Privacy Policy

Last updated: February 20, 2026

1. Introduction

Aristolog ("we," "us," or "our") is committed to protecting the privacy of our users. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use our healthcare check-in management platform ("Service").

2. Information We Collect

Account Information

When you register for an account, we collect your name, email address, phone number, and organizational information.

Check-in Data

We process patient and caregiver information, check-in responses, and related healthcare data as directed by healthcare providers who use our Service.

Usage Data

We automatically collect information about how you interact with the Service, including access times, pages viewed, and device information.

3. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Service
  • Send check-in notifications and reminders via SMS, phone, or email
  • Process check-in responses and generate analytics
  • Communicate with you about your account and the Service
  • Ensure compliance with legal obligations

4. SMS and Mobile Information

Your mobile information will not be sold or shared with third parties for promotional or marketing purposes.

We use phone numbers solely to deliver care check-in notifications as directed by healthcare providers. SMS messages are sent only to individuals who have provided explicit consent. You may opt out of SMS messages at any time by replying STOP.

5. HIPAA and Protected Health Information

When we process Protected Health Information (PHI) on behalf of healthcare providers (Covered Entities), we do so in accordance with HIPAA regulations and our Business Associate Agreement. We implement administrative, physical, and technical safeguards to protect PHI.

6. Data Sharing

We do not sell your personal information. We may share your information only in the following circumstances:

  • Service providers: We work with trusted third-party service providers who assist in operating our Service (e.g., cloud hosting, SMS delivery). These providers are contractually bound to protect your information.
  • Legal requirements: We may disclose information when required by law, regulation, or legal process.
  • Business transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction.

7. Data Security

We implement industry-standard security measures to protect your information, including encryption in transit and at rest, access controls, audit logging, and regular security assessments. However, no method of electronic transmission or storage is 100% secure.

8. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. Upon account termination, we will delete or anonymize your data within a reasonable period, unless retention is required by law.

9. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate information
  • Request deletion of your information
  • Opt out of certain communications

10. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. Patient data related to minors is managed by their healthcare providers and authorized caregivers.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the "Last updated" date.

12. Contact Us

For questions about this Privacy Policy or to exercise your privacy rights, contact us at [email protected].