Introduction
At Ultralight Health, we recognize that patient health information is among the most sensitive data in existence. Our commitment to privacy is not just a legal obligation, but a cornerstone of the trust we build with clinical practitioners and their patients.
This Privacy Policy describes how Ultralight Health ("we," "us," or "our") collects, uses, and discloses information when you use our electronic health record management systems and related digital services. We operate in full compliance with the Health Insurance Portability and Accountability Act (HIPAA) and maintain rigorous security standards to protect all Protected Health Information (PHI).
Information We Collect
Personal Data
Name, contact information, and professional credentials for healthcare providers accessing the platform.
Clinical Data
Patient histories, lab results, clinical notes, and diagnostic imaging provided by healthcare systems.
Device & Usage Data
IP addresses, browser types, and interaction logs used for security auditing and system performance optimization.
How We Use Your Information
We process data strictly for the following purposes:
- Service Provision: Enabling clinical workflows, patient scheduling, and medical record management.
- Clinical Intelligence: Utilizing anonymized data aggregates to improve diagnostic accuracy and clinical outcomes.
- Security & Auditing: Maintaining HIPAA-required logs to monitor access and prevent unauthorized data entry.
- Communications: Sending critical system updates and security alerts to registered clinicians.
Data Sharing and Disclosure
Ultralight Health maintains a strict "Privacy First" policy regarding data sharing:
"We never sell clinical or personal data to third-party advertisers or data brokers. Period."
Data is shared only with clinical partners (such as laboratories or pharmacies) at the explicit direction of the authorized healthcare provider, or when required by valid legal process under narrow HIPAA exceptions.
Data Security
Security is the bedrock of our platform. Our infrastructure includes:
AES-256 Encryption
All data is encrypted at rest and in transit using military-grade protocols.
SOC2 Type II
Annual audits ensuring our security controls meet the highest industry standards.
Your Rights
Under HIPAA and relevant regional privacy laws, you have the right to:
- Access your data and request digital copies.
- Correct inaccuracies in your personal or professional record.
- Request the deletion of your account (subject to medical record retention laws).
- Receive a list of disclosures of your health information.
Contact Us
If you have questions about this policy or our data practices, please contact our Privacy Office:
Privacy & HIPAA Compliance Office
privacy@ultralighthealth.com
1200 Innovation Way, Suite 400
Mill Valley, CA 94941