Privacy Policy

This Privacy Policy explains how Companion Health Technologies, LLC (“we,” “us”) handles information through OrthoCompanion, including orthocompanion.com and the OrthoCompanion web application (the “Service”). It applies to patients, to care-team members who use the Service for a practice, and to visitors to our website. Please also read our Terms of Service.

The surgical practices that use OrthoCompanion are healthcare providers covered by the Health Insurance Portability and Accountability Act (“HIPAA”). When we handle your health information for a practice, we act as that practice’s business associate. We use and disclose that information only as our Business Associate Agreement with the practice and HIPAA allow.

Your practice’s Notice of Privacy Practices describes how it uses your health information and your HIPAA rights, such as getting a copy of your records or asking for a correction. Where this policy and HIPAA differ for health information, HIPAA and your practice’s notice control.

From your practice. Your name, contact details, date of birth, procedure, surgery date, surgeon, and the care-team members assigned to you.

From you, as a patient. Daily check-in answers (such as pain, swelling, sleep, medications, and symptoms), range-of-motion readings, wound photos, recovery questionnaires, messages to your care team, and your notification preferences.

From care-team members. Name, role, practice, work email, and the notes, tasks, and actions you record in the Service.

Automatically. Sign-in and security records, IP address, browser and device type, and an audit log of who viewed or changed patient information and when. We keep this to protect accounts and to meet HIPAA’s audit requirements.

Website visitors. If you email us, we receive your message and address. Our public pages do not ask for health information.

Range-of-motion measurement. When you measure your knee bend, the camera video is analyzed on your own device, in your browser. We save the resulting angle and quality readings. We do not upload or store the video.

Wound photos. Photos you choose to take of your incision are uploaded and stored so your care team can review them. The Service only uses your camera after you allow it, and you can withdraw that permission in your browser settings at any time.

• To provide the Service: showing your check-ins, readings, photos, and messages to your care team and to you.
• To flag possible concerns to your care team using rules your practice sets, and to send reminders you have turned on.
• To keep the Service secure, prevent misuse, and maintain audit records.
• To support, fix, and improve the Service. Where we use information to improve the Service or produce reports, we do so as our agreements with practices and HIPAA allow, including in de-identified form.
• To meet legal obligations and respond to lawful requests.

We do not sell personal information, share it for targeted advertising, or use health information for marketing.

Some features use artificial intelligence to help your care team, such as reviewing a wound photo for signs worth a closer look or summarizing a patient’s recent check-ins. To do this, the relevant information is sent to our AI provider, Anthropic, which processes it for us under contractual confidentiality and security obligations. We do not allow our service providers to use your information for their own purposes, including to train their AI models.

AI output is an aid for clinicians, not a diagnosis. A member of your care team decides what to do with it, and AI does not send messages to patients on its own.

• Your practice’s care team, including the surgeon, staff, and physical therapists assigned to you. Access is limited by role and to the patients each person works with.
• Service providers that help us run the Service, such as cloud hosting and database providers (currently Render) and our AI provider (Anthropic). They may only use the information to provide services to us.
• When the law requires, such as a valid subpoena or court order, or to prevent serious harm, as HIPAA permits.
• In a business transfer, such as a merger or sale, subject to this policy and our obligations to practices.

We use a secure cookie to keep you signed in, and your browser may store small preferences, such as which tips you have already seen. These are needed for the Service to work. We do not use advertising cookies or third-party analytics trackers.

We protect information with encryption in transit, role-based access, practice-by-practice separation of data, automatic sign-out after inactivity, and audit logging of access to patient records. No system is perfectly secure. If a breach affects your health information, we will notify your practice as HIPAA requires so that you can be notified.

We keep health information for as long as our agreement with your practice requires, then return or destroy it as that agreement and the law direct. Your practice may keep its own copy as part of your medical record. Account and audit records are kept as long as needed for security and legal compliance.

• Health records. To see, get a copy of, or correct your health information, contact your practice. We will help it respond.
• Notifications. Change text and email reminders in your settings, or ask your practice.
• Camera. Withdraw camera permission in your browser at any time. The rest of the Service keeps working without it.
• State privacy rights. Depending on where you live, you may have rights to know about, access, correct, or delete personal information, or to withdraw consent. Email privacy@orthocompanion.com. We will verify your request and respond as the law requires, and we will not treat you differently for using these rights. Requests about health information held for your practice will be coordinated with that practice.

The Service is meant for adults recovering from joint replacement. We do not knowingly collect information from children under 13. If a minor is a patient, a parent or guardian manages the account on their behalf.

We may update this policy. When we do, we will change the effective date above, and for material changes we will give notice in the Service or by other reasonable means.

Privacy questions or requests: privacy@orthocompanion.com
Companion Health Technologies, LLC, Georgia, United States