Privacy Policy

Effective Date: 09/30/2013

Last Updated Date: 10/22/2015

This Privacy Policy is incorporated by reference into Recovery Record’s Terms of Use. The term “Recovery Record,” “we,” and “us” includes Recovery Record, Inc. and our affiliates and subsidiaries. The Privacy Policy explains how Recovery Record may:

  • collect,
  • use, and
  • disclose

information we obtain through the “Recovery Record Service.”

The “Recovery Record Service” means the website located at www.recoveryrecord.com and any mobile application or Internet services under Recovery Record’s control, whether partial or otherwise, in connection with providing its services. The Recovery Record Service provides a web and mobile platform for eating disorder education and management so that individuals and clinicians can record and evaluate recovery goals and progress.

Personal Information” means information that alone or when in combination with other information may be used to readily identify, contact, or locate you, such as: name, address, email address, or phone number. We do not consider Personal Information to include information that has been anonymized so that it does not allow a third party to easily identify a specific individual.

Health-Related Information” means all individually identifiable health information, including demographic information and information related to an individual’s physical or mental health, the provision of health care to the individual, or the individual’s payment for the provision of health care. We treat Health-Related Information as Personal Information.

THE RECOVERY RECORD SERVICE COLLECTS YOUR INFORMATION

We collect Personal Information when you:

  • register to use the Recovery Record Service;
  • use the Recovery Record Service;
  • communicate with us.

We also collect information, such as anonymous usage statistics, by using cookies, server logs, and other similar technology as you use the Recovery Record Service.

Personal Information Collection. You must register to use the Recovery Record Service. To register, you may need to provide Personal Information, such as your email address, username, and password. You may also provide other optional information.

Using the Recovery Record Service. We collect the information, including Personal Information and Health-Related Information, you post through the Recovery Record Service. For example, when you enter information into your diary or a clinician communicates with you through the Recovery Record Service, the Recovery Record Service will collect the information in such submissions, including any Health-Related Information.

Customer Support. We may collect Personal Information through your communications with our customer-support team.

Cookies, Automatic Data Collection, and Related Technologies. The Recovery Record Service collects and stores information that is generated automatically as you use it, including your preferences and anonymous usage statistics.

When you visit the Recovery Record Service, we and our third-party service providers receive and record information on our server logs from your browser, including your IP address, and from cookies and similar technology. Cookies are small text files placed in visitors’ computer browsers to store their preferences. Most browsers allow you to block and delete cookies. However, if you do that, the Recovery Record Service may not work properly.

By using the Recovery Record Service, you are authorizing us to gather, parse, and retain data related to the provision of the Recovery Record Service.

HOW RECOVERY RECORD USES YOUR INFORMATION

We use Personal Information to

  • facilitate and improve our services; and
  • communicate with you.

We may use aggregate information for any purpose, including for marketing purposes.

Internal and Service-Related Usage. We use information, including Personal Information, for internal and service-related purposes and may provide it to third parties to allow us to facilitate the Recovery Record Service. We may use and retain any data we collect to provide and improve our services.

Communications. We may send email to the email address you provide to us to verify your account and for informational and operational purposes, such as account management, customer service, or system maintenance.

Aggregate Data. We may anonymize and aggregate data collected through the Recovery Record Service and use it for any purpose.

RECOVERY RECORD MAY DISCLOSE YOUR INFORMATION

We may share your information:

  • with our third-party service providers;
  • with other Recovery Record Service users, such as clinicians;
  • to comply with legal obligations;
  • to protect and defend our rights and property; and
  • with your permission.

We do not rent, sell, or share Personal Information about you with other people or nonaffiliated companies for their direct marketing purposes, unless we have your permission.

Compliance with HIPAA Privacy Rule. We voluntarily comply with the requirements of the “Privacy Rule” as defined by Health Insurance Portability and Accountability Act (“HIPAA”) of 1996.

We Use Vendors and Service Providers. We may share any information we receive with vendors and service providers retained in connection with the provision of the Recovery Record Service.

To Linked Clinicians. When you are linked to clinicians through the Recovery Record Service, they may see information, including Health-Related Information, about you. For example, a clinician may be able to view the contents of your monitoring history, symptom frequency, meal or thought logs, clinical outcome scores, and other information through the Recovery Record Service. The Recovery Record Service may permit clinicians to see the names and other identifying information about the other clinicians and their organizations to which you are linked to facilitate the clinicians working together as a team. When you are linked to clinicians, they may obtain the information about you through the Recovery Record Service and store it in their own systems. We are not responsible for practices of the other users, including clinicians, who will view and use the posted information.

