Privacy Policy
Eddii, Inc. and Eddii-Care PLLC
Last updated: October 20, 2026
1. Introduction
eddii, Inc. ("eddii," "we," "us," or "our") respects your privacy and is committed to protecting your personal information.
This Privacy Policy explains how we collect, use, maintain, protect, and disclose information when you access our websites, mobile applications, patient portals, and related services.
Our services include:
-
The eddii mobile application, which offers diabetes management tools, health tracking, education, and related features.
-
Our websites, including www.eddiihealth.com and www.eddii.care.
-
Virtual endocrinology services for adults and children, provided through Eddii-Care PLLC and its healthcare professionals.
-
Patient registration, appointment scheduling, intake, messaging, and other related healthcare services.
References to "eddii" in this policy include eddii, Inc. and Eddii-Care PLLC, as applicable to the services being provided.
Certain information collected in connection with clinical care may constitute protected health information ("PHI") under the Health Insurance Portability and Accountability Act of 1996 ("HIPAA"). Such information is subject to applicable HIPAA requirements and the clinical provider's Notice of Privacy Practices.
This Privacy Policy supplements, but does not replace, any applicable HIPAA Notice of Privacy Practices.
2. Information We Collect
Depending on how you interact with our services, we may collect the following categories of information.
Personal and Contact Information
-
Full name
-
Date of birth and age
-
Email address
-
Telephone number
-
Residential address and state of residence
-
Account registration and login information
-
Parent or legal guardian information, where applicable
Health and Medical Information
When you use our healthcare services, we may collect information necessary to facilitate and provide clinical care, including:
-
Medical history and diagnoses
-
Symptoms and health concerns
-
Medications and prescriptions
-
Allergies and relevant health conditions
-
Laboratory results and medical records
-
Continuous glucose monitoring (CGM) and other connected-device data
-
Appointment and consultation information
-
Clinical communications and treatment plans
-
Responses to medical questionnaires and intake forms
Insurance and Payment Information
We may collect information necessary for insurance verification, billing, and payment processing, including insurance provider details, member identification numbers, billing information, and transaction records.
Payment information may be processed by authorized third-party payment processors.
Technical and Usage Information
When you interact with our websites or mobile applications, we may collect:
-
IP address
-
Browser type and operating system
-
Device identifiers
-
Website and application usage information
-
Cookies and similar technologies
-
General location information
-
Technical logs and performance information
Where permitted, we may also collect information through integrated devices and third-party services that you choose to connect to the eddii application.
3. How We Collect Information
We collect information through several methods.
Directly from you: When you register for an account, complete onboarding forms, schedule appointments, communicate with our team, use the mobile application, or provide information during clinical consultations.
From healthcare providers and authorized partners: When information is shared with us for treatment, care coordination, referrals, insurance verification, or other authorized purposes.
From connected devices and applications: When you authorize integrations with continuous glucose monitors or other compatible health technologies.
Automatically: Through cookies, analytics tools, and other technologies used to operate, secure, and improve our websites and applications, subject to applicable privacy requirements.
4. How We Use Your Information
We use personal information for legitimate business and healthcare purposes, including to:
-
Create and manage user accounts.
-
Verify patient identity and geographic eligibility for telehealth services.
-
Schedule and manage healthcare appointments.
-
Provide virtual endocrinology consultations and related clinical services.
-
Support medical decision-making, treatment, and care coordination.
-
Maintain electronic health records.
-
Communicate with patients about appointments, treatment, prescriptions, and follow-up care.
-
Process insurance claims, billing, and payments.
-
Provide technical and customer support.
-
Maintain and improve our websites, applications, and services.
-
Monitor service performance, quality, and security.
-
Comply with applicable legal and regulatory requirements.
-
Send marketing communications where permitted by law and applicable patient preferences or authorizations.
Where HIPAA applies, we use and disclose PHI only as permitted or required by applicable law or as authorized by the patient.
5. Electronic Health Records and Healthie
eddii uses Healthie, a third-party electronic health record (EHR) and healthcare technology platform, to support the delivery and administration of our clinical services.
Healthie supports activities such as:
-
Patient registration and onboarding
-
Collection and maintenance of medical information
-
Appointment scheduling
-
Clinical documentation
-
Secure patient-provider communications
-
Care coordination
-
Billing and administrative workflows
Patient information processed through Healthie is subject to applicable privacy and security requirements and the relevant contractual arrangements between eddii and Healthie.
Although Healthie provides technology infrastructure for managing clinical information, eddii and its clinical providers remain responsible for their own applicable privacy and healthcare compliance obligations.
6. Disclosure of Personal Information
We may disclose information to the following categories of recipients when appropriate and legally permitted.
Healthcare professionals: Including physicians, nurse practitioners, diabetes educators, and other authorized professionals involved in providing or coordinating care.
Healthcare technology providers: Including Healthie and other vendors supporting electronic health records, scheduling, communications, infrastructure, and related services.
Insurance companies and payment administrators: For eligibility verification, claims processing, billing, reimbursement, and payment activities.
Healthcare partners: Including referring providers, laboratories, pharmacies, and other entities involved in patient care, where permitted.
Service providers: Including vendors providing technical support, hosting, security, analytics, communications, or operational services, subject to applicable contractual and legal requirements.
Regulatory and legal authorities: When disclosure is required or permitted by law.
Corporate successors: In connection with a merger, acquisition, restructuring, or similar transaction, subject to applicable privacy protections and legal requirements.
