Privacy

MEDIKEEPER PRIVACY STATEMENT

Last Updated: October 2026

Introduction

At MediKeeper, we respect and protect the privacy of the users of the portals we supply and manage on behalf of our customers. This Privacy Statement provides details of our approach to privacy and how we collect, use, and protect your personal information.

This privacy statement applies to the data collected by MediKeeper, or those working on our behalf, through information you enter, or from the imported data from authorized and approved sources. It does not apply to data collected through other non-MediKeeper approved sites, products, or services.

Collection of Your Personal Information

The Service asks you to enter an identifier/username and password to sign in. The first time you sign into the Service, the Service asks you to create an account. To create an account, you may have to provide personal information such as name, date of birth, e-mail address, and in some cases, the last four digits of your Social Security Number (SSN). These are required purely to confirm your eligibility to have access to the PORTAL by comparing them against an information file provided to us by OUR CLIENT.

We will use the e-mail address you provide when you create your account to allow you to receive notifications and messages that new information has been made available to you in the PORTAL or to advise you of some new functionality or feature that is now accessible through the PORTAL.

By default, you are the custodian of any records you create or information you enter in the PORTAL. Through “Sharing and Permissions,” you may invite additional people to access your information. You may wish to give family members, caregivers, and your doctors access to your personal health information. You can choose if they have full access (with the ability to view and modify the information) or if they only can view the information. You will also be able to dictate which sections of the PORTAL you wish them to access and for how long they are able to access it. You will receive notifications when one of these approved persons views your data. Some of the information stored in the PORTAL may be highly sensitive, so you should consider carefully with whom you share the information and to whom you grant access to your personal health information.

Security

Transmissions over the Internet are never 100% secure or error-free. However, we take reasonable steps to protect your personal information from loss, misuse, and unauthorized access, disclosure, alteration, and destruction. Further security measures and policies are described in the MediKeeper Security Policy which can be viewed here.

Sharing Your Personal Health Information

A key function of the PORTAL is the ability to share your health information with people and services who can help you meet your health-related goals. For example, you can share your health information:

  • to allow a family member or loved one to co-manage your health information,
  • to consult with your health care provider or another medical professional,
  • to provide information to coaches and trainers, or
  • to provide information to a health advocate or health advisor.

Through “Sharing and Permissions,” you can choose to share information in the PORTAL with another person by sending a sharing invitation e-mail generated by the MediKeeper platform. If the person you invited to share your information accepts your sharing invitation, he or she will have access to your information. You can specify how long they have access in the PORTAL.

You can also choose to grant full access to other persons, such as your spouse, for any portion of your health information contained within the PORTAL. Full access is the broadest level of access, so you should think carefully before you grant full access to your health information. Every person you grant full access to has the same capabilities as you as the user and account holder has, including accessing, modifying, deleting, and sharing all the information in the record. A person who has full access to your account can also revoke access to your account for any other person you may have granted access to the PORTAL, including you. For this reason, you should consider very carefully to whom you grant full access to your account.

How We Use Your Personal Information

We use personal information collected through the PORTAL, including health information, to provide you with an assessment of your overall health and your risk for disease. To assist OUR CLIENT in complying with applicable laws regarding employee medical information, our standard reporting is designed to provide your responses in aggregated and de-identified reports. Your employer is solely responsible for ensuring that their administration of this wellness program, including any requests for or access to your health information, complies with all applicable employment, privacy, and anti-discrimination laws.

MediKeeper may access and/or disclose your personal information as required by law, in the good-faith belief that disclosure is necessary or in the interest of protecting or exercising our or others’ legal rights e.g., without limitation, in connection with requests from law enforcement officials, in connection with court proceedings or disputes, or to protect the personal safety and welfare of users of PORTAL or members of the public. Personal information collected on the PORTAL is stored and processed only in the United States of America.

How We Aggregate Information and Statistics

MediKeeper may use aggregated and de-identified information collected via the PORTAL to improve the quality of the PORTAL. This aggregated information is not associated with any individual. MediKeeper does not use your individual information obtained from the Health Assessment for marketing without MediKeeper first asking for and receiving your consent.

Links to Other Websites and Third-Party Services

The PORTAL may contain links to third-party websites and services. We are not responsible for the content, security, or privacy practices of those third-party websites or services. Users should review the privacy policies of any third-party website or service they access through the PORTAL.

To support certain features and services, the PORTAL may integrate with third-party providers, including through single sign-on (SSO), identity federation, data exchange, or other service integrations. As part of these integrations, personally identifiable information (PII) or other account-related information may be transmitted to or received from third-party providers when necessary to authenticate users, enable access to services, or provide requested functionality. The specific information shared depends on the services being provided and the requirements of the integration.

Health and Fitness Data Integration

PORTAL allows you to sync health and fitness data from HumanAPI, Apple Health, Google Health Connect, and Samsung Health, bringing your device data directly into our platform to enhance your wellness experience.

  1. Data Collection and Usage We access the following health data that is used exclusively to facilitate wellness challenges, incentivization programs, and user fitness monitoring within the portal.
  2. Limited Use Disclosure Our use of information received from these vendors will adhere to each company’s privacy policies, including the Limited Use
  • We do not use data for advertising or marketing purposes.
  • We do not sell this data to third parties.
  • We only transfer this data to provide or improve our health and wellness features.
  1. Data Retention and Deletion Health data synced from these vendors is stored on our secure servers. You may disconnect HumanAPI connections at any time through the Tracker function. You may disconnect Apple Health, Health Connect, and Samsung Health through the native permissions of each app.
  2. Medical Disclaimer The PORTAL platform and the data retrieved via each vendor are for informational and motivational purposes only. This service is not a medical device and is not intended to diagnose, treat, cure, or prevent any medical condition.
  3. Vendor Privacy Policies Refer to each company’s applicable privacy policies for additional information.

Third-Party Services and Attributions

This product includes GeoLite Date created by MaxMind, available from https://www.maxmind.com.

Privacy of Minors

The PORTAL is intended for use by adults in the United States. We do not actively solicit, nor do we intentionally or directly collect, personally identifiable information or personal health information from anyone under the age of 16. We request that individuals under the age of 16 not submit any personal information to the PORTAL.

Security of Your Personal Information

MediKeeper is committed to protecting the security of your personal information. We use a variety of security technologies and procedures to help protect your personal information from unauthorized access, use, and disclosure. For example, we store the personal information you provide on computer servers with limited access that are located in controlled facilities, and the data is stored in separate encrypted locations.

Enforcement of this Privacy Statement

If you have questions regarding this statement, you should first contact MediKeeper. You should immediately notify MediKeeper if you feel your personal information has been tampered with, or if you feel there has been a breach of your privacy for any reason.

Changes to this Privacy Statement

We may occasionally update this privacy statement. When we do, we will also revise the “last updated” date at the top of the privacy statement. We encourage you to review this privacy statement periodically to stay informed about how we are helping to protect the personal information we collect. Your continued use of the PORTAL constitutes your agreement to this privacy statement and any updates. Please be aware that this privacy statement and any choices you make on the PORTAL do not necessarily apply to personal information that you may have provided to MediKeeper in the context of other separately operated MediKeeper products or services.

Contact Information

MediKeeper and our partners welcome your comments regarding this Privacy Statement. If you have questions about this Statement or believe that we have not adhered to it, please contact OUR CLIENT at customerservice@medikeeper.com.