HIPAA and Protected Health Information
The Health Insurance Portability and Accountability Act of 1996 and its implementing regulations ("HIPAA") apply to certain health care providers, health plans, health care clearinghouses, and their business associates.
Gluva does not act as a HIPAA-covered entity or business associate for every service it provides or every type of information it receives. Whether HIPAA applies depends on how you receive Gluva's Services and who provides the information.
In certain circumstances, Gluva provides Services to or on behalf of a health plan, health care provider, or other HIPAA-covered entity. When Gluva receives, creates, maintains, or transmits Protected Health Information ("PHI") as a business associate of a HIPAA-covered entity, Gluva uses and discloses that information in accordance with HIPAA, the applicable Business Associate Agreement, and the legal obligations of the covered entity.
Where HIPAA applies, Gluva maintains administrative, technical, and physical safeguards designed to protect the confidentiality, integrity, and availability of PHI.
If you receive Gluva Services through a health plan, health care provider, or other HIPAA-covered entity, that entity's Notice of Privacy Practices describes how your PHI may be used and disclosed and the rights available to you under HIPAA.
Information shared with your employer. Gluva does not provide your employer with individually identifiable health information. Employers and plan sponsors receive reporting only in aggregate, de-identified form, and results are not reported for groups small enough that an individual could be identified. HIPAA prohibits plan sponsors from using PHI for employment-related decisions.
Health information outside HIPAA. Some information you provide directly to Gluva, or choose to share from a consumer device or app, may not be PHI under HIPAA. Gluva protects that information under this Privacy Policy and applicable law, which may include the FTC Health Breach Notification Rule and state consumer health data privacy laws.
Research. Gluva will not use your information for research purposes without your separate, express consent.
Questions. For questions about how Gluva handles health information, contact [privacy@gluvahealth.com].