Privacy Policy

Overview

Bluefin Health (“Bluefin Health,” “we,” “us”) operates a physical therapy marketplace connecting patients with physical therapists. This policy explains what information we collect, how we use it, and the choices you have. Bluefin Health is designed to comply with HIPAA and HITECH; protected health information (PHI) is handled under those rules and the agreements we maintain with our service providers.

Information we collect

• Account information — name, email, phone number, and role (patient or physical therapist).
• Health information — insurance details, documents you upload, appointment and evaluation records.
• Payment information — processed by our payment provider (Stripe); we do not store full card numbers.
• Usage and device data — limited technical information needed to operate and secure the service.

How we use information

• To provide and coordinate physical therapy services and appointments.
• To verify insurance and therapist certifications.
• To process payments and send service-related notifications.
• To secure the platform, maintain audit trails, and meet legal obligations.

How we share information

We share information only as needed to provide the service — with the physical therapist or staff coordinating your care, and with service providers (hosting, payments, SMS, email, insurance verification) acting on our behalf under appropriate agreements, including Business Associate Agreements where required. We do not sell your personal information.

Data security

Information is encrypted in transit and at rest. Document access uses short-lived, time-limited links. Access is restricted on a minimum-necessary basis and all access to health information is logged.

Your choices and account deletion

You can delete your account from the app’s Profile screen (“Delete account”). Deleting your account closes it and signs you out. Certain records may be retained for the period required by law and our compliance obligations, after which they are no longer accessible to you. To request access to or correction of your information, contact us at the address below.

Contact

Questions about this policy or your information: privacy@bluefin.health.