Privacy Policy

About Keris

At Keris, we’re on a mission to expedite advancements in the medical field. Our sophisticated platform is designed to offer individuals a seamless way to share their health data, aiding their participation in Institutional Review Board-approved studies.

Keris, Inc. (“Keris,” “we,” or “our”) is dedicated to ensuring the privacy and security of our users’ data. We offer services that enable individuals to access their electronic health records and allow medical researchers to gain insights into the health status of study participants. This Privacy Policy outlines our data collection practices associated with the use of our platform and software through our website, mobile applications, and web-based tools (collectively, our “Services”). It also applies to data collected from individuals who have completed the Informed Consent Form for an applicable study.

Our Services do not replace professional healthcare advice. They provide informational and educational insights only. Healthcare professionals should continue relying on authoritative records for clinical decisions.

Consent to Use of Personal Information

By using our Services, you consent to the collection, use, storage, and disclosure of your personally identifiable information as outlined in this Privacy Policy.

The Information We Collect

The type of information we collect depends on how you engage with our Services. We adhere to all local, state, and federal laws governing the transmission, processing, and storage of health information, including the Health Insurance Portability and Accountability Act of 1996 (HIPAA), as amended. References to “data” in this Privacy Policy include de-identified, anonymized, or pseudonymized data. We collectively refer to Personal Information and Health Information as “Your Information.”

What We Collect

• Identifying Information: Upon registration and while using our Services, we collect personal data such as your name, email address, phone number, address, social security number, photo ID, health insurance card, and similar identifiable data (“Personal Information”). This data may be collected directly from you or from another authorized user (e.g., a study administrator).

How We Gather Information

The data Keris collects depends on how you interact with our Services. We strictly abide by all relevant privacy laws that govern the transmission, processing, and storing of health data—including HIPAA—along with its applicable regulations. This Privacy Policy applies to all data types, including de-identified, anonymized, or pseudonymized data. Together, Personal Information and Health Information are referred to as “Your Information.”

Information You Provide

1. Profile and Identifying Information:
   When you register for and use our Services, we may collect Personal Information such as your name, email address, phone number, physical address, social security number, photo ID, health insurance card, and similar identifiable data. We may collect this data directly from you or from another user (such as a study administrator).
2. Health Information:
   You may also provide us with your health information or authorize us to obtain it from third parties. This could include details about your healthcare providers, health insurance coverage, electronic health or medical records, or insurance claims and encounter data, if you choose to share that with us.
3. Account Connections:
   When you authorize us to access your healthcare accounts as part of using our Services, we may collect and use identifiers and login information required by your healthcare providers—such as your username, password, a security token, or security questions and answers. This helps verify your identity when connecting your accounts. By using our Services, you authorize us to access and use these credentials for your healthcare accounts for as long as you continue using our Services.

Automatic Data Collection

Keris and our third-party partners may automatically collect certain non-Personal Information from your use of our website, such as your IP address, browser type, internet service provider, operating system, URLs, date/time stamps, and system configuration details. We use various technologies, including cookies and other tracking mechanisms, to collect this information to improve your experience and our Services.

Information from Third-Party Sources

We may obtain additional information about you from health insurance companies, medical providers, and other authorized sources. We also may use third-party vendors or APIs to aid in data collection, ensuring they have proper measures in place to protect the confidentiality and integrity of Your Information.

Utilization of Collected Information

We may use the information we collect to:

1. Enhance, operate, maintain, and personalize our Services;
2. Send important communications, including technical notices, security alerts, and changes to our terms and policies;
3. Provide technical support and respond to your inquiries;
4. Prevent fraudulent transactions and unauthorized access to our Services;
5. Pursue business purposes, such as data analysis and the development of new products and services; and
6. Monitor and analyze usage trends to improve our Services and customer service, and for other research and analytical purposes.

Information Sharing

We respect your privacy and will not disclose any personally identifiable information we collect unless we have your permission or under the following circumstances:

1. With Consent:
   We may share Your Information with external researchers or organizations when we have your explicit consent to do so.
2. Third-Party Vendors:
   We may share Your Information with vendors, service providers, or agents who perform functions or services on our behalf.
3. Compliance with Laws:
   We may use and disclose Your Information to comply with any applicable law, regulation, legal process, or governmental request; to enforce our agreements, policies, and Terms of Service; or to protect our operations, Services, and users.
4. Business Transitions:
   We may share or transfer Your Information in connection with a merger, sale of company assets, financing, or acquisition of all or a portion of our business.

Your Information Security

We take the privacy and security of Your Information very seriously. We implement and maintain administrative, physical, and technical safeguards designed to protect the integrity, confidentiality, and availability of Your Information. However, no security measures are foolproof, and we cannot guarantee that your information will not be accessed, disclosed, altered, or destroyed in a manner that breaches our safeguards.

Your Rights

You have the right to request access to or correct Your Information. You can also request the deletion of Your Information. For more details on your rights and how to exercise them, please review our Terms of Service or contact our Data Protection Officer.

Changes to the Privacy Policy

We may update this Privacy Policy periodically to reflect changes to our information practices. We encourage you to review this page regularly for the latest updates on our privacy practices.

Contact Us

For concerns or inquiries about this Privacy Policy, please contact us:

Keris, Inc.
Attn: Data Protection Officer
1000 N West Street
Wilmington, Delaware 19801
Email: dpa@keris.ai

Date Last Updated: 16 January 2025

The terms used in this Privacy Policy have the same meanings as in our Terms and Conditions unless otherwise defined in this Privacy Policy.