Privacy policy

Who we are

Wick (“we”) is an app for home medical equipment providers and their patients. In Wick you see your account with your home medical equipment provider (“your provider”).

Your provider is a “covered entity” under the HIPAA law. We handle your health information for them, as their “business associate”, under a written agreement. Your provider’s Notice of Privacy Practices also applies to you.

What we collect

From your provider’s records: your name, birth date, mobile number, equipment, orders, bills, and where your paperwork stands.

From you: your mobile number and birth date when you sign in; requests, messages and photos you choose to send; questions you type into Help; the names and mobile numbers of people you add as helpers; and your choices, like language and notifications.

From your phone: the public part of your face or fingerprint sign-in key (your face and fingerprint never leave your phone), the address for notifications if you turn them on, and basic security logs such as the time and network address of a sign-in.

How we use it

Only to run Wick and to serve you for your provider: to show your information, send your requests to their staff, keep your account secure, and meet legal duties.

We do not sell your information. We do not show ads. We do not track you across other apps or websites, and Wick contains no advertising or analytics code.

Help and AI

Questions you type into Help are answered by fixed rules. We may also test an AI model that writes draft answers for staff to review; patients do not see these drafts. The AI runs inside our cloud provider, Amazon Web Services, under a business associate agreement, and receives only the words you typed, never your name or records.

Who we share it with

Your provider and its staff, so they can serve you.

Companies that run parts of Wick for us under contracts that protect your information: Amazon Web Services (hosting), Twilio (text messages), and Apple and Google (they deliver notifications, which only say “You have an update”).

People you add as helpers, and only the parts you choose.

Others only when the law requires it.

How we protect it

Your information is encrypted when it travels and when it is stored, with extra encryption on personal details. Access is limited and logged.

How long we keep it

Words typed into Help are deleted after 90 days. When you delete your account, your sign-ins, helpers, notification settings and Help words are deleted right away. Records your provider must keep by law, such as requests sent to their staff, are kept as the law requires (usually six years).

Your choices and rights

You can turn notifications on or off, reply STOP to texts, remove helpers, and delete your account at any time in the app.

To see or get a copy of your health records, or to ask for a correction, contact your provider; these rights come from HIPAA and your provider’s Notice of Privacy Practices.

Children

Wick is for patients and the people who help them. It is not meant for children under 13 to use on their own; a parent or guardian may manage a child’s equipment.

Changes

If we change this policy, we will update the date above and, for important changes, tell you in the app.

Contact

Email: privacy@wickhealth.app