Get the app

RemoteScreen Patient App Privacy Policy

Last updated

On this page 19 sections

PostureCo may update this document at any time without prior notice. The date above shows when it was last updated, so please check back from time to time.

REMOTESCREEN® PATIENT APP PRIVACY POLICY

LAST UPDATED: October 16, 2026

This RemoteScreen® Patient App Privacy Policy (this "Policy") explains how PostureCo, Inc., a Florida corporation ("PostureCo," "we," or "us"), handles information about you when you use RemoteScreen® at the invitation of your healthcare, wellness, or fitness professional or practice ("Your Provider"), and your choices and rights.

KEY POINTS.

  • PostureCo works for Your Provider. What you submit goes to Your Provider's PostureCo Cloud account and, apart from the limited information PostureCo handles for itself (Section 2.4) and de-identified information (Section 5.2), is handled only on Your Provider's behalf.
  • No selling of information that identifies you, no advertising. PostureCo does not sell information that identifies you or use it for advertising or its own marketing, and RemoteScreen in a web browser uses no advertising or analytics trackers. De-identified information, which no longer identifies you, may be used, shared, or sold (Section 5.2).
  • AI assists Your Provider. The AI-Guided Health History uses AI providers bound by Business Associate Agreements with PostureCo, which may not train their models on your information.
  • AI-Guided Health History: USA only. Use it only from inside the United States; using it from anywhere else, including through a VPN, violates PostureCo's Terms of Service. Photos and videos may be sent from anywhere. Please do not use a VPN or other tool that hides your location with RemoteScreen (Section 6.6).
  • Not for emergencies. If you may be having a medical emergency, call 911 or your local emergency number.
  • Your rights. To see, copy, correct, or delete your records, contact Your Provider.

1. ABOUT THIS POLICY#

1.1 WHAT THIS POLICY COVERS. This Policy covers information collected from patients and clients through RemoteScreen (Section 3). It does not cover what Your Provider does with your information, which Your Provider's own privacy notice (under HIPAA, its notice of privacy practices) and the law govern, or PostureCo's websites and dealings with its own customers, which the PostureCo Privacy Policy at https://www.postureanalysis.com/privacy-policy/ covers.

1.2 A NOTICE, NOT A CONTRACT. This Policy describes PostureCo's practices; it is not a contract, and it creates no warranty. By using RemoteScreen, you acknowledge this Policy and agree to use RemoteScreen as Section 4 (Prohibited Uses) of PostureCo's Terms of Service (https://www.postureanalysis.com/legal/terms-of-service/) requires, including the location rules described in Section 6.6 of this Policy. PostureCo's intellectual-property rights also apply to your use of RemoteScreen. Your use does not make you a PostureCo customer or a party to PostureCo's agreements with Your Provider, which, with the law, set PostureCo's obligations for your information. Nothing in this Policy limits your rights under applicable law.

2. WHO WE ARE AND OUR ROLE#

2.1 POSTURECO AND REMOTESCREEN. RemoteScreen is part of PostureCo Cloud Services, a subscription Your Provider holds with PostureCo. Your Provider sends you a link, usually opened in your phone's web browser with nothing to install, to provide the information, photos, and video described in Section 4.

2.2 POSTURECO ACTS ON YOUR PROVIDER'S BEHALF. PostureCo provides RemoteScreen to Your Provider, not to you, and handles what you submit on Your Provider's behalf and instructions. Your Provider decides whether to invite you, what to ask for, who may see your information, and how long to keep it, and PostureCo is not responsible for what Your Provider does with it. PostureCo does not examine, diagnose, or treat you or provide you any healthcare or other professional service, and its staff do not look at your submissions in the ordinary course (Section 8.3).

