Legal
Privacy Policy
Last updated: September 11, 2026
Information We Collect
We collect information you provide directly, including name, email, account credentials, billing details (processed by our payment provider), and health information you choose to enter or upload (for example, medications, vitals, documents, and journal entries). If you use optional features such as visit recording helpers, we process audio you submit to generate transcripts and summaries. We also collect limited technical and usage data (such as device type, approximate region from IP, and product diagnostics) to operate and improve the platform. We do not sell your personal information to third parties.
How We Use Your Information
Your information is used to provide Second Set services, including your health record, appointment management, caregiver and provider workflows where enabled, and optional AI-assisted tools. We use industry-standard encryption and access controls to protect sensitive information. Automated features may suggest text or summaries; you remain responsible for reviewing accuracy before relying on it clinically.
AI Processing and Service Providers
Some features rely on subprocessors (for example, cloud infrastructure, payment processing, speech-to-text, and large language model providers) to host data and generate outputs. We select providers and configurations intended to support our HIPAA-conscious security posture and enter into appropriate agreements where required. Subprocessor categories may evolve; material changes will be reflected in updates to this policy or related notices when appropriate.
HIPAA-Conscious Practices
Second Set is designed with HIPAA-conscious practices. We apply administrative, technical, and physical safeguards for health information, including encryption in transit (TLS) and encryption at rest across supported production systems. This policy works together with our HIPAA Notice of Privacy Practices for how PHI may be used and disclosed.
Family and Caregiver Access
Patients and caregivers each use their own account. Access to another adult’s health information requires an explicit grant (for example, caregiver access) rather than shared passwords. Parents or legal guardians managing information for minors should use flows intended for that purpose and comply with applicable law.
Data Sharing
We share your data with subprocessors as needed to operate the service, under appropriate safeguards. We also share information when you direct us to (for example, sharing your Health Passport with a provider) or as required by law. We never sell health data to advertisers or data brokers.
Data Retention
We retain account and health information for as long as your account is active and for a limited period afterward as needed for legal, security, or operational purposes. For visit audio submitted for transcription, we design processing so raw audio is not kept as a long-term record after processing; transcripts and summaries you save follow normal account retention and deletion flows. You may request deletion of your account and associated data by contacting support@secondset.health. We may retain anonymized, aggregated data for platform improvement.
First-Party Measurement
We measure public page views and trial-button clicks as daily totals using a fixed list of events. These measurements do not include form values, page query strings, referral links, visitor identifiers, or account links. They use no tracking cookies and respect browser Do Not Track and Global Privacy Control signals. Within our protected systems, we record account-linked operational milestones such as account creation, first completed use of selected tools, and a confirmed subscription payment to understand service use and improve the product. Milestones contain an event name and time, not the contents of records, filenames, questions, or answers, and are deleted with the associated account. Administrators see aggregate milestone counts. We do not send these measurements to advertising or external analytics platforms. Our infrastructure also maintains the technical and security logs described in this policy.
Cookies
We use cookies to keep you signed in and to improve platform performance. We do not use tracking cookies for advertising.
Contact Us
Questions about this policy? Email support@secondset.health or write to: Second Set Health, Inc.