Quina

Privacy Policy

Last Updated: June 9, 2026

Quina Health (“Quina,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, patient portal, provider dashboard, and related services (collectively, the “Services”). By using the Services, you consent to the practices described in this policy.

1. Information We Collect

1.1 Information You Provide

  • Account information: Name, email address, phone number, password, and role (patient, provider, or caregiver) when you create an account.
  • Profile information: Date of birth, medical conditions, provider specialty, NPI number, organization details, and caregiver relationship information.
  • Health information: Medications (names, dosages, schedules, prescribing provider), dose logs, symptoms, mood entries, vitals, health journal entries, and any photos or attachments you upload.
  • Appointment information: Scheduled appointments, appointment types, availability, notes, and cancellation reasons.
  • Care coordination data: Consent links between patients and providers, caregiver permissions, provider comments on journal entries, and shared care plan information.
  • Communications: Messages you send through the Services, support requests, and feedback.

1.2 Information Collected Automatically

  • Usage data: Pages visited, features used, actions taken, timestamps, and interaction patterns.
  • Device information: Browser type, operating system, device identifiers, and screen resolution.
  • Log data: IP address, access times, referring URLs, and error logs.
  • Cookies and similar technologies: We use cookies and similar tracking technologies to maintain sessions, remember preferences, and analyze usage. See Section 7 for details.

1.3 Information from Third Parties

We may receive information from healthcare providers who use our Services to coordinate your care, or from third-party authentication services if you choose to sign in through them.

2. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Services, including medication tracking, appointment scheduling, health journaling, care coordination, and care plan management.
  • Send you dose reminders, appointment notifications, and other service-related communications based on your notification preferences.
  • Enable care coordination between patients, providers, and caregivers based on consent you have granted.
  • Generate adherence analytics and health insights to help you and your care team make informed decisions.
  • Maintain audit logs to ensure the security and integrity of your health information.
  • Detect, prevent, and address technical issues, fraud, and security threats.
  • Comply with legal obligations and respond to lawful requests from public authorities.

3. How We Share Your Information

We do not sell your personal information. We share your information only in the following circumstances:

  • With your care team: When you grant consent, your health information (medications, appointments, journal entries) is shared with the providers and caregivers you authorize. You control the scope of sharing and can revoke consent at any time.
  • With caregivers: If you link a caregiver to your account, they receive the specific permissions you grant (e.g., view medications, log doses, view or create journal entries, manage appointments).
  • Service providers: We may share information with third-party vendors who help us operate the Services (e.g., cloud hosting, email delivery, analytics), subject to contractual obligations to protect your data.
  • Legal requirements: We may disclose information if required by law, regulation, legal process, or governmental request, or to protect the rights, safety, or property of Quina, our users, or the public.
  • Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

4. Health Information and HIPAA

Quina Health is designed to support healthcare coordination. To the extent that we handle protected health information (“PHI”) on behalf of covered entities (such as healthcare providers), we do so in compliance with the Health Insurance Portability and Accountability Act (“HIPAA”) and applicable state health privacy laws. We maintain Business Associate Agreements with covered entities as required.

Health information you enter directly (such as medications, journal entries, and symptoms) is stored securely and shared only with individuals you explicitly authorize through our consent system. You may view, modify, or revoke sharing permissions at any time from your dashboard.

5. Data Security

We implement industry-standard security measures to protect your information, including:

  • 256-bit encryption for data in transit (TLS) and at rest.
  • Secure password hashing and account lockout after repeated failed login attempts.
  • Role-based access controls that limit data access to authorized users based on consent and permissions.
  • Comprehensive audit logging of all access to and modifications of health information.
  • Regular security assessments and monitoring for unauthorized access.

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security, but we are committed to promptly addressing any security incidents.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide the Services. Health records and audit logs may be retained for longer periods as required by applicable healthcare regulations. When you delete your account, we will remove or de-identify your personal information within 30 days, except where retention is required by law.

7. Cookies and Tracking Technologies

We use cookies and similar technologies for the following purposes:

  • Essential cookies: Required for the Services to function, including authentication, session management, and security.
  • Analytics cookies: Help us understand how users interact with the Services so we can improve functionality and user experience.

We do not use advertising or third-party tracking cookies. You can manage cookie preferences through the cookie consent banner on our website or through your browser settings. Disabling essential cookies may affect the functionality of the Services.

8. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights regarding your personal information:

  • Access: Request a copy of the personal information we hold about you.
  • Correction: Request correction of inaccurate or incomplete information.
  • Deletion: Request deletion of your personal information, subject to legal retention requirements.
  • Portability: Request a copy of your data in a structured, machine-readable format.
  • Withdraw consent: Revoke consent for data sharing with providers or caregivers at any time from your dashboard.
  • Opt out of communications: Manage your notification preferences (push and email) for each category of communication from your account settings.

To exercise any of these rights, contact us at privacy@quinaheath.com. We will respond within 30 days.

9. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

  • The right to know what personal information we collect, use, and disclose.
  • The right to delete your personal information.
  • The right to opt out of the sale or sharing of personal information. We do not sell or share your personal information for cross-context behavioral advertising.
  • The right to non-discrimination for exercising your privacy rights.

You may exercise these rights by contacting us at privacy@quinaheath.com or by using the “Do Not Sell My Personal Information” link on our website.

10. Children's Privacy

The Services are not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If a parent or guardian authorizes a caregiver account to manage a minor's health information, that parent or guardian is responsible for the minor's use of the Services. If we learn that we have collected information from a child under 13 without proper consent, we will promptly delete it.

11. International Users

The Services are operated in the United States. If you access the Services from outside the United States, your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction. By using the Services, you consent to such transfers.

12. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice through the Services or by email, and update the “Last Updated” date above. Your continued use of the Services after changes take effect constitutes acceptance of the revised policy.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

Quina Health
Email: privacy@quinaheath.com
Web: https://www.quinaheath.com