Other recipients authorized by you: When you direct or authorize a disclosure.
Where required by HIPAA, we enter into appropriate Business Associate Agreements with service providers that handle PHI on our behalf.
We do not permit the use or disclosure of PHI for advertising or other marketing purposes except as permitted by applicable law or pursuant to a valid authorization when required.
7. HIPAA and Protected Health Information
Clinical information maintained by Eddii-Care PLLC or its authorized healthcare providers may be subject to HIPAA.
When HIPAA applies, patients have rights concerning their PHI, which may include the right to:
-
Request access to their medical records.
-
Request corrections to certain medical information.
-
Request restrictions on certain uses and disclosures.
-
Request confidential communications.
-
Receive an accounting of certain disclosures.
-
Obtain a copy of the applicable Notice of Privacy Practices.
-
File a privacy complaint without retaliation.
These rights are subject to applicable legal requirements and exceptions.
Additional information about PHI, permitted uses and disclosures, and patient rights is provided in the applicable HIPAA Notice of Privacy Practices, which should be made available separately.
8. Patient Consent and Telehealth Services
Patients using eddii's virtual endocrinology services are required to complete applicable onboarding and consent procedures.
These may include:
-
Telehealth Informed Consent
-
Cancellation Policy
-
HIPAA-related agreement or acknowledgment
-
Financial Agreement
-
Electronic Communication Consent
Patients may be required to provide information about their location to determine whether healthcare services are available in their jurisdiction.
Availability of clinical services depends on applicable geographic, professional licensure, and other regulatory requirements.
Patient consent to telehealth treatment does not replace any separate authorization required for particular uses or disclosures of health information.
9. Cookies, Analytics, and Advertising
Our websites and applications may use cookies and similar technologies to support essential functionality, analyze performance, improve the user experience, and measure the effectiveness of marketing activities.
These technologies may collect information about browser settings, device characteristics, page interactions, and website usage.
We may use third-party analytics and advertising services, subject to applicable legal requirements.
We recognize that information collected through healthcare websites, patient portals, or mobile applications may be sensitive and, in certain circumstances, may constitute PHI.
Where applicable, we restrict the collection and disclosure of PHI through tracking technologies in accordance with HIPAA and other relevant privacy laws.
We do not rely solely on acceptance of this Privacy Policy or a cookie banner as authorization to disclose PHI when HIPAA requires a separate authorization.
Users may manage certain cookies through their browser settings. Additional privacy choices may be available through the relevant application or by contacting us.
10. Data Security
We implement administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, disclosure, alteration, and destruction.
These safeguards may include access controls, authentication requirements, secure communications, vendor oversight, and other security measures appropriate to the information being processed.
Access to patient information is limited to authorized individuals and service providers with a legitimate need to access that information.
We also rely on third-party technology providers, including Healthie, to implement appropriate security measures within their respective systems.
No electronic system or method of transmitting information over the internet can be guaranteed to be completely secure.
If a security incident involving personal information occurs, we will assess and respond to the incident in accordance with applicable legal and regulatory requirements.
11. Data Retention
We retain personal information for as long as reasonably necessary to provide services, maintain records, fulfill contractual obligations, comply with legal requirements, resolve disputes, and support legitimate business operations.
Medical records and other clinical information may be subject to specific federal and state retention requirements.
Retention periods may differ depending on the type of information, the services provided, and applicable laws.
When information is no longer required, we take appropriate steps to delete, de-identify, or otherwise securely dispose of it, subject to applicable retention obligations.
12. Your Privacy Rights and Choices
Depending on your location, the type of information involved, and applicable law, you may have rights to request access to, correction of, or deletion of certain personal information.
You may also have rights concerning marketing communications, certain data processing activities, and the disclosure of personal information.
Requests involving medical records or PHI will be handled in accordance with HIPAA and other applicable healthcare privacy laws.
Certain requests may be limited by legal obligations, including medical record retention requirements.
To submit a privacy-related request, please contact us using the information in Section 16.
13. Children's Privacy
eddii provides certain services for children and adolescents, including pediatric endocrinology services.
For clinical services involving minors, personal and health information may be collected and processed as necessary to provide care, subject to applicable federal and state laws governing minors, parental consent, confidentiality, and medical information.
Parents or legal guardians may be required to establish accounts, provide information, or complete consent documentation on behalf of minors, depending on the service and applicable law.
Our mobile application may also offer features intended for use by children under appropriate parental or guardian supervision.
We handle information concerning children in accordance with applicable privacy requirements, including the Children's Online Privacy Protection Act (COPPA) where applicable.
14. Third-Party Websites and Services
Our websites and applications may contain links to third-party websites, applications, and services.
These third parties may maintain their own privacy policies and practices.
We encourage users to review the privacy policies of third-party services before providing personal information.
This section does not limit our responsibilities under HIPAA or other applicable laws when third parties process information on our behalf.
15. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our services, technology, legal obligations, or privacy practices.
When changes are made, we will publish the revised policy on our website and update the effective date.
Where required by law, we will provide additional notice or obtain appropriate consent or authorization.
16. Contact Information
If you have questions about this Privacy Policy, our privacy practices, or your personal information, please contact:
eddii, Inc. / Eddii-Care PLLC
Email: support@eddiihealth.com
Website: www.eddiihealth.com
Patient services: www.eddii.care
For requests relating to protected health information, patients may also contact our team to obtain information about the appropriate privacy contact and procedures described in the applicable HIPAA Notice of Privacy Practices.