Health Data Notice

1. Documents Covered by This Notice

This Notice applies to health-related documents that you upload, store, or otherwise maintain in your Amoviti Vault, including documents such as:

• medical records;
• prescriptions;
• vaccination and immunization records;
• laboratory results;
• medical insurance explanations of benefits;
• medical directives;
• living wills;
• organ donor cards; and
• other documents that you place in the Medical category.

The category of a document may be determined automatically when the Service processes or organizes the document.

2. How Amoviti Handles Health Documents

Amoviti stores health documents in your Vault so that you can organize, retain, and access them and share them with people you intentionally authorize.

Amoviti may recognize the general type of a health document—for example, that a document appears to be a vaccination record.

The document type may be used to organize the document within the Service.

Amoviti does not currently extract substantive medical information from health documents for use as structured health data.

For example, recognizing a document as a vaccination record does not cause Amoviti to extract the vaccination date, vaccine name, provider, patient name, or other medical information into a structured field.

3. Information Amoviti Does Not Extract From Health Documents

For health documents covered by this Notice, Amoviti does not intentionally capture substantive medical details from the document for use as application data.

This includes information such as:

• the person to whom the medical information relates;
• healthcare provider information;
• dates of medical services or treatment;
• diagnoses;
• medical conditions;
• laboratory or test results;
• medications;
• prescriptions;
• treatment information; or
• other substantive medical details contained in the document.

Such information does not become a structured field, document description, or Family Assistant response merely because the document is stored in the Vault.

Any notes or information that you separately enter yourself remain information that you have voluntarily provided to Amoviti and may be handled according to the Privacy Policy and applicable Service functionality.

4. Document Recognition and AI Processing

Amoviti may use automated processing to identify the general type of a document.

Where the document cannot be identified using processing available on your device, Amoviti may process the document through Google Cloud services, including applicable Vertex AI services, within the United States.

When the processing identifies the document as a health document, processing stops at the document-type level for the health-document workflow.

Amoviti does not intentionally continue processing the substantive contents of the health document to extract medical information for use by the Service.

If an AI analysis request was initiated and the document is identified as a health document for which substantive extraction is not performed, the applicable AI credit is returned according to the Service’s credit-handling logic.

5. AI Training

Amoviti does not use your health documents to train or improve its AI models.

Amoviti also does not intentionally provide your health documents to Google or another AI provider for the purpose of training or improving that provider’s models or products.

AI processing is performed through enterprise services used by Amoviti in its cloud environment in the United States, subject to the applicable contractual and data-processing terms.

6. Access and Sharing

Your health documents remain subject to the access controls applicable to your Amoviti Vault.

Amoviti does not independently disclose your health documents to other people for advertising, marketing, or other unrelated purposes.

Health documents may be made available to another person when you intentionally use an Amoviti sharing or emergency workflow to provide that person access.

You are responsible for reviewing the people, recipients, and emergency settings to whom you provide access.

Amoviti does not sell health information and does not use health documents for advertising.

7. Health Information and the Family Assistant

Health documents are not currently used as a source of substantive medical information for the Amoviti Family Assistant.

The Family Assistant does not use the contents of a health document to generate answers, recommendations, summaries, diagnoses, or other medical conclusions.

Amoviti does not represent that the Service provides medical advice, diagnosis, treatment, or clinical decision support.

For additional limitations relating to health and medical information, see the Terms of Service.

8. Deletion

You may delete a health document from your Vault through the Service.

When an individual health document is deleted, Amoviti initiates deletion of the applicable stored record and associated document according to its normal deletion processes.

Backup copies may persist temporarily as part of routine backup and disaster-recovery systems. Applicable backup copies are scheduled for deletion within 30 days, subject to the retention and security requirements described in the Privacy Policy.

Account-level deletion is governed by the account-deletion process and retention periods described in the Privacy Policy.

9. Your Privacy Choices

You may request information about health-related data Amoviti holds about you and may request deletion of applicable information, subject to applicable legal and operational limitations.

You may submit a request through Settings → Privacy or through the privacy contact mechanism described in the Privacy Policy.

Amoviti may need to verify your identity before fulfilling a request involving access, deletion, or other changes to protected account information.

10. HIPAA and Healthcare Privacy Laws

Amoviti is a technology service for organizing and managing family information. Amoviti is not a healthcare provider, health plan, or healthcare clearinghouse and does not represent itself as a HIPAA Covered Entity or Business Associate.

Accordingly, HIPAA may not apply to Amoviti merely because you choose to store medical or health-related documents in the Service.

The privacy and security protections that apply to your information are described in this Notice, the Privacy Policy, and the Terms of Service, together with any rights provided to you under applicable law.

If you are using Amoviti in connection with a healthcare organization or another regulated entity, do not assume that storing information in Amoviti creates a HIPAA-compliant arrangement unless Amoviti has expressly agreed to such an arrangement in writing.

11. Security of Health Documents

Health documents receive the same baseline security protections applicable to other documents stored in the Amoviti Vault, including encryption in transit, encryption at rest, and server-side access controls.

Amoviti currently does not provide end-to-end or client-side encryption for Vault documents. Accordingly, health documents stored in the Vault are not maintained in a zero-knowledge architecture.

Additional information about Amoviti’s current security controls is available in the Security page.

12. Changes to This Notice

Amoviti may update this Notice when its handling of health-related information, document-processing technology, security controls, or applicable legal obligations changes.

The Last Updated date identifies the current version.

If Amoviti materially changes how health information is handled, we will provide any notice required by applicable law and, where appropriate, describe the change through the Service or other appropriate communication channels.

13. Contact

Questions regarding this Notice or Amoviti’s handling of health-related information may be submitted through the privacy contact mechanism described in the Privacy Policy.