Privacy Policy

Who we are

Nishani Health is operated by Nishani Health, Inc., a Delaware corporation. Nishani Health is a care-management platform for adults living with treatment-resistant depression, bipolar disorder, or schizophrenia.

Questions about this page, these terms, or the check-in service can go to hello@nishanihealth.com, which reaches both founders.

This policy describes two things: the Nishani website, which you can read without giving us anything, and the Nishani check-in service, which a care organization can use with the people it cares for. Where the two are different, each is described under its own heading.

This website

The Nishani website runs no analytics, no advertising, and no tracking. It sets no cookies of its own, and it makes no request to any third-party service while you read it. Fonts, scripts and images are served from our own domain.

The contact page is a link that opens your own email application. Nothing you type there is sent to us through this website.

Our web host records standard server logs — the request, a timestamp and a browser identifier — in order to serve the site and keep it running. Those records are not linked to any patient or check-in information.

What the check-in service collects

If you are enrolled by a care organization, the service holds the following about you:

• Your display name — a first name and a last initial.
• Your mobile phone number.
• Your answers to the check-in: five single-choice questions and an optional free-text field you may add anything to.
• The record that you agreed to receive check-in messages, with the date it was taken and how it was recorded.
• Whether a message was delivered, whether the check-in was opened, and whether it was answered.
• Any reply you send to us by text message.
• The note and outcome your care team records when they act on a check-in.

What the service does not collect

The list above is short on purpose. The service does not hold:

• An account or a password — you never log in to anything.
• A medical record number.
• A street address, insurance details, or a date of birth.
• Anything from an electronic health record — there is no connection to one.

How that information is used

The service uses it to do the following, and nothing else:

• Send your check-in message, and one reminder if it has not been opened.
• Show your care team that a response raised a concern, so a person can be assigned to it and record what they did.
• Keep the record of what happened, and produce reporting for your care organization.

What is not done with it

It is not used for advertising. It is not sold, rented or traded. It is not used to build a marketing profile of you.

No mobile information is shared with third parties or affiliates for marketing or promotional purposes. Your agreement to receive text messages, and the record of it, is not shared with any third party.

A free-text reply you send is not read or interpreted by software. It becomes a task for a person to read.

Who receives it

Three parties, and no more:

• The care organization that enrolled you. It holds your clinical record and decides what it does with your information. We run software on its instruction.
• Amazon Web Services, which provides the hosting, the database, email, and text delivery. Before any patient information is processed, we sign a Business Associate Addendum with AWS.
• The mobile carrier that delivers a message. It necessarily sees the number the message is sent to and the content of the message.

Messages: consent, frequency, and opting out

Nishani Health check-in texts come from Nishani Health, and every message starts with that name. Each one carries a link to a short check-in from your care team.

Before the first message, a member of your care team describes the texts to you and asks whether you agree to receive them. Agreeing is optional and does not affect your care. Your care team records your answer, and we record the date. If that record is missing, no message is sent. The first text confirms that you are signed up.

Messages arrive about once a week. If a response of concern is open, they arrive daily until it is resolved.

Reply STOP to any message and no further check-ins are sent; you receive one message confirming it. Reply HELP for contact details, or write to wilsonyeh@nishanihealth.com. You can also ask your care team to stop messages.

Message and data rates may apply.

How long it is kept

The care organization that enrolled you keeps your check-in history for as long as it keeps your record. That is its decision to make and its record to hold.

We hold your information for as long as we are operating the service for that organization, and not after.

Two technical limits, stated plainly: database backups are retained for seven days, and application logs are retained for thirty days. Application logs are built so that they carry no patient information in the first place.

Your choices

You can stop the messages at any time by replying STOP.

You can ask the organization that enrolled you what it holds about you and what it has done with it. It is the record holder.

You can ask us to correct or delete the information we hold for you. We pass that request to the organization that enrolled you and act on its instruction, because it is the record holder.

Nothing on this list is conditional. Nothing you choose here changes whether you receive care from anyone.

How it is protected

The specific controls in the design, rather than a general assurance:

• Information travels between your phone and the service over an encrypted connection.
• The database is encrypted at rest, is backed up automatically, and cannot be reached from the public internet.
• Each organization is separated at the database level: a query scoped to one organization cannot return another organization's rows.
• Staff at a care organization see the people on their own panel, and reach the service through their own account.
• Application logs are built to carry no patient information.

Not a medical service

The check-in service is not medical advice. Using it does not create a clinician–patient relationship with Nishani Health.

It is not monitored continuously. A check-in you submit becomes a task for your care team to pick up during their working hours. It is not an emergency response.

The service does not replace your care team's own process for an emergency.

Children

The check-in service is for adults. We do not knowingly collect information from anyone under 13.

Changes to this policy, and how to reach us

When we change this policy in a way that affects what we do with information, the date at the top of this page changes with it.

Questions about this page, these terms, or the check-in service can go to hello@nishanihealth.com, which reaches both founders.