Notice of HIPAA Privacy Practices

This HIPAA Notice of Privacy Practices (“HIPAA Notice”) describes how TruNeura, LLC (“Company,” “TruNeura,” “we,” “us,” or “our”) uses and discloses your health information and how you can access this information.
 
This Terms, along with referenced documents, govern your use of www.truneura.com ("Website"), our mobile app ("Mobile App"), and our desktop application ("Desktop App"), including all content, functionality, and services (collectively, the "Platform").
 
The Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) requires us to obtain each patient’s acknowledgment of receipt of our HIPAA Notice. The HIPAA Notice is available on our Website, Mobile App, and Desktop App. You acknowledge receipt by clicking the “I Acknowledge Receipt of the Notice of HIPAA Privacy Practices” button or by another provided written or digital method. You can print a copy from our website at any time.
 
TruNeura Responsibilities
Under HIPAA, TruNeura must protect your "Protected Health Information" (“PHI”), which includes health and payment information, medical records, and personal details such as your name, Social Security number, financial information, address, and phone number.
 
We are required by federal law to:
• Protect the privacy of your PHI. All employees and providers must maintain PHI confidentiality and receive privacy training.
• Provide this HIPAA Notice explaining our duties and practices regarding your PHI.
• Notify you of any breach of unsecured PHI.
• Follow the practices and procedures described in this HIPAA Notice.
 
Uses and Disclosures of Protected Health Information Without Authorization
We may use and disclose your PHI for treatment, payment, and healthcare operations. Examples of permitted uses and disclosures without your authorization are listed below.
 
TREATMENT
• To our providers and other health care professionals involved in your care.
• To internal departments coordinating activities like lab work.
• To external healthcare providers treating you. For example, we may share PHI between your primary care provider or specialist treating you.

PAYMENT
• To administer your health benefits.
• To bill you or others who provided your care.
• To other organizations and providers for payment, unless prohibited by law.
 
HEALTHCARE OPERATIONS
• To manage and support our business activities and those of other healthcare organizations as allowed by law.
• To individuals (e.g., consultants, attorneys) and companies helping with business operations, provided they agree to protect your privacy.
 
OTHER USES
We may also use or disclose your PHI for legal and governmental purposes:
• As required by law, including workers' compensation laws.
• Public health and safety, to prevent disease, report births or deaths, and track issues with prescription drugs and medical devices.
• Abuse or neglect, reporting to authorized government agencies.
• Minors, sharing PHI with parents or guardians unless the minor can consent to their own care under state law.
• Oversight agencies, for audits, inspections, and investigations.
• Legal proceedings, in response to court orders, subpoenas, or lawful processes.
• Law enforcement, for purposes like locating a suspect, reporting a crime, or assisting victims.
• Health Information Exchanges (HIEs), to share PHI electronically for treatment, payment, and operations unless you opt out where permitted by law.
• Financial information, to assess eligibility for fee waivers and for operational improvements.
• Research, under strict confidentiality rules; often requires your authorization unless an Institutional Review Board approves minimal-risk studies.
• Military and national security, for military activities, veterans' affairs, and protection of national leaders.
 
We may also use or disclose your PHI without authorization in the following circumstances:
• Direct contact, using your contact information for appointment reminders, treatment updates, or information about services.
• Patient account access, providing PHI through online tools on our website, mobile app, or desktop software.  
• Family and friends, sharing PHI with people involved in your care when appropriate, unless you object.
• Facility listings, disclosing your name and condition to visitors who ask for you by name and to clergy unless you object.
• Waiting areas, calling your name aloud unless you request otherwise.
• Treatment alternatives and plan descriptions, communicating options and health-related services.
• De-identified information, sharing information stripped of identifiers, as allowed by law.
• Coroners, funeral directors, and organ donation, when required by law.
• Disaster relief, helping locate or inform family members during disasters.
• Threats to health or safety, when necessary to prevent serious harm.
 
Uses and Disclosures of Your Protected Health Information Requiring Authorization
Except as described above, we will use or disclose your PHI only with your written authorization. Specifically, we require your permission to:
• Use PHI for marketing, except as allowed by HIPAA (e.g., communications about care, treatment, or our products or services).
• Sell your information.
• Share your PHI with your employer or school.
• Share most psychotherapy notes.
 
Certain federal and state laws provide additional protections for specific types of PHI, such as genetic, mental health, drug and alcohol abuse, sexual assault, sexually transmitted diseases, and HIV/AIDS-related information. These disclosures may require your separate authorization. We comply with stricter state laws when applicable.
 
For questions, contact the Privacy Officer at support@truneura.com.
 
Your Rights Regarding Your Protected Health Information
You have the right to:
• Request restrictions on how we use or disclose your PHI for treatment, payment, or healthcare operations, or limit disclosures to someone involved in your care. We are not required to agree, except when you pay in full and request a restriction from a health plan. Email us at support@truneura.com to request a restriction.
• Request confidential communications by asking us to contact you at a different address or by another method. Requests may need to be in writing. We will accommodate reasonable requests.
• Access or receive copies of your PHI electronically or on paper. You can: (1) request records through your TruNeura account or (2) email asat support@truneura.com. We may charge a reasonable fee and usually respond within 30 days. If we deny your request, we will explain why, and you may request a review.
• Request amendments to PHI you believe is inaccurate or incomplete. Email us at support@truneura.com and ask us how to do this. If denied, you may submit a written statement of disagreement to be added to your record.
• Choose someone to act for you if they have medical power of attorney or legal guardianship. We will verify their authority.
• Request an accounting of disclosures by emailing us at support@truneura.com.  You may request disclosures from up to six years prior. One list per year is free; additional lists may incur a fee. Disclosures for treatment, payment, and operations are excluded.
• Request a paper copy of this HIPAA Notice.
• Receive notice of any breach of your unsecured PHI.
• File a complaint if you believe your privacy rights have been violated. File with us at the address below or with the U.S. Department of Health and Human Services, 200 Independence Avenue, S.W., Washington, D.C. 20201, call 1-877-696-6775, or visit www.hhs.gov/ocr/privacy/hipaa/complaints. We will not retaliate against you.
 
Communication Methods
• We may use PHI to send appointment reminders, treatment communications, or information about health-related services via email, phone call, or text.
• Certain PHI, such as treatment information, appointment histories, and medication records, may be available through secure online tools like your account.
• If you choose to communicate with us via email, text, or chat, you acknowledge these methods may not be fully secure and accept associated risks. If you prefer not to exchange PHI via email, text, or chat, do not communicate with us through those means and notify us at support@truneura.com.
 
Changes to Privacy Practices
TruNeura may update this HIPAA Notice periodically. Revised versions will apply to all PHI we maintain and will be posted on our website, with the update date clearly indicated. Review the HIPAA Notice regularly to stay informed of our HIPAA privacy practices.
 
Questions and Complaints
For questions or an additional copy of this HIPAA Notice, contact our Privacy Officer at support@truneura.com.  To file a complaint regarding a potential privacy violation or a decision about PHI access, send a written complaint to:
 
Privacy Officer
8105 Saratoga Way #240
El Dorado Hills, CA 95762