2.3 HIPAA AND BUSINESS ASSOCIATE AGREEMENTS. If Your Provider is covered by the Health Insurance Portability and Accountability Act of 1996 and its regulations ("HIPAA"), what you submit is generally protected health information ("PHI"). Using RemoteScreen does not by itself create a Business Associate Agreement ("BAA"). PostureCo agrees to act as Your Provider's business associate only under a BAA that both have fully executed and that covers PostureCo Cloud Services; PostureCo then uses and discloses PHI only as the BAA and HIPAA permit. It is Your Provider's sole responsibility to determine whether a BAA is required, to request one from PostureCo, and to make sure it is fully executed before any PHI is uploaded, transmitted, recorded, or dictated, which includes before Your Provider turns on cloud backup or synchronization for records that contain PHI and before it invites any patient to RemoteScreen.

2.4 INFORMATION POSTURECO HANDLES FOR ITSELF. PostureCo decides for itself how to handle only two kinds of information: the technical and security information in Section 4.6, which it uses as the PostureCo Privacy Policy describes, including to operate and secure RemoteScreen and its systems, to enforce its terms (such as the location rules in Section 6.6), and to comply with the law; and anything you send PostureCo directly, such as a question. For that information, PostureCo is the "controller" or "business." But any of it that is part of Your Provider's records, is PHI, or is consumer health data under a law such as Washington's My Health My Data Act, PostureCo handles only on Your Provider's behalf (Sections 11 and 12).

3. DEFINITIONS#

In this Policy, "RemoteScreen" means PostureCo's RemoteScreen® service as patients and clients use it, in a web browser or app, including the messages inviting them to use it; "AI-Guided Health History" means its optional AI voice intake (Section 4.5); "Your Information" means information about you collected through RemoteScreen (Section 4), but not de-identified information (Section 5.2); and "you" includes a parent, legal guardian, or other authorized person who uses RemoteScreen for someone else.

4. INFORMATION REMOTESCREEN COLLECTS#

What RemoteScreen collects depends on what Your Provider asks for and what you choose to provide; please provide only what you are asked for.

4.1 INFORMATION FROM YOUR PROVIDER. To invite you, Your Provider may enter your name and contact details, such as your mobile telephone number or email address.

4.2 INFORMATION YOU TYPE. RemoteScreen may ask for details such as your name, date of birth, gender, height, weight, telephone number, email address, and notes (for example, about pain), and anything else Your Provider asks for. Enter information about, or photos of, someone else only with that person's permission or as their parent or legal guardian.

4.3 PHOTOS AND VIDEO. With your permission to use your camera, RemoteScreen guides you to take posture photos and a movement video; a RemoteScreen app may also let you choose photos from your photo library, with your permission, and add a profile photo. Photos and videos may show your face, body, surroundings, and anyone else in view, so use a private place where no one else is in the picture.

4.4 IN-BROWSER POSTURE GUIDANCE. To help you line up each photo, RemoteScreen analyzes the live camera image in your web browser, on your own device, and does not send those camera images to any third party.

4.5 AI-GUIDED HEALTH HISTORY. Where Your Provider offers it, and only while you are inside the United States (Section 6.6), you may answer health history questions by speaking with an AI system. First, RemoteScreen asks you to confirm that you are not having a medical emergency, to acknowledge that the AI does not give medical advice, and to consent to being recorded for transcription. If you take part, RemoteScreen collects your voice recording, a transcript, your answers, and a written summary for Your Provider, which decides what its account keeps and for how long (Section 9.1); under PostureCo's arrangements with them, the AI providers keep no copy (Section 6).

4.6 TECHNICAL INFORMATION AND BROWSER STORAGE. Your browser or device sends technical information, such as your IP address, browser and device type, operating system, and visit time, and PostureCo's systems log access and administrative events. In a web browser, RemoteScreen keeps a random device identifier in local storage and session settings in session storage, which it needs to work (Section 14). A RemoteScreen app may also send PostureCo technical, usage, and error information (PostureCo Privacy Policy, Section 2.3).

4.7 NO FACIAL RECOGNITION. RemoteScreen does not use facial recognition, and PostureCo does not use your photos, video, or voice to create a faceprint, voiceprint, or other template that identifies you. Some laws, such as Washington's My Health My Data Act, may still treat photos or voice recordings as biometric data; PostureCo handles them only on Your Provider's behalf.

