Privacy Policy (WIP)

Last Updated: 1st July 2026

1. A Note on HIPAA and What Governs Your Data

Klove Health LLC is generally not a "covered entity" or "business associate" under the federal Health Insurance Portability and Accountability Act (HIPAA), and the health-related information you store in the Service is generally not "Protected Health Information" governed by HIPAA. HIPAA primarily governs health plans, healthcare clearinghouses, and healthcare providers (and their contractors). Klove is a consumer tool that you use to manage your own and your household's information at your direction.

This does not mean your information is unprotected. We treat it as highly sensitive, we apply rigorous security safeguards, and your data is protected under other laws, including the Federal Trade Commission Act and the FTC Health Breach Notification Rule, the Washington My Health My Data Act, the California Consumer Privacy Act/California Privacy Rights Act, the Children's Online Privacy Protection Act, and other applicable state laws. Our specific commitments are set out below, including the dedicated Consumer Health Data Privacy section required by Washington law.

2. Information We Collect

2.1 Information You Provide Directly

  • Account information: name, email address, password, and (if applicable) phone number.

  • Household information: names and relationships of Household Members and information you choose to record about them.

  • Health-related information you enter: for example, conditions and symptoms, medications and supplements, allergies, immunizations, lab and test results, appointments, providers, insurance details, care notes, and documents you upload.

  • Communications: messages and requests you send to us or through concierge/coordination features.

  • Payment information: processed by our third-party payment processor; we do not store full card numbers.

2.2 Information Imported From Connected Sources (With Your Authorization)

  • Health and fitness data from platforms you connect, such as Apple HealthKit.

  • Where offered and authorized by you, records retrieved through electronic health record connectivity providers.

  • We import such data only at your direction and only as needed to provide the Service.

2.3 Information Collected Automatically

  • Device and usage data: device type, operating system, app version, IP address, and interactions with the Service.

  • Cookies and similar technologies on our website, as described in our this Policy.

3. How We Use Your Information

We use information to:

  • provide, maintain, and secure the Service and your household record;

  • generate organizational summaries, reminders, and non-diagnostic insights;

  • power AI features (see Section 4);

  • facilitate coordination and concierge assistance you request;

  • process payments and manage subscriptions;

  • communicate with you about the Service;

  • detect, prevent, and respond to fraud, abuse, and security incidents;

  • comply with legal obligations.

We do not use your health-related information for advertising, and we do not sell it.

4. How AI Processes Your Information

The Service uses artificial intelligence, including third-party AI model providers, to generate summaries, organize information, and assist with coordination.

  • Purpose limitation: Your information is processed by our AI provider(s) under contractual terms that restrict use to providing the Service to you.

  • Human review: Klove combines automated (AI) processing with human support. Authorized members of the Klove team may access your information to deliver the human-assisted and concierge features of the Service — for example, when a request requires human judgment or involves a sensitive or complex situation — and to operate, secure, troubleshoot, and improve the Service. Human access is limited to personnel and contracted service providers who need it for these purposes, who are bound by confidentiality obligations, and who access your information on a least-privilege (need-to-know) basis. We do not use your information for advertising, and human review is not used to build advertising or marketing profiles.

  • Limitations: AI outputs may be inaccurate or incomplete and are for informational purposes only; they are not medical advice.

5. How We Share Information

We share information only as described here:

  • Service providers: vendors who help us operate the Service under contracts requiring them to protect your information and use it only for us — for example, cloud hosting, database infrastructure providers and payment processors.

  • At your direction: when you ask us to share information or coordinate with a provider or other party.

  • Legal and safety: when required by law, legal process, or to protect rights, safety, and security.

  • Business transfers: in connection with a merger, acquisition, or sale of assets, subject to this Policy.

We do not sell your personal information, and we do not "share" it for cross-context behavioral advertising, as those terms are defined under applicable law. We do not sell or share consumer health data.

6. Data Retention

We retain your information for as long as your account is active and as needed to provide the Service, then delete or de-identify it within 90 days unless a longer period is required by law or for legitimate business purposes (such as security, dispute resolution, or legal compliance). You may request deletion as described in Section 8.

7. How We Protect Your Information

We maintain administrative, technical, and physical safeguards designed to protect your information, consistent with industry standards for sensitive health data, including encryption in transit and at rest; access controls and least-privilege access; authentication; logging and monitoring; vendor security review. We design our security program to be consistent with HIPAA-level safeguards as a matter of best practice, even though HIPAA does not directly apply. No system is perfectly secure, and we cannot guarantee absolute security.

8. Your Rights and Choices

Depending on where you live, you may have rights to:

  • access the information we hold about you;

  • correct inaccurate information;

  • delete your information;

  • port your information to another service;

  • withdraw consent to processing of consumer health data;

  • opt out of certain sharing (note: we do not sell or share for advertising).

9. Children's Privacy

The Service is intended for adults (18+). We do not knowingly collect information directly from children under 13. However, the Service is designed to let a parent or legal guardian store information about their minor children as part of a household record. By storing information about a minor, you confirm you are that minor's parent or legal guardian (or otherwise legally authorized) and you consent, on the minor's behalf, to the collection and use described in this Policy. We handle minors' information with the same protections described here. If you believe a child has provided information to us directly, contact us and we will delete it.

10. Data Location

We store and process information only in the United States.

11. Changes to This Policy

Klove Health LLC reserves the right to update or modify this Privacy Policy at any time without prior notice. We will notify you of any changes by posting the updated Privacy Policy on this page. It is your responsibility to review this Privacy Policy periodically for any changes.

12. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us at what-email