Your data matters
Privacy Policy
Last updated: January 2026
1. What we collect
We collect information you provide when creating a practice account: practice name, contact details, provider names, and service menus. When patients use the kiosk, we collect session-level activity such as hearts, views, and favorites tied to an anonymous session ID — not a name — until your staff checks the patient in.
2. How we use it
We use your data to operate the kiosk, generate provider dashboards, build treatment-plan recommendations, send follow-up reminders, and improve the product. We never sell patient data. We never use patient activity for advertising.
3. PHI and HIPAA
AIducation is designed to support HIPAA-aligned workflows. We encrypt data in transit and at rest, maintain audit logs for every PHI touch, use role-based access controls, and sign Business Associate Agreements with covered entities upon request.
4. Security
We use bank-grade TLS, SOC 2-aligned controls, hashed PINs, and session expiration. Access to provider dashboards requires authentication. Patient sessions automatically expire after a period of inactivity.
5. Your rights
You can access, update, or delete your practice data at any time from the provider dashboard. Patients may request deletion of session activity through your practice, which we will honor within 30 days.
6. Contact us
Questions about this policy? Email privacy@aiducation.ai.