Privacy Policy

Introduction

Threaded Care (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information.

A Special Note on Health Data (PHI)

We are a healthcare platform. Any medical information you provide to us for diagnosis or treatment is considered Protected Health Information (PHI). This data is governed by the Health Insurance Portability and Accountability Act (HIPAA).

• We do not sell your PHI.

• We do not use your PHI for advertising purposes.

• We encrypt your PHI at rest and in transit.

Information We Collect

1. Personal Information

– Name and contact information

– Account credentials

– Profile information

– Phone number (if you opt in to SMS notifications)

– Healthcare provider information (if applicable)

1. Usage Data

– Log data and device information

– Cookies and similar technologies

– Analytics data

1. SMS Consent Data

If you opt in to SMS notifications, we collect and store:

– Your phone number (normalized to E.164 format)

– Your opt-in/opt-out status and timestamp

– The source of your consent (e.g., signup page, account settings)

1. How We Use Your Information

We use the information we collect to:

– Provide, maintain, and improve our services

– Process your transactions

– Send you technical notices and support messages

– Send SMS notifications including reminders and care-related alerts (only if you have opted in)

– Respond to your comments and questions

– Protect against fraudulent or illegal activity

1. SMS Notifications

Threaded Care offers an optional SMS notification service for reminders and care-related alerts. This service is entirely optional and not required to use the platform.

Mobile opt-in data and consent will not be shared with, sold to, or transferred to any third parties or affiliates for marketing or promotional purposes at any time. This includes your mobile phone number and SMS consent status.

Consent and Opt-In

We only send SMS messages to users who have explicitly opted in. SMS notifications are entirely optional and not required to use our platform. You may opt in during account registration or at any time in your account settings.

Message Content

In compliance with HIPAA, we never include Protected Health Information (PHI) in SMS messages. All text messages are limited to generic, non-clinical notifications such as reminders and care-related alerts.

Message Frequency

Message frequency varies depending on your appointments and account activity.

Costs

Message and data rates may apply. Contact your wireless carrier for details about your text messaging plan.

Opt-Out

You may opt out of SMS notifications at any time by replying STOP to any message or by disabling SMS in your account settings. After opting out you will receive a single confirmation message and no further texts.

Help

Reply HELP to any message for support information, or contact us at support@threaded.care.

Information Sharing

We do not sell your personal information. We may share your information with:

– Service providers who assist in our operations (see Vendors below)

– Legal authorities when required by law

– Other parties with your consent

Vendors and Business Associates

We use the following third-party service providers, each bound by appropriate HIPAA compliant data protection agreements (BAA):

Vendor – Purpose

1. AWS (Amazon Web Services) – Cloud hosting and infrastructure

2. Supabase – Database and authentication

3. Twilio – SMS message delivery

4. Paubox – Email delivery

Twilio processes your phone number solely to deliver SMS notifications on our behalf. Your phone number is not shared with Twilio for any purpose other than message delivery. Twilio is contractually prohibited from using your data for their own purposes.

Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

– Encryption of data at rest and in transit

– Phone numbers stored in normalized E.164 format with access controls

– SMS consent status tracked with audit timestamps

Cookies and Tracking

We may use cookies on our public marketing pages to understand visitor traffic. However, once you log in to the secure patient portal, advertising trackers are disabled to protect your medical privacy.

Your Rights

You have the right to:

– Access your personal information

– Correct inaccurate data

– Request deletion of your data

– Object to processing of your data

– Export your data

– Opt out of SMS notifications at any time

Children’s Privacy

Our service is not intended for children under 13 years of age.

This refers to account holders. Parents and guardians may use the platform to manage health information for their minor children.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page.

Contact Us

If you have questions about this Privacy Policy, please contact us at:

– Email: privacy@threaded.care

Last Updated: 2026-04-12