This Privacy Policy explains how Kivira Axis Inc. ("Kivira", "we", "us", "our") collects, uses, discloses, and protects information when you use our websites (including our public website), mobile applications, clinician tools, and related services (collectively, the "Services").
If you are using Kivira through a clinic, health system, employer program, or another organization (a "Customer"), that Customer may control certain settings and data flows in the Services.
This policy covers information processed through the Services, including:
This policy does not cover third party websites, apps, or services that you may access through links in the Services.
We collect information in three main ways: information you provide, information collected automatically, and information received from third parties (including EHR integrations where applicable).
Depending on how you use the Services, you may provide:
When you use the Services, we may automatically collect:
We may receive information from:
The Services may process information that can be considered health information or sensitive personal information (for example, mental health assessment responses). We use this information to provide the Services and for the purposes described below.
Important note: Whether certain data is regulated as "Protected Health Information" (PHI) under HIPAA depends on how Kivira is offered and by whom. If you access Kivira through a clinic or health system, additional terms and notices may apply through that organization.
We use information to:
We do not use personal information for targeted advertising. We do not sell personal information and we do not share personal information with data brokers. We do not link data collected in the Services with third party data about you for advertising or advertising measurement purposes.
Some features may use automated or AI-assisted methods to help generate summaries, insights, or workflow outputs. Where used:
We may update this section as AI-related features evolve.
We share information in the following circumstances:
If you use Kivira through a Customer, we may share information with that Customer and authorized users (for example, clinicians) as required to deliver the Services and according to Customer configuration and permissions.
We use vetted vendors to provide infrastructure and operations such as hosting, databases, monitoring, security, customer support tools, analytics, and integration services. These providers are permitted to process information only to perform services for us, under contractual obligations.
Where you or your Customer enable integrations (for example, EHR connectivity), we share and receive data through those integrations based on authorization and configuration.
We may disclose information if we believe it is necessary to:
If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, information may be transferred as part of that transaction, subject to appropriate safeguards.
We may share limited information with service providers that help us operate the Services, such as hosting, logging, monitoring, analytics, and crash reporting providers. These providers may process data only on our instructions and for the purposes described in this policy.
We retain information for as long as needed to provide the Services and for legitimate business purposes such as security, compliance, dispute resolution, and audit requirements. Retention periods can vary based on:
If you use Kivira through a Customer, the Customer may control certain retention settings.
We use reasonable administrative, technical, and physical safeguards designed to protect information from unauthorized access, use, or disclosure. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
Depending on where you live and how you use the Services, you may have rights to:
If you use Kivira through a Customer, you may need to route certain requests through that Customer. We will respond to requests in accordance with applicable law.
To submit a request, contact us at: hello@kivira.health.
The Services are not intended for people under 18. If you believe a child has provided us information without appropriate authorization, contact us and we will take appropriate steps.
Kivira may process information in countries other than where you live (for example, where our service providers operate). Where required, we use appropriate safeguards for cross-border transfers.
We may update this Privacy Policy from time to time. We will post the updated version and update the "Last updated" date. If changes are material, we may provide additional notice through the Services or by other means.