Privacy.

Who we are to you

Kinvisit is a service that hospitals and surgery centers use to send plain-language updates about an admitted patient to the people that patient chooses. The facility is the HIPAA covered entity. Kinvisitacts as its business associate under a written business associate agreement, and only processes information on the facility’s instructions.

What the facility shares with us

• An internal patient reference, the name or nickname the patient chose to show, the unit, the procedure as the facility describes it, and an optional room number.
• The stage of the stay and short status updates written by the care team for families. No lab results, diagnoses, images or treatment plans.
• The names, mobile numbers, access levels and language of the contacts the patient (or a verified guardian) added.
• Questions those contacts send to the care team and the replies.

What we never use it for

Nothing is sold, shared with advertisers, or used to build profiles. There are no third-party analytics or advertising scripts in the family app. Aggregate usage counts (updates per stay, response times) are shown to the facility’s administrators without names.

Who can see what

• The patient decides who follows and at which level: full, status only, or emergency only.
• Invitations carry a random access code, never a name. Joining needs the code, the patient’s PIN and a one-time code sent to the contact’s phone.
• Care team members see only the units they work on. Every read and every change is written to an audit log the facility and the patient can review.

Text messages

Contacts receive updates by text at the number the patient gave. Every message names the facility and ends with “Reply STOP to opt out”. Replying STOP turns texts off immediately; START turns them back on. Replies are not read by the care team.

How long we keep it

• Family access closes automatically 48 hours after discharge.
• Thirty days after that, contact phone numbers are removed and push subscriptions deleted.
• The text-message delivery log is kept for 90 days.
• Updates, questions and the audit trail are retained for the period the facility sets in its agreement, then deleted or returned.

Security

Data is encrypted in transit and at rest and hosted in US regions of a cloud provider under a business associate agreement. Access codes avoid look-alike characters, PINs and passwords are hashed, staff accounts lock after repeated failures, and all sessions expire. See the security overview in the product documentation.

Your rights

Requests to see, correct or delete information go to the facility, which instructs us. Use our contact form for anything about this service itself.