Privacy Policy

1. Who We Are

MyHealthAlly, LLC ("MyHealthAlly," "we," "our," or "us") operates the Lina'la platform at www.myhealthally.com and www.linahla.com. We provide multilingual health communication tools that connect patients and healthcare providers across Pacific Island communities.

Contact us at: privacy@myhealthally.com

2. Information We Collect

We collect information you provide directly:

• Account information: name, email address, password
• Health information: symptoms, vitals, medications, documents you upload, voice recordings you submit
• Device permissions you grant: camera (for medical documents), microphone (for voice symptom input), biometric authentication (Face ID / fingerprint to protect your data)
• Apple Health data (iOS only): vitals and health metrics you choose to sync — only with your explicit permission
• Provider information: clinic name, professional credentials, contact details
• Usage data: pages visited, features used, error logs (no personally identifiable health information included)

3. How We Use Your Information

• To provide and improve the Lina'la platform
• To translate your health communications from your preferred language into English for your care team
• To connect you securely with your care team
• To send transactional notifications (appointment reminders, care team messages)
• To comply with applicable law and professional standards

We do not sell your personal information or health data to third parties. We do not use your health data for advertising purposes.

4. HIPAA and Health Information

MyHealthAlly is designed to support HIPAA-compliant workflows. We sign Business Associate Agreements (BAAs) with covered entities and their providers. Health information you enter is stored securely and is accessible only to you and the providers you explicitly connect with.

To request a BAA, contact privacy@myhealthally.com.

5. Third-Party Services

We use the following sub-processors to operate the platform:

• Supabase — secure database and authentication (SOC 2 Type II)
• Anthropic (Claude AI) — multilingual translation of patient communications (BAA available)
• AssemblyAI — voice transcription for symptom input (HIPAA BAA signed)
• Stripe — payment processing (PCI DSS Level 1; Stripe does not see your health data)
• Resend — transactional email delivery

No health data is shared with any sub-processor beyond what is necessary to deliver the service.

6. Camera, Microphone, and Biometrics

The Lina'la app requests access to your camera, microphone, and biometric authentication only when you use those features. Camera access is used solely to photograph medical documents you choose to share. Microphone access is used solely for voice symptom input you initiate. Biometric data (Face ID, fingerprint) is processed entirely on your device — it is never transmitted to our servers or any third party.

7. Data Retention

We retain your account and health data for as long as your account is active or as needed to provide services. You may request deletion of your account and associated data at any time by emailing privacy@myhealthally.com. Health records may be retained for the period required by applicable law even after account deletion.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Request deletion of your data
• Obtain a copy of your data in a portable format
• Object to or restrict certain processing

To exercise any of these rights, contact privacy@myhealthally.com.

9. Security

We use industry-standard encryption in transit (TLS 1.2+) and at rest (AES-256). Access to health data is restricted by role-based controls and row-level security policies. Biometric authentication is handled entirely on-device. We conduct regular security reviews and promptly address vulnerabilities.

10. Children's Privacy

Lina'la is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us immediately at privacy@myhealthally.com.

11. Changes to This Policy

We may update this policy periodically. We will notify registered users by email of material changes. Continued use of the platform after changes constitutes acceptance of the revised policy.

12. Contact

Questions about this policy? Email us at privacy@myhealthally.com or write to:
MyHealthAlly, LLC — Privacy Officer
privacy@myhealthally.com