Privacy Policy

• Clinicians and practice staff who create a Jogaza account and use the Services.
• Patients of those practices who book appointments, complete forms, join video visits or use the patient portal.
• Visitors to jogazahealth.com.

When a practice uses Jogaza to keep patient records, the practice is the “covered entity” under HIPAA and controls those records. Jogaza acts as the practice’s business associate and handles patient health information only to provide the Services to that practice, as set out in our Business Associate Agreement. Patients with questions about their records should contact their practice first.

• Account information. Name, email address, sign-in details, practice name and address, NPI and professional details you enter, and your settings.
• Patient and clinical information entered by or for a practice: patient names, contact details, dates of birth, insurance details, appointments, intake forms and signatures, visit notes, diagnoses, prescriptions, lab orders, claims and messages.
• Visit recordings and transcripts. When a clinician uses the AI scribe, we receive the audio recording of the visit, make a transcript, and generate a draft clinical note. Recordings are deleted once they have been transcribed. A practice can choose to have the transcript deleted when a note is signed.
• Payment information. Subscription and patient payments are processed by Stripe. We receive limited details, such as the card brand, last four digits and payment status, but never store full card numbers.
• Device information. For the mobile app, a push notification token so we can tell you when a note is ready, plus basic device and app version details needed to deliver notifications and fix problems.
• Website and usage information. On jogazahealth.com and the web app, we use cookies and similar tools to keep you signed in, protect against abuse, and understand how the product is used, for example pages visited and errors encountered.

• To provide the Services: keep records, schedule appointments, generate notes, send forms and reminders, run video visits, check insurance eligibility and submit claims.
• To create transcripts and draft clinical notes with AI. Notes are drafts for the clinician to review, edit and sign.
• To send service messages, such as appointment reminders, form links, sign-in codes and “note ready” notifications.
• To process payments and manage subscriptions.
• To secure the Services, prevent fraud, and fix errors.
• To meet legal obligations.

We do not sell personal information, use patient information for advertising, or use it to train AI models.

We share information only as needed to run the Services, with service providers bound by contract and, for patient health information, by a Business Associate Agreement where HIPAA requires one:

We may also disclose information if required by law, to protect the rights and safety of users or others, or as part of a merger or sale of our business, in which case this policy continues to apply.

Information is encrypted in transit and at rest. Access is limited to people who need it, and actions on patient records are recorded in an audit log. Patients sign in to the portal with a one-time code. No system is perfectly secure, but we work to protect your information and will notify affected practices of a breach as required by law and our Business Associate Agreements.

We keep account and practice information while the account is open. When an account is deleted, we delete its data within 30 days, except:

• payment and invoice records, kept for up to 7 years for tax and accounting;
• security audit logs, kept for up to 6 years as required for health data;
• encrypted backups, which roll off within 30 days.

Visit recordings are deleted once transcribed.

• Access and correction. Clinicians can view and edit their information in the app. Patients can ask their practice for access to, or correction of, their records.
• Deletion. You can delete individual notes in the app. To delete your account and its data, follow the steps at jogazahealth.com/delete-account.
• Notifications. You can turn off push notifications in your device settings, and text reminders in your practice settings.
• Cookies. You can block or delete cookies in your browser, though some features, like staying signed in, need them.
• State privacy rights. Depending on where you live, you may have the right to know, access, correct or delete your personal information, and to not be discriminated against for using these rights. Email us to make a request. Health information we handle for a practice is governed by HIPAA and the practice’s own policies.

The Services are for healthcare professionals and their adult patients, or patients whose parent or guardian manages their care through the practice. The Jogaza AI Scribe app is for clinicians aged 18 and over. We do not knowingly collect information from children except as part of records a practice keeps for its patients.

Our website may link to sites we don’t run. Their privacy practices are their own.

If we make material changes, we will update the effective date above and tell account holders by email or in the app before the changes take effect.

Jogaza LLC
Email: support@jogazahealth.com
Website: jogazahealth.com/contact