Consumer Health Data Notice

Scope

This notice describes how Areluno handles consumer health data in consumer-facing services and related support channels.

Categories of consumer health data

• symptoms and daily entries
• medication and appointment information
• reports and summaries
• photos, videos, and related metadata
• consent and provider-sharing selections

Use and disclosure

Areluno uses consumer health data to provide, secure, support, and improve services.

Areluno discloses consumer health data only to authorized providers or organizations, contracted service providers, legally required recipients, or as directed by the user.

Areluno does not currently sell personal health information.

HIPAA context for consumer health data

HIPAA does not apply to every health application or every type of health information. When Areluno is used as an independent consumer service, information may not be governed by HIPAA solely because it is health information.

If Areluno provides a service on behalf of a HIPAA covered entity under appropriate agreements, Areluno may act as a business associate for that service.

Incident notice and federal consumer-health obligations

Consumer health applications may be subject to federal health-data breach-notification requirements even when HIPAA does not apply. Areluno will provide notices required by applicable law for qualifying incidents.

Report suspected unauthorized access to security@arelunohealth.com.

Rights and requests

Depending on applicable law, users may request access, correction, deletion, disclosure information, and consent withdrawal. Contact privacy@arelunohealth.com.