This Policy explains what information BettrAi collects, how we use it, with whom we share it, and your rights regarding that information. We do not sell your personal or health information.
Questions? Contact us at support@bettrai.com.
BettrAi, LLC (“BettrAi,” “we,” “us,” or “our”) is committed to protecting the privacy and security of the individuals who use the BettrAi mobile application and related services (collectively, the “Services”). This Privacy Policy (“Policy”) describes how we collect, use, disclose, and safeguard information about you when you access or use the Services.
This Policy applies to all users of the BettrAi mobile application, website (bettrai.com), and any associated platform features or integrations. It does not apply to third-party applications, websites, or services that may be linked from within the Services.
By accessing or using the Services, you acknowledge that you have read, understood, and agree to the practices described in this Policy. If you do not agree with this Policy, please do not use the Services.
The Services are intended for users who are 18 years of age or older. BettrAi does not knowingly collect personal information from individuals under the age of 18 except as expressly provided in Section 9 (Minor Users and Parental Access) of this Policy.
We collect information you provide directly to us, information generated automatically when you use the Services, and, where applicable, information received from healthcare providers or other authorized third parties.
The Services are designed to collect and process health and wellness information, which may include:
This information constitutes Protected Health Information (“PHI”) under the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) when BettrAi functions as a Business Associate or Covered Entity in connection with your healthcare providers. Please refer to Section 4 for our HIPAA-specific disclosures.
When you use the Services, we and our service providers may automatically collect certain technical and usage information:
BettrAi does NOT collect biometric identifiers such as fingerprints, facial geometry, voice prints, or retinal scans for authentication or identification purposes. Biometric authentication (such as Face ID or Touch ID) is handled entirely by your device's operating system and is not accessible to BettrAi.
With your authorization, we may receive information from:
We use the information we collect for the following purposes:
BettrAi does NOT use your personal health information, Protected Health Information (PHI), or individually identifiable data to train artificial intelligence or machine learning models without your separate, explicit written consent.
When you submit feedback, ratings, or suggestions through the Services, you grant BettrAi a license to use that feedback to improve the Services. However, any feedback that contains health information is treated as PHI under Section 4 of this Policy and is subject to all applicable HIPAA protections.
BettrAi takes the privacy and security of your health information with the utmost seriousness. Where BettrAi functions as a Business Associate (as defined under HIPAA, 45 CFR Parts 160 and 164) in connection with a Covered Entity (such as your healthcare provider), our collection, use, and disclosure of your Protected Health Information is governed by applicable Business Associate Agreements (“BAAs”) in addition to this Policy.
BettrAi may use or disclose your PHI only as permitted or required by HIPAA, including:
BettrAi applies the HIPAA minimum necessary standard — we limit our access to and use of PHI to the minimum amount necessary to accomplish the intended purpose.
BettrAi implements administrative, physical, and technical safeguards consistent with the HIPAA Security Rule (45 CFR Part 164, Subpart C) to protect the confidentiality, integrity, and availability of electronic PHI (“ePHI”). BettrAi has achieved SOC 2 Type 2 certification, and our security controls are subject to ongoing independent audit.
In the event of a breach of unsecured PHI, BettrAi will provide notification to affected individuals, and where applicable, to Covered Entity clients, in accordance with the HIPAA Breach Notification Rule (45 CFR Part 164, Subpart D). Individual notifications will be provided without unreasonable delay and in no case later than 60 calendar days following the discovery of a breach.
If BettrAi holds PHI about you in a designated record set, you may have the following rights under HIPAA (subject to applicable exceptions):
To exercise your HIPAA rights, please contact us at support@bettrai.com or at the address listed in Section 14. We will respond to requests within the timeframes required by applicable law.
The Services incorporate artificial intelligence and machine learning technologies to provide personalized health insights, recommendations, and features. This section describes how those technologies interact with your information.
AI-generated content within the Services is informational only and does not constitute medical advice, diagnosis, or treatment. Always consult a qualified healthcare provider for medical decisions. BettrAi does not guarantee the accuracy, completeness, or clinical validity of any AI-generated output.
As stated in Section 3, BettrAi does not use your personal health information or PHI to train AI or machine learning models without your explicit separate consent. Model improvements are based on de-identified, aggregated data only, consistent with applicable law.
BettrAi does not sell, share, or otherwise provide personal information collected through our platform to third parties for the purpose of training artificial intelligence or machine learning models, including large language models (LLMs). To the extent BettrAi utilizes AI-assisted tools internally, such tools are subject to our data security standards and are not permitted to use personal information for model training purposes.
BettrAi does not sell, rent, or trade your personal information or health information to third parties for monetary or other valuable consideration. We do not share your information with third parties for their own marketing purposes.
We may share your information in the following limited circumstances:
We engage trusted third-party vendors (“Service Providers”) who perform functions on our behalf, such as cloud infrastructure hosting, analytics, customer support, and security services. These vendors are contractually obligated to protect your information and may not use it for their own purposes. Where a Service Provider processes PHI on our behalf, we enter into a HIPAA-compliant Business Associate Agreement.
With your explicit authorization, we may share your health information with the healthcare providers, care teams, or health systems you designate through the Services. You may modify or revoke these authorizations at any time through your account settings or by contacting support@bettrai.com.
We may disclose information when we believe in good faith that disclosure is necessary to:
In the event of a merger, acquisition, reorganization, sale of assets, or similar transaction, your information may be transferred to the successor entity, subject to the same privacy protections described in this Policy. We will notify you of any such transfer and any material changes to privacy practices that may result.
