Lyla Health Privacy Policy

Last updated: 6th of May, 2026

By clicking “I Agree,” selecting a checkbox indicating acceptance, using any other acceptance mechanism presented through the Service (as defined below), or otherwise affirmatively indicating your agreement to these Terms and Conditions, you confirm that you have read, understood, and agree to be bound by this Agreement. If you do not agree to these Terms and Conditions, you must not create an account or use the Service. You further authorize and grant agency to any individual who accepts these Terms and Conditions on your behalf through the “I Agree” button or any equivalent acceptance mechanism within the Service.

By accessing or using the Services, you agree to these Terms. If you do not agree, you must not use the Services.

If you do not agree to these Terms, please do not access or use our Services.

1. Scope of Policy

This Policy applies to:

• Users of the Lyla AI Doctor
• Patients receiving telehealth services
• Visitors interacting with our website and applications

This Policy does not apply to third-party services not operated or controlled by Lyla Health.

2. Information We Collect

We collect information necessary to provide healthcare services, operate our platform, and improve performance.

I. Personal Information

• Name, date of birth, email, phone number
• Account credentials
• Insurance and billing information (if applicable)

II. Health Information (Protected Health Information – PHI)

• Medical history, symptoms, conditions
• Medications, allergies, treatment plans
• Clinical notes and provider communications
• Information submitted through the AI Doctor

III. AI Interaction Data

• Questions, prompts, and responses exchanged with the AI Doctor
• Behavioral interaction data (e.g., usage patterns, timestamps)
• Derived insights used to improve AI performance and safety

IV. Device and Technical Data

• IP address, browser type, device identifiers
• Log data, cookies, and analytics data

3. How We Use Your Information

We use your information to:

• Provide and operate the Services
• Generate AI Doctor responses
• Facilitate telehealth consultations
• Support clinical decision-making workflows
• Process payments and insurance claims
• Improve system performance, safety, and accuracy
• Detect fraud, abuse, or security incidents
• Comply with legal and regulatory obligations

4. AI-Specific Data Use

Information you provide to the AI Doctor may be used to:

• Generate responses and recommendations
• Improve model quality, safety, and reliability
• Train and refine AI systems (where permitted by law)

We may de-identify or aggregate data before using it for model improvement.

We do not use identifiable health information to train AI models without appropriate safeguards and compliance with applicable laws.

5. HIPAA and Healthcare Privacy Compliance

Where applicable, Lyla Health operates in compliance with the Health Insurance Portability and Accountability Act (HIPAA).

• Protected Health Information (PHI) is handled in accordance with HIPAA requirements
• We may act as a Covered Entity or Business Associate depending on the service context
• We implement administrative, technical, and physical safeguards to protect PHI

Patients receiving clinical services may also receive a separate Notice of Privacy Practices (NPP), where required.

6. How We Share Information

We may share your information with:

I. Healthcare Providers

• Licensed clinicians providing care through Lyla Health

II. Service Providers

• Technology vendors, hosting providers, and analytics services
• Payment processors and billing partners

III. Legal and Regulatory Authorities

• When required by law, subpoena, or regulatory request
• To prevent fraud, abuse, or harm

IV. Business Transfers

• In connection with mergers, acquisitions, or asset sales

We do not sell your personal or health information.

7. Data Retention

We retain information for as long as necessary to:

• Provide Services
• Comply with legal and regulatory obligations
• Resolve disputes and enforce agreements

8. Data Security

We implement industry-standard safeguards designed to protect your information, including:

• Encryption of data in transit and at rest
• Access controls and authentication measures
• Monitoring and incident response systems

9. Your Rights and Choices

Depending on your location, you may have rights to:

• Access your personal information
• Request correction or deletion
• Restrict or object to certain processing
• Receive a copy of your data (data portability)

Requests can be submitted to our contact information below.

However, no system can guarantee absolute security.

Healthcare data may be retained in accordance with applicable medical record retention laws.

10. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Improve user experience
• Analyze usage and performance
• Support security and authentication

You may control cookies through your browser settings.

11. Children’s Privacy

The Services are not intended for individuals under the age of 18 without appropriate parental or guardian involvement. We do not knowingly collect personal information from children in violation of applicable laws.

12. International Data Transfers

If you access the Services from outside the United States, your information may be transferred to and processed in the United States or other jurisdictions with different data protection laws.

13. Changes to This Policy

We may update this Policy periodically. Continued use of the Services after changes become effective constitutes acceptance of the revised Policy.

14. Contact Information

For questions or requests related to this Privacy Policy, please contact:

Lyla Health Legal Team

Email: legal@lylahealth.com

Contact Us

If you have any questions or concerns about this Privacy Policy or your personal data, please contact us by privacy@lylahealth.com or by regular mail at:

1601 5th Ave

Seattle, WA, 98101

Attn: Privacy Officer