Privacy policy

In India? Read the India privacy policy.

Althena Care is provided in the United States by Althena AI, Inc., a Delaware corporation ("Althena", "we"). This policy explains what information we handle, why, who sees it and the choices you have.

1. Who is responsible for your information

If you're a patient, your clinician's practice is responsible for your health information under HIPAA. Althena handles it for the practice as its business associate, under a Business Associate Agreement, and only to provide Althena Care to that practice. Your practice's Notice of Privacy Practices also applies.

If you're a clinician, practice staff member or affiliate, or you contact us through this website, Althena is responsible for the information you give us.

2. What we collect

If you're a patient

• Your account: your phone number (checked with a one-time code), your name, your date of birth and the state you're in when you join.
• Your care: the clinician and practice you're linked to, the consent choices you make, and the guidance and follow-ups your clinician sets for Andrea.
• Your conversations with Andrea: what you say or write, kept as text. Calls are not recorded. After each conversation a short summary is written for your clinician, including Andrea's reading of your mood and sleep and any safety concern. If you allow it, Andrea also remembers helpful things you've told her.
• Your check-ins: the moods, notes, sleep times and breathing practice you log.
• Technical data: the app version, and security logs of who did what and when (never what you said).

You never pay in the app. If your practice charges you for between-session support, that is between you and your practice; Althena never handles those payments.

If you're a clinician, practice staff member or affiliate

• Your name, work email, role and practice; for clinicians, your NPI and the states you're licensed in, which we check against the public NPI registry.
• The agreements your practice accepts, with who accepted them and when.
• For practices, your plan and billing details. Card details go straight to Stripe; we never see them. For affiliates, your payout account is held by Stripe.
• A record of what you do in the web apps, including when you open a patient's conversations, check-ins or brief.

3. How it's used

• To provide Althena Care: so patients can talk to Andrea between sessions, so clinicians can support their care, and to send the reminders patients choose.
• To keep patients safe: if what a patient says or logs suggests they may be at risk, Andrea shows the 988 Suicide & Crisis Lifeline and their clinician (and the practice's owner) are alerted. The alert email says only that there is an alert, never who it's about.
• To run practices' subscriptions and pay affiliates.
• To keep the service secure and working, and to meet our legal obligations.

We don't sell personal information, we don't show ads, and we don't use patients' conversations to train AI models.

4. Who sees it

• Your clinician and their practice, who see your conversations, summaries, check-ins and alerts so they can support your care. Each clinician sees only their own patients; the practice's owner also sees safety alerts and who is enrolled in the practice's support program.
• Service providers that process information for us only to run Althena Care, each under a business associate agreement where they handle health information:

• Affiliates who referred a practice see that practice's name and plan, never anything about its patients.
• Authorities, only when the law requires it.

5. Where it's stored

Patient information is stored and processed in the United States, on Google Cloud, encrypted in transit and at rest.

6. How long it's kept

Care records are kept as long as your practice needs them for your care and as its state's medical record laws require. Security and access logs are kept for 6 years. See Delete your account for what is erased when you ask, and what may have to be kept.

7. Your choices and rights

• Turn off what Andrea remembers, or check-in reminders, at any time in the app's Settings.
• Withdraw a required consent in Settings: Andrea pauses until you agree again.
• Under HIPAA you can ask your practice for a copy of your health information, to correct it, for a list of certain disclosures, and to limit how it's used. We help your practice answer these requests.
• Ask us to delete your account: in the app, or by writing to [email protected].
• Depending on where you live you may have further rights under state law; we honor these requests from everyone in the US.

We'll reply within 30 days.

8. How it's protected

• Everything is encrypted in transit and at rest; each practice's conversations are encrypted with that practice's own key.
• One practice can never see another practice's patients.
• Access is limited to the people who need it, everyone signs in as themselves, and opening a patient's records is logged and shown to the practice's owner.
• Our systems don't write what patients say into their logs.

9. Children

Althena Care is for adults aged 18 and over. We don't knowingly collect information from children.

10. This website

althenacare.com uses no cookies, analytics or trackers, and loads nothing from other companies. If you use the contact form, your message is emailed to our team (through Zoho) and used only to reply to you; please don't include any patient information. We keep form messages for up to 24 months after our last contact.

11. Changes to this policy

If we change how information is used, we'll update this page and tell patients in the app before the change takes effect, asking for consent again where the law requires it.

12. Contact

Althena AI, Inc. · [email protected]