5. HOW YOUR INFORMATION IS USED#

5.1 HOW POSTURECO USES YOUR INFORMATION. PostureCo uses Your Information on Your Provider's behalf: to deliver it to Your Provider; to operate RemoteScreen (creating your link, sending messages at Your Provider's request, guiding your photos and video, and running the AI-Guided Health History); to maintain, support, and secure RemoteScreen and PostureCo's systems, including against fraud and abuse; to comply with the law, legal process, and its agreements with Your Provider; and as the law otherwise requires, or the law and those agreements permit.

5.2 DE-IDENTIFIED INFORMATION. PostureCo may remove the details that identify you from information (de-identify it), or combine it with other people's information into aggregate statistics, and use and disclose the result as Section 13.4 of the PostureCo Privacy Policy describes, including for research, product improvement, and artificial intelligence model development, and to share, license, sell, or otherwise commercialize it. It does so only as its agreements with Your Provider and applicable law permit (for PHI, only as HIPAA's de-identification standard, 45 C.F.R. § 164.514, and the executed BAA allow), and never with information it knows is about a child under 13 (Section 13). For information first submitted before October 15, 2026, PostureCo follows Your Provider's agreement: it does not de-identify that information unless Your Provider has affirmatively accepted a version of PostureCo's Terms of Service, Cloud Services Agreement, or PostureScribe.AI User Agreement dated October 15, 2026 or later. PostureCo may disclose, license, or sell de-identified patient information derived from PHI; when it does, the information has been de-identified under the HIPAA standard using the safe-harbor method (45 C.F.R. § 164.514(b)(2)) or the expert-determination method (45 C.F.R. § 164.514(b)(1)). PostureCo keeps such information de-identified, does not try to re-identify it except as the law permits, and, where the law requires, contractually prohibits recipients from re-identifying it. Otherwise, PostureCo accesses information that identifies you only to provide, secure, and support RemoteScreen, as Your Provider authorizes, as Section 7 describes, or as the law requires.

5.3 HOW YOUR INFORMATION IS NOT USED. PostureCo does not:

  • sell Your Information;
  • use it for advertising, or share it with anyone for their advertising;
  • use it to market anything to you, other than by delivering messages that Your Provider chooses to send (Section 15.1);
  • give it to PostureCo's business partners for their own purposes;
  • let its AI providers train their AI models on it (Section 6.2), or use it to develop PostureCo's own AI models except in de-identified form (Section 5.2); or
  • use it to make decisions about you, such as about your care, insurance, employment, or credit.

6. ARTIFICIAL INTELLIGENCE#

6.1 AI PROVIDERS. The AI-Guided Health History uses artificial intelligence services from SpaceXAI LLC, formerly known as xAI and now part of SpaceX, which provides the Grok models ("SpaceX AI"), to run the voice conversation, transcribe what you say, and organize your answers for Your Provider. SpaceX AI provides these services to PostureCo under a signed Business Associate Agreement and with zero data retention: it does not retain the data it processes for PostureCo. PostureCo may also use other AI providers bound by a Business Associate Agreement with PostureCo; Amazon Web Services ("AWS"), including Amazon Bedrock, is one of them.

6.2 ONLY WHAT IS NEEDED; NO TRAINING. PostureCo designs the AI-Guided Health History to send its AI providers only the information needed for the intake, consistent with HIPAA's minimum necessary standard. It sends PHI only to AI providers bound by a Business Associate Agreement, or an equivalent subcontractor agreement, with PostureCo, and under PostureCo's arrangements with them, those providers may not use Your Information to train their AI models. PostureCo may add, change, or replace AI providers or models at any time without prior notice, except where Section 8.3 of the PostureCo Cloud Services Agreement or applicable law requires notice.