We may share aggregated or de-identified data that cannot reasonably identify any individual for research, analytics, reporting, or other lawful purposes. Such data is not subject to this Policy.
BettrAi retains your personal information and health data for as long as necessary to provide the Services, comply with our legal obligations, resolve disputes, enforce agreements, and fulfill the purposes described in this Policy.
Retained for the duration of your account, plus 7 years following account termination or deletion, consistent with applicable healthcare recordkeeping requirements.
Retained in accordance with applicable federal and state healthcare recordkeeping laws (generally a minimum of 7 years from the date of service for adult records). Texas state law may require longer retention periods for certain record types.
Generally retained for up to 12 months in identifiable form; may be retained longer in de-identified or aggregated form for analytics.
Support communications and correspondence retained for 3 years following resolution.
Backup or archival copies of your data may persist for up to 90 days following deletion or account termination before being purged from all backup systems.
To request deletion of your account and associated data, please contact us at support@bettrai.com. Note that we may be required to retain certain information notwithstanding your deletion request to comply with legal obligations or to resolve outstanding disputes.
Depending on your state of residence and the nature of your information, you may have the following rights. BettrAi will respond to verified requests within the timeframes required by applicable law, and will not discriminate against you for exercising your privacy rights.
If you are a resident of Texas, you have rights under the Texas Data Privacy and Security Act (“TDPSA”), Texas Business & Commerce Code Chapter 541. These rights include the right to confirm whether we process your personal data, access and correct that data, request deletion, obtain a portable copy, and opt out of the sale of personal data (we do not sell), targeted advertising based on your personal data, and profiling in furtherance of solely automated decisions that produce legal or similarly significant effects.
To submit a Texas TDPSA request, please contact us at support@bettrai.com with the subject line "Texas Privacy Request." We will respond within 45 days, with one 45-day extension where reasonably necessary. If we decline your request, you may appeal by submitting a written appeal to support@bettrai.com.
To exercise any of the rights described in this Section, please contact us at:
We may ask you to verify your identity before processing your request. We will not use information provided solely for identity verification for any other purpose.
The Services are intended for users who are 18 years of age or older. BettrAi does not knowingly solicit, collect, or maintain personal information from individuals under the age of 18, except as described below.
BettrAi recognizes that parents and legal guardians may have rights to access their minor children's health information under applicable law, including HIPAA. Where BettrAi's platform is used in a context that involves the health data of a minor child (for example, a parent managing a child's health records through an authorized account), such access will be facilitated in accordance with:
Parents or guardians seeking access to minor health data through the Services should contact support@bettrai.com to initiate an authorized access request. BettrAi reserves the right to verify the identity and relationship of the requesting party before granting access.
BettrAi does not knowingly collect personal information from children under the age of 13 for any purpose. If we become aware that we have inadvertently collected personal information from a child under 13, we will promptly delete such information. If you believe we may have collected information from a child under 13, please contact us at support@bettrai.com.
BettrAi and our service providers use cookies, pixel tags, SDKs, and similar technologies to operate and improve the Services, analyze usage, and for security purposes.
Required to operate core Service functionality, including authentication and session management. Cannot be disabled without impairing Service operation.
Collect aggregated, anonymized data about how users interact with the Services (e.g., screens visited, features used). Help us understand usage patterns and improve user experience.
Used to detect fraud, bot activity, and unauthorized access attempts.
Used to monitor application performance, error rates, and crash reporting.
BettrAi does not use cookies or tracking technologies for third-party advertising, cross-site tracking, or behavioral profiling for marketing purposes. You may adjust your device's privacy settings or application permissions to limit certain tracking; however, disabling essential cookies may affect Service functionality.
BettrAi employs administrative, technical, and physical safeguards designed to protect your information against unauthorized access, disclosure, alteration, or destruction. Our security program includes:
No method of transmission or storage is completely secure. While we work diligently to protect your information, we cannot guarantee absolute security. In the event of a security incident affecting your information, we will notify you as required by applicable law. See Section 4.4 for HIPAA breach notification obligations.
The Services may contain links to third-party websites, applications, or services that are not operated by BettrAi. This Policy does not apply to any third-party services, and BettrAi is not responsible for the privacy practices or content of those services.
When you connect third-party health applications or wearable devices to the Services (such as Apple Health, Google Fit, or other platforms), your information will also be subject to the privacy policies of those third parties. We encourage you to review the privacy policies of any third-party services you use in connection with BettrAi.
BettrAi is not a healthcare provider. The Services do not constitute the practice of medicine, nursing, or other licensed healthcare profession, and do not create a provider-patient relationship.
BettrAi may update this Policy from time to time to reflect changes in our practices, the Services, or applicable law. When we make material changes, we will:
Your continued use of the Services after the updated Policy is posted constitutes your acceptance of the revised terms, to the extent permitted by applicable law. If you do not agree to the updated Policy, please discontinue use of the Services and contact us to close your account.
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us using the information below. We will respond to all inquiries within a reasonable time, and to legally mandated requests within the required timeframes.
306 W. 7th Street, Suite 825
Fort Worth, TX 76102
Email: support@bettrai.com
Website: bettrai.com/privacy-and-security-policy
For HIPAA-specific complaints, you also have the right to file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights (OCR), at www.hhs.gov/ocr/privacy/hipaa/complaints/. BettrAi will not retaliate against any individual for filing a complaint with OCR.
