Junum Application Privacy Policy

Overview

Junum takes our obligation to protect the confidentiality of your personal information very seriously. Junum’s EHR-integration technology and applications are intended to connect to servers and systems operated and maintained by our health system partners in order to provide secure access to your health information.

This Privacy Policy

This Privacy Policy describes how RDF Technology (“Junum”) applications for clinicians (our “Applications”) use, store, and transmit information and data. Junum may modify this Privacy Policy at any time effective upon its posting. Your use of our Applications constitutes your acceptance of this Privacy Policy and any updates. Your use of our Applications is subject to the terms and conditions of the Junum Master Service Agreement and HIPAA Business Associate Agreement with your institution.

Purpose

This Privacy Policy lets you know what limited information you provide to us when you use our Applications and how that information is used.

Your Healthcare Providers

To use our Applications, healthcare providers must have an account with a healthcare institution that uses one of our EHR integration partners. As such, your use of our Applications is also subject to your healthcare provider’s privacy policy. You understand that while connected or attempting to connect to a healthcare institution’s system, the healthcare institution may collect, store, process, maintain, upload, sync, transmit, share, disclose, and use certain data and related information, including information or data regarding the characteristics or usage of your device, system and application software, and peripherals as well as your personal information, location data, and other content. Please contact your healthcare institution if you have any questions about their policies or terms.

Personal Data that We Collect

Our application collects and stores only the minimum necessary personal information to provide our application features and services. We do not collect any sensitive personal information. The following is a list of the personal data which we may collect as part of use of the Application:

Encrypted identifiers (User/Practitioner IDs)

User/Practitioner attributes (e.g., Authorizations, roles and associations with a health system entity)

Demographic location

Audit trail information (e.g., Login information including time zone)

In addition, in order to provide you certain features, our Applications may request information from servers and systems owned or operated by our EHR partners and those servers and systems may record technical information about that request such as an IP address and information related to the type of device, platform, and operating system you use with our Applications.

How We Collect Data

We may collect the data detailed above in two different ways:

Data is collected automatically through Application Programming Interfaces (APIs) when you launch our Application from within your EHR.

When you voluntarily enter data into the Application, and/or your employer provides us with such data when you contract with us.

Using Third Party Tools and Features

If you use any third-party tools and features, such as third-party speech-to-text dictation or third-party video, your use of those features is subject to the terms and policies of those third parties. If you have any questions about those terms or policies, you should contact your healthcare institution or the provider of the third-party tool.

How We Use Your Personal Information

We collect and may use your personal information for the following purposes:

Enable you to use the App’s features and to provide in-App personalization based on your preferences and usage profile

Establish and maintain user accounts and provide technical support

Develop marketing materials for our products and services

Support company operations (e.g., quality control and fraud detection which may include auditing related to your interactions and transactions with us, including to improve your experience and for compliance with legal obligations; detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity; and debugging to identify and repair errors that impair existing intended functionality)

Develop and improve new and current products and services

How We Share Your Personal Information

We may share your identifiable information with our service providers. These are external companies that We use to help Us run our business (e.g., cloud services, data analysis, market research, support services, etc.). Our service providers may only use the Personal Information for the business purpose for which we provide it

If we are involved in a merger, acquisition, or sale of all or a portion of its assets, you will be notified via email and/or a prominent notice on the Junum website of any change in ownership or uses of your Personal Information, as well as any choices you may have regarding your Personal Information.

We will also disclose your personal data to third parties

when required by applicable law;

to comply with legal process such as a subpoena;

in response to a lawful request by a public authority including to meet national security or law enforcement requirements;

to protect our rights or property;

to protect the personal safety of users or the public; or

to enforce the terms of any agreement or the terms of our end user license agreements.

We do not sell personal information.

How We Protect and Retain Your Personal Information

The security of your information and data while using our Applications is very important to us. We use all reasonable and appropriate security measures as required by applicable law. Our Applications utilize technical safeguards to protect the confidentiality, integrity, and availability of your personal information including supporting Transport Layer Security (TLS)/Secure Sockets Layer (SSL) certificate technology and encryption.

In addition, healthcare providers with whom you connect may use a variety of physical, administrative, and technical measures to protect your personal information.

We will retain your Personal Information that we have collected for our own business purposes, to provide you with services, for as long as your account is active, or as needed, to provide you services. We will retain and use your Personal Information as necessary to comply with our legal obligations, resolve disputes and enforce our agreements.

Exercising your Data Rights

Once your account is no longer active, you may submit a request to delete your Personal Information by sending an email to support@junum.io.

Individuals who submit requests to delete their Personal Information may be required to verify their identity by answering certain questions.

Contact Junum

If you have any questions about this Privacy Policy, you may contact Junum at support@junum.io.

Your California Privacy Rights

If you are a California resident, California law may provide you with additional rights regarding our use of your personal information. To learn more about your California privacy rights, visit our CCPA privacy notice for California residents or contact your healthcare institution.