To Linked Organizations. When you are linked to clinicians’ organizations through the Recovery Record Service, the organizations may see information, including Health-Related Information, about you. For example, an organization may be able to view your name, email address, your links to clinicians within the organization, outcome evaluation survey scores, your treatment setting, a general diagnosis, and aggregate statistics for various attributes, including but not limited to: logs, disordered behaviors, clinician interactions, goal completion, coping tactic utilization, average feelings and urges. Organizations may use the information available through the Recover Record Service for medical diagnosis, treatment, and general analysis reporting purposes. An organization will not be able to view any message like text such as clinician messages, team chat messages, linking messages. When you are linked to organizations, they may obtain the information about you through the Recovery Record Service and store it in their own systems. We are not responsible for practices of the other users, including organizations, that will view and use the posted information.

Severing a Link with Clinicians or Organizations. If a link between you and a clinician or his/her organization is severed, such clinician or organization may continue to access for recordkeeping purposes the information posted by you before the link was severed. However, after the link is severed, the clinician or his/her organization will no longer receive updated information about you unless you reconnect the link.

Marketing. We do not rent, sell, or share Personal Information about you with other people or nonaffiliated companies for their direct marketing purposes, unless we have your permission.

As Required By Law and Similar Disclosures. We may access, preserve, and disclose your Personal Information, other account information, and content if we believe doing so is required or appropriate to: comply with law enforcement requests and legal process, such as a court order or subpoena; respond to your requests; or protect yours’, ours’ or others’ rights, property, or safety.

Merger, Sale, or Other Asset Transfers. If we are involved in a merger, acquisition, financing due diligence, reorganization, bankruptcy, receivership, sale of company assets, or transition of service to another provider, your information may be sold or transferred as part of such a transaction as permitted by law and/or contract. We cannot control how such entities may use or disclose such information.

We may also disclose your Personal Information with your permission.

SECURITY

We take steps to ensure that your information is treated securely and in accordance with this Privacy Policy. We voluntarily comply with requirements of the “Security Rule” as defined by Health Insurance Portability and Accountability Act (“HIPAA”) of 1996. Unfortunately, the Internet cannot be guaranteed to be 100% secure, and we cannot guarantee, ensure, or warrant the security of any information, including any Personal Information and/or any Health-Related Information. We do not accept liability for unintentional disclosure and/or loss of any information, including any Personal Information and/or any Health-Related Information.

By using the Recovery Record Service or providing Personal Information to us, you agree that we may communicate with you electronically regarding security, privacy, and administrative issues relating to your use of the Recovery Record Service. If we learn of a security system breach, we may attempt to notify you electronically by posting a notice on the Recovery Record Service or sending an email to you. You may have a legal right to receive this notice in writing. To receive free written notice of a security breach (or to withdraw your consent from receiving electronic notice), please notify us at privacy@recoveryrecord.com.

CHILDREN’S PRIVACY

We do not knowingly collect information from children under 13 and we do not want it. We will take steps to delete it if we learn we have collected it.

We do not knowingly collect, maintain, or use Personal Information from children under 13 years of age, and no part of the Recovery Record Service is directed to children under the age of 13. If you learn that your child has provided us with Personal Information without your consent, you may alert us at privacy@recoveryrecord.com. If we learn that we have collected any Personal Information from children under 13, we will promptly take steps to delete such information and terminate the child’s account.

INTERNATIONAL USERS

By using the Recovery Record Service, you will transfer data to the United States.

By choosing to visit the Recovery Record Service or otherwise provide information to us, you agree that any dispute over privacy or the terms contained in this Privacy Policy will be governed by the law of the state of California and the adjudication of any disputes arising in connection with Recovery Record or the Recovery Record Service will be in accordance with the Terms of Use.

If you are visiting from the European Union or other regions with laws governing data collection and use, please note that you are agreeing to the transfer of your information to the United States and processing globally. By providing your information you consent to any transfer and processing in accordance with this Privacy Policy.

UPDATE YOUR INFORMATION OR POSE A QUESTION OR SUGGESTION

If you would like to update or correct any information that you have provided to us through your use of the Recovery Record Service or otherwise, you may use the functionality of the Recovery Record Service to change or delete such information. If such functionality is insufficient or if you have suggestions for improving this Privacy Policy, please send an email to privacy@recoveryrecord.com.

CHANGES TO OUR PRIVACY POLICY AND PRACTICES

We may revise this Privacy Policy, so review it periodically.

Posting of Revised Privacy Policy. We will post any adjustments to the Privacy Policy on this web page, and the revised version will be effective when it is posted. If you are concerned about how your information is used, bookmark this page and read this Privacy Policy periodically.

New Uses of Personal Information. From time to time, we may desire to use Personal Information for uses not previously disclosed in our Privacy Policy. If our practices change regarding previously collected Personal Information in a way that would be materially less restrictive than stated in the version of this Privacy Policy in effect at the time we collected the information, we will make reasonable efforts to provide notice and obtain consent to any such uses as may be required by law.

Contact Information

Recovery Record, Inc.
1121 Clark Way,
Palo Alto, CA 94304
privacy@recoveryrecord.com