6.3 AN AI SYSTEM, REVIEWED BY YOUR PROVIDER. In the AI-Guided Health History, you are interacting with an automated AI system, not a person. It organizes your health history for Your Provider; it does not give medical advice, diagnose, or recommend treatment, and its output can be inaccurate or incomplete. Your Provider reviews the results and makes all decisions about your care; PostureCo's staff do not review them. If something was recorded or summarized incorrectly, tell Your Provider.

6.4 NOT FOR EMERGENCIES. RemoteScreen is not an emergency service, and Your Provider may not see what you submit right away. If you may be having a medical emergency, stop and call 911 or your local emergency number.

6.5 RECORDING. If you consent to being recorded (Section 4.5), what you say is sent to the AI providers in Section 6.1, which process it for PostureCo on Your Provider's behalf. Some states require everyone who is recorded to consent, so use a private place and do not record anyone else without their permission.

6.6 UNITED STATES ONLY; NO VPNS. The AI-Guided Health History is available only in the United States at this time, and you may use it only from inside the United States. Using it from outside the United States, including through a virtual private network ("VPN") or another tool that hides or changes your location, is not permitted and violates PostureCo's Terms of Service, including Section 4 (Prohibited Uses), as they apply to your use of RemoteScreen (Section 1.2). This applies until PostureCo formally makes the AI-Guided Health History available outside the United States, which it will do only by publishing updated terms or a written release notice on its website or in RemoteScreen or its other services. If you are outside the United States, please do not start it, and tell Your Provider; Your Provider is responsible for offering it only to patients and clients in the United States. You may send RemoteScreen photos and videos from anywhere. Please do not use a VPN, proxy server, or other tool that hides or changes your location with any part of RemoteScreen; PostureCo's Terms of Service do not allow it. PostureCo is not required to check where you are, any check it makes may be wrong, and it may not be able to detect such a tool; it may block or turn off the AI-Guided Health History, or access to RemoteScreen, if it suspects such use.

7. HOW YOUR INFORMATION IS SHARED#

PostureCo shares Your Information only as this Section describes. Where HIPAA applies, PostureCo uses and discloses your PHI only as its executed BAA with Your Provider permits or the law requires.

7.1 WITH YOUR PROVIDER. Everything you submit is delivered to Your Provider's PostureCo Cloud account, where Your Provider and the people it authorizes can see it. Your Provider may move it into other systems outside PostureCo's control, such as its electronic health record.

7.2 WITH SERVICE PROVIDERS. PostureCo uses service providers, including AWS and the AI providers in Section 6, to host, store, process, transmit, secure, and support RemoteScreen. Each may handle Your Information only on PostureCo's behalf, under a written agreement that restricts its use. Service providers that receive PHI act for PostureCo under Business Associate Agreements with PostureCo, and every vendor whose services could involve PHI must sign one before it is engaged.

7.3 AT YOUR PROVIDER'S DIRECTION OR WITH YOUR CONSENT. PostureCo shares Your Information when Your Provider directs it, for example when Your Provider uses an integrated service to send you an exercise program, or with your consent where the law permits.

7.4 FOR LEGAL REASONS. PostureCo may disclose Your Information where it believes in good faith that the law requires it, such as to comply with a court order, subpoena, or lawful government request, and, where the law permits, to protect the rights, property, or safety of you, Your Provider, PostureCo, or others, or to investigate fraud or security issues.

7.5 BUSINESS TRANSFERS. If PostureCo is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of its business or assets, Your Information may be transferred as part of that transaction, subject to the same protections and any executed BAA.

8. STORAGE, LOCATION, AND SECURITY#

8.1 WHERE YOUR INFORMATION IS STORED. What you submit through RemoteScreen is stored in Your Provider's PostureCo Cloud account on AWS, under a signed Business Associate Addendum between PostureCo and AWS, and, including any PHI, is stored and processed in AWS services that AWS designates as HIPAA-eligible; what you say in the AI-Guided Health History is also processed in the United States by the AI providers in Section 6, under their own Business Associate Agreements with PostureCo. Your submissions are stored in the AWS region that Your Provider chose for its account when it set the account up, from the regions PostureCo offers (for example, the United States, Europe, or Asia, where offered), or in the United States if Your Provider made no choice. Choosing that region is Your Provider's responsibility; PostureCo relies on Your Provider's choice and is not required to check where Your Provider or its patients are located. If Your Provider asks PostureCo to move its data to another region, PostureCo, after verifying the request, moves the data and then deletes it from the earlier region, and backup copies are removed as secure backup retention cycles run. AWS stores data redundantly across multiple availability zones within a region and provides the physical security of its data centers; PostureCo operates none of its own.

