Consumer Health Data Privacy Policy

HIPAA Compliance

Vene is HIPAA compliant. Vanta is our compliance partner and continuously monitors the safeguards behind our HIPAA program. Review Vene’s current compliance status in our public Trust Center.

This policy explains the consumer health privacy rights that apply when data is governed by state consumer health laws. It works alongside Vene’s HIPAA obligations when HIPAA applies.

1. Consumer Health Data We Collect and Why

We collect the following categories of consumer health data, and we use each only to provide and support the Service: to power conversations with you, watch your connected records for things that need attention, record tracker readings and flag responses matching configured escalation criteria, plan check-ins and follow-ups, and carry out the errands you approve.

• Medical and insurance records. Conditions, medications, allergies, immunizations, lab results, visit history, coverage details, member IDs, claims, and explanations of benefits imported from health plans and healthcare providers a patient or their authorized caregiver connects, and chart information from a sponsoring healthcare organization’s electronic health record system.
• Health information shared in conversation. Conditions, medications, symptoms, and care context that you or people authorized to help with your care share with Vene by text or voice.
• Tracker data. Trackers configured by the patient or someone authorized to help with their care, the readings and assessments Vene records against them from conversations, and escalation flags.
• Conversation derived health information. Transcripts of voice and text conversations with Vene, transcripts of the calls Vene places to third parties on your behalf, and the wellbeing signals inferred from them.
• Care activity data. Check-ins, reach-out plans, errands and their outcomes, and appointment and refill details handled through them.

2. Sources of Consumer Health Data

• You, in conversations with Vene by text and voice.
• Caregivers, family members, and clinicians authorized to help with your care.
• Organizations that sponsor or support your care, including chart information from a sponsoring healthcare organization’s electronic health record system.
• Health plans and healthcare providers you or your authorized caregiver connect through our health records partner.
• Third parties Vene speaks with while working errands you approve, such as pharmacies, provider offices, health plans, billing offices, medical equipment suppliers, and diagnostic centers.

3. Consumer Health Data We Share

We do not sell consumer health data, and we do not share it for advertising. We share consumer health data only: with service providers that process it on our behalf to operate the Service; with family members, caregivers, and clinicians according to their authorized roles; with organizations that sponsor or support your care as described below; and with third parties at your direction when Vene works an errand you approve.

• AI and voice providers. Deepgram, Cartesia, ElevenLabs, Microsoft Azure, Groq, and LiveKit process conversation audio and transcripts in real time to power Vene’s conversations and calls.
• Text message delivery. Photon delivers Vene’s text conversations over iMessage.
• Telephone infrastructure. Twilio provides the phone numbers and telephone network connection that carry Vene’s calls, including calls placed to third parties on your behalf and calls received on a patient’s care line.
• Memory and storage providers. Microsoft Azure hosts our platform and databases, where transcripts and care data are stored. Zep stores personal context and conversation memory.
• Medical records provider. Flexpa brokers patient authorized connections to health plans and healthcare providers so records can be imported with explicit consent.
• Quality and safety tooling. PostHog receives filtered operational telemetry for monitoring and debugging.
• Email delivery. Resend delivers invitation and account emails, which can include a recipient’s name and the name of the patient they are invited to help.
• Family, caregivers, clinicians, and organizations. Family members, caregivers, and clinicians see the information their authorized role allows. Employer sponsors see enrollment information, such as who has been invited and enrolled, and aggregate program statistics; they do not see patient health information. Healthcare organizations that participate in your care may access the individual care information needed for that care.
• Third parties, at your direction. When you approve an errand, Vene shares the information approved for that task, which may include your identity, insurance details, and relevant medical information such as medications, with the third parties involved, such as a pharmacy, provider office, health plan, billing office, medical equipment supplier, or diagnostic center.

We have no affiliates with whom we share consumer health data.

4. Your Rights

If you live in Washington, Nevada, Connecticut, or another state with a consumer health data law, you have the right to access the consumer health data we hold about you, to know who we have shared it with, to withdraw consent to its collection or sharing, and to have it deleted. To exercise any of these rights, email us at team@venehealth.com from the address associated with your account, or from any address alongside enough information for us to verify your identity. We will respond within forty five days.

5. Appeals

If we decline a request, you may appeal by replying to our decision or emailing team@venehealth.com with the subject line “Appeal.” A different reviewer will decide your appeal within forty five days and explain the outcome in writing. If your appeal is denied, you may contact your state attorney general.

6. Contact Us

Vene Health, Inc.
10702 Lighthouse Peak, Richmond, TX 77406
team@venehealth.com