Privacy Policy
Effective date: June 30, 2026
This Privacy Policy explains how RealDocAI, Inc. ("RealDocAI," "we," "us," or "our") collects, uses, discloses, and protects information through Flourish App and related websites, applications, and services (collectively, the "Services"). Clinical services are provided by Heather Hirsch MD PLLC, an independent affiliated medical practice. This Privacy Policy is incorporated into our Terms of Service.
Please read this Privacy Policy carefully. If you do not agree with this Privacy Policy, do not access or use the Services.
1. Health Information
RealDocAI may act as a business associate under the Health Insurance Portability and Accountability Act of 1996 and its implementing regulations ("HIPAA") when we create, receive, maintain, or transmit protected health information on behalf of covered entities, including healthcare providers. In those cases, we handle protected health information in accordance with applicable Business Associate Agreements and applicable law.
Protected health information used or disclosed by Heather Hirsch MD PLLC is also described in the Notice of Privacy Practices.
2. Information We Collect
Information You Provide
We may collect information you provide directly, including name, email address, mobile phone number, account credentials, contact information, address, payment-related information submitted through our payment processor, intake responses, health-related information you choose to provide, communications with us, and information submitted through forms, app features, support requests, or account settings.
If you provide professional, identity, or eligibility information, we may collect information necessary to verify your identity, account status, or eligibility to use particular Services.
Information Collected Automatically
We may collect information automatically when you use the Services, including device type, operating system, browser type, browser language, internet service provider, domain name, IP address, device identifiers, mobile advertising identifiers where enabled, referring website, pages or screens viewed, features used, dates and times of access, log data, app activity, and approximate location derived from IP address or device settings.
Cookies and Similar Technologies
We and our service providers may use cookies, pixels, SDKs, and similar technologies to operate the Services, maintain sessions, remember preferences, understand usage, improve performance, and support security. You can adjust browser or device settings to limit cookies or similar technologies, though some features may not work correctly.
Information From Third Parties
We may receive information from healthcare providers, health plans, affiliated medical practices, service providers, identity verification services, payment processors, and other sources when needed to provide, secure, or support the Services. We may also receive information when you interact with us through third-party platforms according to your privacy settings on those platforms.
3. How We Use Information
We use information to provide, operate, administer, and troubleshoot the Services; create and maintain accounts; verify identity and account access; support clinical workflows; process purchases and payments; respond to inquiries and support requests; provide information you request; analyze usage patterns and performance; improve the Services; conduct internal research, reporting, and analytics; maintain security and audit trails; comply with law, including HIPAA where applicable; enforce our Terms of Service and Business Associate Agreements; and protect RealDocAI's legal rights, property, users, providers, and Services.
We may use de-identified or aggregated information for analytics, service improvement, research, reporting, and other lawful purposes where permitted by law and applicable agreements. We do not attempt to re-identify de-identified information except as permitted by law.
AI Technology
The Services may include artificial intelligence features that process information you provide to support health education, symptom tracking, documentation, or user-requested functionality. AI-related processing is used to provide and improve the Services, maintain quality and safety, and support compliance. Where protected health information is involved, we process it according to applicable Business Associate Agreements and HIPAA requirements.
4. SMS and Mobile Information
If you provide a mobile phone number for account creation, login, or account security, we may use that number to send transactional verification code texts, two-factor authentication messages, and related account security messages. Message frequency varies. Message and data rates may apply. You may reply STOP to opt out or HELP for help.
We do not sell or share mobile opt-in information or SMS consent with third parties for their marketing or promotional purposes. We may disclose mobile information to service providers that help us send transactional verification and account security messages, but they may use that information only to provide services to us.
5. How We Disclose Information
We may disclose information to contractors, service providers, and other third parties that help us operate and secure the Services, including hosting, analytics, customer support, payment processing, identity verification, messaging, technical operations, security, audit, and compliance providers. These parties may use information only to provide services to us or as otherwise permitted by law and contract.
We may disclose information to healthcare providers and affiliated medical practices involved in your care, including Heather Hirsch MD PLLC, when needed to facilitate clinical services, care coordination, recordkeeping, payment, or healthcare operations.
We may disclose information to comply with court orders, subpoenas, legal process, regulatory obligations, or applicable law; to enforce our Terms of Service or Business Associate Agreements; to protect the rights, property, safety, or security of RealDocAI, the Services, users, providers, or others; or in connection with a merger, acquisition, financing, restructuring, reorganization, dissolution, or sale of assets.
We do not sell personal information, and we do not disclose personal information to third parties for their independent marketing or lead-generation purposes.
6. Analytics
We may use analytics providers to understand how users use the Services, diagnose performance issues, and improve usability and effectiveness. Analytics providers may collect information such as device information, pages or screens viewed, feature usage, and referring sources. We use analytics for service operations and improvement, not to sell personal information.
7. Your Data Rights and Choices
Depending on your jurisdiction and the type of information involved, you may have the right to request information about personal information we collect, access or receive a copy of personal information, correct or update personal information, request deletion of certain personal information, restrict or object to certain uses, or opt out of certain processing activities.
You may opt out of non-essential marketing emails by following unsubscribe instructions or contacting us. We may still send transactional, security, legal, or service-related messages. To exercise privacy rights, contact us at support@joinflourish.app. We will not discriminate against you for exercising legally available privacy rights.
8. Do Not Track
We do not currently recognize or respond to browser-initiated Do Not Track signals because there is no industry-wide framework for responding to those signals.
9. Information Security
We use administrative, technical, and physical safeguards designed to protect the confidentiality, integrity, and availability of information, including protected health information where applicable. No method of transmission over the Internet or electronic storage is completely secure, and we cannot guarantee absolute security.
10. Data Retention
We retain information for as long as needed to provide the Services, comply with legal obligations, resolve disputes, enforce agreements, support security, and meet clinical, healthcare, tax, audit, or business recordkeeping requirements. Protected health information and clinical records may be retained as required by HIPAA, state law, and applicable agreements.
11. International Transfers
Information collected through the Services may be stored and processed in the United States or other countries where RealDocAI or its service providers operate. We take steps designed to protect information according to applicable law and contractual requirements.
12. Children's Privacy
The services are not intended for children under 18, and we do not knowingly collect personal information from children under 18.
13. Third-Party Websites and Services
The Services may contain links to third-party websites or services. This Privacy Policy does not cover the information practices of third-party websites or services. We encourage you to review their privacy policies before providing information to them.
14. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will post the updated policy with a new effective date.
15. Contact Us
Questions about this Privacy Policy may be sent to support@joinflourish.app.