8.2 ACCESS FROM THE UNITED STATES. Even when Your Information is stored outside the United States, PostureCo personnel and service providers in the United States may access it as needed to provide, secure, and support RemoteScreen (Section 12.2).

8.3 HOW YOUR INFORMATION IS PROTECTED. PostureCo's administrative, technical, and physical safeguards for Your Information include:

  • encryption while information travels over the internet (TLS) and while it is stored (AES-256);
  • separation of each practice's information, enforced on PostureCo's servers;
  • a drop-off design: once submitted, information cannot be viewed again through your RemoteScreen link;
  • authentication of requests, and logging of access and administrative events;
  • production access limited to designated senior technology staff, for maintenance; and
  • blind storage: in the ordinary course of providing RemoteScreen, PostureCo's staff do not look at, review, or interpret what you submit, and PostureCo's systems process it automatically only to provide, secure, and support RemoteScreen and, where PostureCo's agreements with Your Provider permit, to create de-identified information (Section 5.2).

No method of transmission or storage is completely secure, and PostureCo cannot guarantee absolute security. PostureCo may change its safeguards and service providers while maintaining equivalent or better protection. Please keep your RemoteScreen link private.

9. HOW LONG YOUR INFORMATION IS KEPT#

9.1 YOUR PROVIDER DECIDES. What you submit becomes part of Your Provider's records, and Your Provider decides how long to keep it. PostureCo deletes or returns it as its agreements with Your Provider provide; for example, cloud data may be permanently deleted thirty (30) days after Your Provider's subscription ends, and backup copies are removed as secure backup retention cycles run. PostureCo is not a medical-records custodian, and RemoteScreen is not a system of record.

9.2 BROWSER STORAGE AND TECHNICAL RECORDS. Session settings are normally cleared when you close the browser tab, and the random device identifier stays in your browser's local storage until you clear it. PostureCo keeps technical and security records only as long as reasonably necessary for security, legal, and operational purposes.

10. YOUR CHOICES AND RIGHTS#

10.1 YOUR RIGHTS COME THROUGH YOUR PROVIDER. Because Your Provider controls your records, please send requests about them to Your Provider. Depending on the laws that apply, you may have the right to see and get a copy of your records, to ask for corrections, deletion, or limits on their use or disclosure, to receive a list of certain disclosures, and to complain. Where HIPAA applies, Your Provider's notice of privacy practices explains these rights, including how to complain to Your Provider or to the U.S. Department of Health and Human Services Office for Civil Rights. The law may require Your Provider to keep certain records even if you ask for deletion.

10.2 IF YOU CONTACT POSTURECO. If you send PostureCo a request about information you submitted through RemoteScreen, PostureCo will forward it to Your Provider, or tell you how to contact Your Provider, and will support Your Provider's response as the law and its agreements require. In response to your request, PostureCo does not release, change, or delete records it holds for Your Provider without Your Provider's instruction, except where the law requires it; this does not limit what Sections 7 and 9 describe. PostureCo may ask for information to confirm your identity and to identify Your Provider.

10.3 CAMERA, PHOTO LIBRARY, AND MICROPHONE. RemoteScreen uses your camera, photo library, and microphone only with your permission, which you can withdraw at any time in your browser or device settings. Without camera access, RemoteScreen cannot take photos or video; without microphone access, the AI-Guided Health History cannot work.

