Privacy Policy

Information we collect

Depending on how you use GiWise, we may collect:

• Contact and account information, such as your name, email address, and login details.
• Information you provide in intake forms, including symptoms, history, goals, and care-related context.
• Information shared by your clinic or care team to support your referral, intake, review, follow-up, and account administration.
• Connected-device information you choose to authorize, such as selected Oura sleep, recovery, activity, and readiness signals.
• Technical information about how you use our services, including device, browser, IP address, and service logs.

How we use information

We use information to operate and improve GiWise, including to:

• provide account access, intake, workflow, and patient-portal features;
• support a participating provider's review and continuity of care;
• communicate about service, security, support, and account matters;
• maintain, secure, troubleshoot, and improve our services; and
• meet legal obligations and enforce our agreements.

GiWise is designed to organize information for provider review. It does not diagnose, prescribe, or replace the judgment of a licensed provider.

How we share information

We share information with the clinic and care team connected to your use of GiWise, with vendors that help us operate the service, and when required by law or necessary to protect rights, safety, and security. We require service providers to handle information only for authorized purposes. We do not sell personal information or use health information for targeted advertising.

Connected data and your choices

Connecting Oura is optional. Before GiWise collects or shares connected-device data with a clinic or provider, we ask for separate permission for that purpose. We collect only the Oura scopes and data needed for the feature you choose. You may disconnect Oura, revoke provider sharing, or request deletion at any time. Revocation stops future synchronization; we delete Oura connection credentials and Oura data that is no longer required for a disclosed legal or clinical-record purpose, subject to applicable retention obligations.

Security and retention

We use reasonable administrative, technical, and organizational safeguards designed to protect information. No system is perfectly secure. We retain information only for as long as reasonably necessary for the disclosed purpose, to provide services, and to meet legal, clinical-record, security, and dispute-resolution obligations. We maintain records of consent, revocation, access, and deletion requests to support accountability.

Your privacy choices

You may ask to access, correct, or delete certain personal information, subject to applicable law and record-retention requirements. Your clinic may control some information in its care records. To make a request, email hello@giwise.co. We may need to verify your identity before responding.

Cookies and similar technologies

We use cookies and similar technologies that are necessary to operate and secure the service, such as maintaining a session and preventing abuse. Your browser may allow you to manage cookies, although disabling them can affect service functionality.

When usage analytics is enabled, we use PostHog to count visits to general screens, such as the homepage or patient portal. Analytics uses a temporary random identifier that is not saved in cookies or browser storage. We do not send names, email addresses, patient identifiers, form answers, or clinical content to PostHog, and we do not record your screen or clicks. Analytics is disabled when your browser sends a Do Not Track or Global Privacy Control signal. As with any external service request, PostHog receives connection information, including your IP address; our analytics configuration disables IP-based location enrichment.

Children

GiWise is not directed to children under 13, and we do not knowingly collect personal information from children under 13 without appropriate authorization.

Changes and contact

We may update this policy as our services or legal requirements change. We will post the updated version here and revise the effective date. Questions about this policy can be sent to hello@giwise.co.