose to link authorized care partners and clinicians to their JourneyWell account. Depending on their role and available permissions, linked Care Team members may be able to view or contribute information such as:

· Session recaps

· Care plans

· Reminders

· Progress information

· Observations

· Resources

· Other information available through JourneyWell

Patients control who they invite to their Care Team and can remove linked individuals.

Removing someone from your Care Team removes that person's future access through JourneyWell, subject to information that person may previously have received, downloaded, or otherwise retained outside JourneyWell.

7. Service Providers

JourneyWell uses third-party service providers to operate different parts of the service.

These may include:

Amazon Web Services
Provides JourneyWell's cloud infrastructure, database, and private file storage. JourneyWell has entered into a Business Associate Addendum with AWS covering applicable HIPAA-eligible AWS services used to process, store, or transmit protected health information.

Apple
May process audio through speech-recognition services and provides services associated with the iOS application.

OpenAI
Processes certain information used to provide JourneyWell's AI-supported summaries and suggestions. JourneyWell has entered into a Business Associate Agreement with OpenAI covering eligible API services used to process protected health information, and JourneyWell's OpenAI API organization is provisioned with Modified Retention.

Firebase / Google
Supports functions such as push notifications and application services. According to JourneyWell's current technical design, push notifications do not include session transcript content.

RevenueCat and Apple App Store
May process information related to subscriptions, purchases, trial eligibility, and subscription status.

Resend
Provides transactional email delivery, such as password-reset and account-related emails.

We may also use vendors that provide email delivery, authentication, error monitoring, security, customer support, or other services necessary to operate JourneyWell.

These providers may process information as necessary to perform services for JourneyWell and are subject to their respective contractual obligations and privacy practices.

8. We Do Not Sell Your Health Information

JourneyWell does not sell your health information.

JourneyWell does not use information about your care, session recaps, transcripts, care plans, or progress for third-party advertising.

9. Notifications

If you enable notifications, JourneyWell may send reminders, account notifications, or other information related to your use of the app.

JourneyWell's current design uses limited notification information and does not place session transcripts within push-notification content.

You can manage notification permissions through your device settings.

10. Subscription and Payment Information

JourneyWell may offer paid subscriptions through Apple's App Store.

Apple and JourneyWell's subscription-management provider may process purchase, subscription, trial, renewal, cancellation, and transaction information.

JourneyWell does not directly receive or store your complete payment-card information when your subscription is purchased through Apple's App Store.

11. Data Retention and Deletion

JourneyWell retains information for as long as reasonably necessary to provide the service, maintain your account, meet applicable legal and security requirements, resolve disputes, and enforce agreements.

You may request deletion of your JourneyWell account through the functionality provided in the app.

When an account is deleted, JourneyWell will delete or de-identify information associated with the account in accordance with its applicable retention requirements, except where information must be retained for legal, security, fraud-prevention, backup, or other legitimate purposes.

Some information may remain temporarily in system backups before being deleted through normal backup-retention processes.

12. Security

JourneyWell uses administrative, technical, and organizational safeguards designed to protect information against unauthorized access, loss, misuse, or alteration.

These safeguards may include:

· Encrypted network communications

· Private cloud storage

· Authentication and access controls

· Role-based access

· Restricted Care Team relationships

· Security monitoring

· Production infrastructure controls

JourneyWell also uses contractual safeguards, including Business Associate Agreements with applicable service providers that process protected health information on JourneyWell's behalf. JourneyWell currently has such agreements with Amazon Web Services and OpenAI covering applicable services used by JourneyWell

JourneyWell continuously evaluates its security practices as the service develops, however no electronic system can guarantee absolute security.

13. Your Choices and Rights

Depending on where you live, you may have rights regarding your personal information, which may include the ability to:

· Access information associated with your account

· Correct certain information

· Request deletion

· Control Care Team access

· Manage notification permissions

· Manage or cancel your subscription

· Ask questions about how your information is used

To exercise a privacy right or ask a privacy-related question, contact us at:

privacy@getjourneywell.com

We may need to verify your identity before fulfilling certain requests.

14. Children's Privacy

JourneyWell is intended for individuals age 16 and older and is not directed to children under 16.

JourneyWell does not knowingly collect personal information from children under 16 through independently created accounts. If we learn that personal information has been collected from a child under 16 in a manner inconsistent with applicable law, we will take appropriate steps to delete or otherwise address that information.

Parents or legal guardians who believe information about a child under 16 has been provided to JourneyWell without appropriate authorization may contact us at support@getjourneywell.com

15. Healthcare Providers and HIPAA

JourneyWell helps individuals organize and share information related to their care, but use of JourneyWell does not by itself create a healthcare provider-patient relationship between JourneyWell and the user.

JourneyWell has entered into Business Associate Agreements with certain service providers that may process protected health information on JourneyWell's behalf, including Amazon Web Services and OpenAI for applicable services. These agreements govern those service providers' handling of protected health information and do not, by themselves, determine JourneyWell's status or obligations under HIPAA.

Healthcare providers and organizations that participate in a user's Care Team may have their own privacy practices, notices, consent requirements, and legal obligations.

16. Recording and Clinician Consent

JourneyWell allows users to capture information related to care sessions.

Users are responsible for following applicable laws and obtaining any permissions that may be required before recording another person.

Clinicians, healthcare providers, or care organizations may also have their own recording, consent, privacy, or information-sharing requirements.

JourneyWell does not replace those requirements.

17. Changes to This Privacy Policy

We may update this Privacy Policy as JourneyWell evolves or as legal, regulatory, or operational requirements change.

When we make material changes, we will update the "Last Updated" date and provide additional notice when appropriate.

18. Contact Us

If you have questions about this Privacy Policy or JourneyWell's privacy practices, contact:

JourneyWell, LLC
Tennessee, United States
privacy@getjourneywell.com