10.4 STOPPING AND WITHDRAWING CONSENT. Using RemoteScreen and the AI-Guided Health History is your choice, and you can stop at any time before you finish, although some information may already have reached Your Provider. To withdraw a consent, such as to recording, tell Your Provider; this does not affect earlier processing, and Your Provider may need to keep records already created.

11. U.S. STATE PRIVACY AND CONSUMER HEALTH DATA LAWS#

11.1 HOW THESE LAWS APPLY. Some U.S. state laws, such as the California Consumer Privacy Act and Washington's My Health My Data Act, give residents rights over personal information and consumer health data, but generally exempt PHI governed by HIPAA and medical information governed by similar state laws. For other information submitted through RemoteScreen (for example, where Your Provider is a fitness or wellness professional not covered by HIPAA), Your Provider is the "business," "controller," or "regulated entity," and PostureCo is its "service provider," "contractor," or "processor," acting under its contract with Your Provider and on Your Provider's instructions, only for the purposes in Section 5.

11.2 YOUR RIGHTS AND HOW REQUESTS ARE HANDLED. Depending on where you live, you may have rights to access, correct, or delete information about you, to learn which third parties received it, to withdraw consent, and to opt out of its sale or use for targeted advertising. Please send requests and appeals about information you submitted through RemoteScreen to Your Provider, which PostureCo will help (Section 10.2). For the limited information PostureCo handles for itself (Section 2.4), you or an authorized agent may make a request, and appeal PostureCo's decision, as Section 9 of the PostureCo Privacy Policy describes. PostureCo does not sell Your Information, including consumer health data, "share" it for cross-context behavioral advertising, or use it for targeted advertising, so there is nothing to opt out of with PostureCo, and it will not discriminate against you for exercising your privacy rights.

12. PATIENTS OUTSIDE THE UNITED STATES#

12.1 YOUR PROVIDER IS THE CONTROLLER. If you are in the European Economic Area, the United Kingdom, Switzerland, or another country with similar laws, Your Provider is the controller of the information you submit through RemoteScreen, and PostureCo is its processor, acting on Your Provider's documented instructions. Your Provider is responsible for following the laws that apply to it, including putting in place any agreement with PostureCo that those laws require. It is also responsible for having a lawful basis to use your information, including your explicit consent for health information where required, and for giving you the notices the law requires. Besides the rights in Section 10.1, you may have the right to object to processing, to data portability, and to withdraw consent at any time without affecting earlier processing; exercise them with Your Provider, which PostureCo will assist, and you may also complain to a data protection supervisory authority, such as the one where you live or work.

12.2 INTERNATIONAL TRANSFERS. Where the law requires a transfer mechanism for any transfer of Your Information to, or access to it from, the United States (Section 8), PostureCo relies on one the law permits, such as standard contractual clauses.

12.3 USING REMOTESCREEN FROM OUTSIDE THE UNITED STATES. From outside the United States, you may send photos and videos through RemoteScreen, but you may not use the AI-Guided Health History (Section 6.6), and what you submit is stored in the region Your Provider chose (Section 8.1).

13. CHILDREN AND MINORS#

RemoteScreen is not directed to children under 13, and PostureCo does not knowingly collect personal information directly from a child under 13. For a child under 13, a parent or legal guardian must complete RemoteScreen on the child's behalf; the child must not use it on their own. The parent or legal guardian, not the child, gives every consent and confirmation RemoteScreen asks for, including consent to recording, and Your Provider is responsible for any other parental consent the law requires, including under the Children's Online Privacy Protection Act. Minors aged 13 to 17 may use RemoteScreen only with a parent's or legal guardian's permission and as Your Provider allows.

PostureCo handles information it knows is about a child under 13 only on Your Provider's behalf: it uses that information only to provide, support, and secure RemoteScreen and to comply with the law; makes none of it public; discloses it only as Sections 7.1, 7.2, 7.4, and 7.5 describe or, with any parental consent the law requires, at Your Provider's direction (Section 7.3); keeps it only as long as reasonably necessary for those purposes (Section 9); and does not use it to create de-identified or aggregate information. A parent or legal guardian may agree to that collection and use without agreeing to any other disclosure. The device identifier is used only as Section 14 describes.

