Privacy Policy

Our privacy commitment

Path in View does not sell personal or health information or disclose it to advertisers, data brokers, or unrelated companies. We disclose information only to service providers needed to operate Path in View, to a care provider or export recipient you choose, or when disclosure is required by law. Service providers act for Path in View under contractual restrictions and may not use your information for their own advertising.

1. Scope

This policy applies to the Path in View website, application, and related communications in the United States. Our separate Consumer Health Data Privacy Policy provides additional information and rights for health information.

Path in View is a consumer service. It is not automatically governed by HIPAA simply because it stores health information. If we provide a service on behalf of a health care organization under a separate agreement, that organization's notice and the applicable agreement may also apply.

2. Information we collect

• Account information: name, email address, password credential or social sign-in identifier, role, and account settings.
• Health and wellness information: trackers, ratings, symptoms, habits, measurements, medications, doses, notes, targets, daily entries, and related dates and times.
• Connection information: invitations, care-provider relationships, sharing choices, suggestions, and revocation history.
• Technical and security information: IP address, browser or device information, session records, request timestamps, and security and audit events.
• Communications: support messages and transactional email delivery records.

3. Sources of information

We receive information directly from you, from people you choose to connect with, from your sign-in provider when you use social sign-in, and automatically from your device when you use the service. A care provider may add suggestions or provider-facing notes within an active connection.

4. How we use information

• provide trackers, trends, exports, medication records, and account features;
• apply your sharing and connection choices;
• authenticate users, prevent misuse, and protect the service;
• send account, invitation, verification, and security communications;
• debug and improve performance using information limited to what is necessary;
• comply with law and enforce our Terms.

We do not use your health information for targeted advertising, and we do not sell personal or consumer health data.

5. When information is disclosed

• At your direction: to a care provider you connect with or another recipient you select for an export.
• Service providers: vendors that host data, deliver email, provide authentication, monitor security, or otherwise process information for us under contractual restrictions.
• Legal and safety reasons: when reasonably necessary to comply with law, protect rights and safety, or investigate fraud or a security incident.
• Business changes: as part of a merger, financing, reorganization, or sale, subject to appropriate confidentiality and notice where required.

Transactional email and authentication providers receive only the account information needed to perform those services. We do not put journal entries, symptoms, measurements, medication records, health notes, trends, or reports in transactional emails.

6. Retention and deletion

We retain account and health information while your account is active and as needed to provide the service. You can request permanent account deletion from your Profile. We send a one-hour confirmation link to the account's verified email address; opening the link does not delete anything until you confirm on the review page.

Once confirmed, deletion removes your profile, authentication methods, active sessions, health and wellness records, daily entries, notes, trackers, targets, medications, settings, invitations, consent records, and care-provider relationships from our active database. The removal of a relationship ends future access through Path in View. Information another person previously viewed or lawfully retained outside Path in View cannot be recalled by deleting your account.

We instruct applicable processors to delete associated information. Residual copies may remain temporarily in encrypted backups until the normal backup rotation completes. During that period, backup data is isolated from ordinary use and will not be restored except for disaster recovery or security needs. We may retain narrowly limited information when legally required, but we will not use it for another purpose.

7. Security

We use administrative, technical, and organizational safeguards designed to protect personal information, including access controls, encrypted transmission, protected storage, and security monitoring. No method of storage or transmission is completely secure.

8. Your choices and rights

Depending on where you live, you may have rights to know, access, correct, export, or delete information and to withdraw consent. Path in View provides controls for export, connection revocation, and complete account deletion. You may also email privacy@pathinview.com. We may need to verify your identity before completing a request. We will not discriminate against you for exercising a privacy right.

9. Children

Path in View is not intended for anyone under 18. We do not knowingly collect personal information from children. Contact us if you believe a person under 18 has provided information to the service.

10. Changes and contact

We may update this policy as the service or law changes. We will provide prominent notice and request renewed consent when required by law. For privacy questions, requests, or appeals, contact privacy@pathinview.com.