Privacy & HIPAA

This notice has two parts. Part 1 covers the information we handle on the Diadara website and account. Part 2 covers your health information, which is handled under HIPAA for the independent medical practice that provides your care. Where they overlap, the stricter protection applies.

Part 1 — Website & account data

On diadara.com we collect only what we need:

• Contact details you give us — such as your name, email, and state when you join a waitlist or contact support.
• Basic technical data needed to load, secure, and operate the site (for example, request and security logs).
• Your Sage conversations. Sage is an education assistant. Your messages are sent to our AI provider (OpenAI) to generate a response, and OpenAI's processing is governed by our agreement with them. Sage is stateless, so it does not store your conversations and is not part of the medical intake. Please don't enter medical history into Sage — your private assessment happens in the secure intake.
• Analytics, only if enabled. Analytics is currently turned off, so we collect no analytics data today. If we ever enable it, it is privacy-hardened and aggregate: form-input capture is off, event data is sanitized to remove direct identifiers, and we never send your health information, name, email, or phone to analytics.

We use this information to respond to you, to run and secure the site, to manage waitlists and accounts, and to improve the education experience.

We do not sell your personal information, and we do not share it for cross-context behavioral (targeted) advertising. We do not use your information to advertise to you.

Retention. We keep website and account data only as long as needed for the purposes above or as required by law, then delete or de-identify it.

Your choices. You can ask us what website or account data we hold about you and ask us to correct or delete it. You can also control cookies and local storage in your browser — see our Cookie Policy.

Children. Diadara is for adults. The service is intended only for people who are at least 18 years old, and we do not knowingly collect information from anyone under 18.

Part 2 — Your health information

When you begin intake, the health information you provide is collected and stored in the patient portal, which is operated on our platform partner's systems for the independent, physician-owned medical practice that provides your care. That information is protected health information (PHI) and is handled under HIPAA.

We treat your health information as PHI: it is encrypted in transit and at rest, access is role-restricted, and access is recorded in an audit log. We never place PHI in URLs, and we never use your health information to advertise to you.

Your rights. You can access your records and request a correction (amendment) from your patient portal. Deletion is available for non-medical account data, consistent with applicable law and our retention obligations.

Service providers (subprocessors)

diadara.com does not itself collect protected health information: your intake, the consult, checkout, and your clinical records are handled by our platform partner for the independent medical practice, not on this site. Of the service providers below, OpenAI — which powers Sage — is the only one with which we have an executed Business Associate Agreement (BAA), on zero-data-retention terms. Where a BAA is required and not yet executed, no real patient data is processed until it is signed.

• Patient intake & portal platform — Intake, checkout, billing, and patient-portal platform; stores clinical records for the independent medical practice
• Neon — PostgreSQL database for the Diadara website and account; does not receive health information
• OpenAI — Powers Sage's educational chat under an executed Business Associate Agreement on zero-data-retention terms; Sage is stateless and does not store conversations
• Vercel — Website and application hosting; does not receive health information

Contact

Diadara, Inc. 1738 SW 57th Ave #464, Miami, FL 33155, United States. Privacy questions: support@diadara.com · (786) 505-5132.