Privacy Policy

Chronii (“Chronii,” “we,” “us,” or “our”) provides an AI-native, EHR-embedded chronic care management (CCM) workflow platform for healthcare organizations. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our website, contact us, or use our platform.

It applies to information we handle as a business, such as details you share on our website or when requesting a demo. Protected health information (PHI) that we process on behalf of a healthcare provider is governed primarily by the Business Associate Agreement (BAA) described below and applicable healthcare privacy laws.

We collect the following categories of information:

• Information you provide. Your name, email address, phone number, organization, role, and any message content when you request a demo, contact us, or communicate with our team.
• Platform account data. Account credentials, user profile details, and configuration settings for authorized users of the Chronii platform.
• Usage and device data. Log data, IP address, browser type, pages viewed, referring pages, and similar analytics collected automatically when you use our website or platform.
• Cookies and similar technologies. Identifiers used to operate the site, remember preferences, and measure traffic (see “Cookies and analytics” below).

When Chronii processes PHI on behalf of a healthcare provider or other covered entity, we act as a “business associate” under the U.S. Health Insurance Portability and Accountability Act (HIPAA). Our handling of PHI is governed by a Business Associate Agreement (BAA) entered into with each customer, which we provide at no additional cost.

We use and disclose PHI only as permitted by the BAA, applicable law, and our customers’ documented instructions, and to provide, maintain, and improve the services. We do not sell PHI. If any term of this Privacy Policy conflicts with a BAA regarding PHI, the BAA controls.

We use information to:

• Provide, operate, secure, and improve our website and platform;
• Respond to inquiries, schedule demos, and provide customer support;
• Deliver the CCM workflow, including task generation, documentation, time capture, and patient outreach performed on behalf of customers;
• Monitor performance, diagnose issues, and prevent fraud or abuse;
• Send administrative or service-related communications; and
• Comply with legal obligations and enforce our agreements.

We do not sell your personal information. We may share information in the following circumstances:

• Service providers. With vendors that host, operate, and support our platform (for example, cloud infrastructure, communications, and analytics providers), bound by contractual confidentiality and, where applicable, BAA obligations.
• At your direction. With the EHR and other systems you connect, and with people you authorize.
• Legal and safety. When required by law, subpoena, or legal process, or to protect the rights, property, or safety of Chronii, our customers, or others.
• Business transfers. In connection with a merger, acquisition, financing, or sale of assets, subject to appropriate protections.

We maintain administrative, technical, and physical safeguards designed to protect information against unauthorized access, use, alteration, and disclosure, including encryption in transit and at rest, access controls, and audit logging. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We retain information for as long as needed to provide the services, comply with our legal obligations, resolve disputes, and enforce our agreements. Retention and disposal of PHI are governed by the applicable BAA and customer instructions. When information is no longer needed, we take reasonable steps to delete or de-identify it.

Our website uses cookies and similar technologies, including Google Analytics and Google Tag Manager, to operate the site and understand how it is used. You can control cookies through your browser settings, and you can opt out of Google Analytics using tools that Google provides. Disabling cookies may affect some site functionality.

Depending on your location, you may have rights to access, correct, delete, or restrict the use of your personal information, and to opt out of certain communications. To exercise these rights, contact us using the details below.

Requests concerning PHI held on behalf of a healthcare provider should be directed to that provider, who is the covered entity responsible for the record. We will support our customers in responding to such requests as required by the BAA.

Our website and platform are intended for use by healthcare organizations and their authorized personnel and are not directed to children. We do not knowingly collect personal information directly from children through the website.

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above. Material changes will be communicated through our website or other appropriate means.

If you have questions about this Privacy Policy or our privacy practices, contact us at privacy@chronii.com.