A parent or legal guardian may ask Your Provider, or PostureCo, which will work with Your Provider, to review a child's information, to have it deleted, or to stop its further collection or use. If you believe a child under 13 has used RemoteScreen without a parent or legal guardian completing it for them, contact Your Provider or PostureCo, and PostureCo will work with Your Provider to take the steps the law requires.

14. COOKIES, BROWSER STORAGE, AND DO NOT TRACK#

In a web browser, RemoteScreen uses only the cookies and browser storage strictly necessary for it to work, such as the device identifier and session settings in Section 4.6, and no advertising or analytics cookies, pixels, or similar trackers. The device identifier is used only to operate and secure RemoteScreen and to comply with the law, never to contact, advertise to, or build a profile of anyone. In a web browser, RemoteScreen does not track you across other websites or apps, so there is nothing in it for a browser "Do Not Track" or Global Privacy Control signal to turn off; PostureCo's websites honor Global Privacy Control as the PostureCo Privacy Policy describes. If you clear browser storage, RemoteScreen may not work properly. A RemoteScreen app may keep similar information, and the profiles you create (including each person's details and photos), on your device so that you can send them to Your Provider.

15. MESSAGES YOU RECEIVE#

15.1 REMOTESCREEN LINKS. Your RemoteScreen link is sent by Your Provider, or by PostureCo's systems at Your Provider's request, for example by text message or email, using contact details Your Provider has for you. Your Provider decides whether and when to send you RemoteScreen messages and is responsible for having any permission the law requires to send them, including for any marketing message. If you no longer want RemoteScreen messages, tell Your Provider; where a text message offers the option, you can also reply STOP.

15.2 KEEP HEALTH INFORMATION OUT OF MESSAGES. RemoteScreen messages are designed to carry your link, not your photos, video, or answers. Text messages and email are not secure channels for health information, so please do not reply to a RemoteScreen message with health information. If you are unsure a message came from Your Provider, check with Your Provider before opening the link.

15.3 YOUR MOBILE NUMBER STAYS PRIVATE. PostureCo never sells your mobile telephone number and never shares it, or any text-messaging consent, with its partners, affiliates, or any other third parties for their marketing or any other purpose of their own. It is used only to deliver RemoteScreen messages and as part of what Your Provider receives. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes.

16. SECURITY INCIDENTS#

If PostureCo discovers a security incident or breach affecting Your Information, it will notify Your Provider as HIPAA, its agreements with Your Provider (including any BAA), and other applicable law require; for a breach of unsecured PHI, it will do so without unreasonable delay and no later than sixty (60) calendar days after discovery, or within any shorter period that the BAA or applicable law requires. Your Provider is responsible for notifying you where the law requires; where a law requires PostureCo to notify you directly, it will. To report a suspected security issue, including a RemoteScreen message you think is not genuine, contact PostureCo (Section 19).

PostureCo is not responsible for the content or privacy practices of websites or services it does not operate, such as Your Provider's website, even if RemoteScreen links to them.

18. CHANGES TO THIS POLICY#

PostureCo may update this Policy at any time. The "Last Updated" date at the top shows when it last changed, and the current version is always at https://www.postureanalysis.com/legal/remotescreen-patient-privacy-policy/. Changes take effect when posted, subject to any notice or consent the law requires.

19. CONTACT US#

19.1 QUESTIONS ABOUT YOUR RECORDS. For questions or requests about your records, your care or services, or the information Your Provider asked you to provide, please contact Your Provider directly.

19.2 QUESTIONS ABOUT REMOTESCREEN OR THIS POLICY. Contact PostureCo, Inc. PostureCo's Chief Executive Officer and Chief Technology Officer are its designated Privacy and Security Officers.

Please do not include health information or details about your care in an email, voicemail, or contact-form message to PostureCo; PostureCo will refer questions about your records to Your Provider. If you need this Policy in another format because of a disability, please contact PostureCo.