Kodap · NuVybe Technologies, LLC
Privacy policy
How Kodap handles information across our website and apps.
Effective September 20, 2026. Kodap is operated by NuVybe Technologies, LLC. This policy covers kodap.ai, Kodap Patient and Kodap Clinic. Features and data flows depend on the release and the services your clinic enables. Describing a feature here does not mean it is available today.
Information we handle
- Website and support: information you send us, such as your name, email, launch-update interests, consent and support correspondence. Hosting and delivery services may process IP addresses, request information and technical logs needed to operate and protect the service.
- Patient account and care coordination: account identifiers, contact details, profile answers, language preferences, appointment details, intake answers, patient-reported medications, funding preferences, messages and released visit information that you or your authorized care team provide. Intake and messages can contain sensitive health information.
- Clinic workspace: staff identity, organization and location permissions, device-enrollment identifiers, visit information, observations, draft and reviewed notes, handoffs and decision history. Authorized encounter recording also involves audio and transcripts.
- Security and operation: session, access, action, version and error records used to protect accounts, resolve failures and maintain an audit history.
Why we use it
We use information to authenticate users, provide the requested features, arrange and prepare for visits, route authorized clinic work, communicate with you, respond to support and privacy requests, maintain records and protect the service. Launch-update contact information is used for the updates you request; you can ask us to stop those messages.
Voice, camera and AI
The patient app’s current voice recognition and medication-label reading use on-device processing. Reviewed text can be saved or sent when you choose the corresponding action. Medication camera images are not uploaded by that feature.
Clinic encounter recording is different: permissioned audio is sent to the configured Kodap transcription service. Transcripts and selected source material may be processed by Kodap’s self-hosted model to create draft notes. Authorized staff review drafts; AI output does not itself authorize a diagnosis, prescription or release to a patient. Decline feedback is retained with the review history. Automatic training from those decisions is not enabled.
You can decline microphone or camera access and use available alternatives. Device settings let you withdraw these permissions. Stopping recording prevents further capture; it does not automatically erase information already saved or incorporated into a clinical record.
Who can receive information
Information is available to the authorized recipients needed for the service: you, staff with applicable clinic permissions, and providers that operate infrastructure, communications or support for Kodap. Selecting a clinic does not automatically disclose your entire profile. Visit sharing follows the selected recipient and submitted information.
We may disclose information where legally required, to respond to valid legal process, or to protect rights and safety. A corporate transaction may involve transfer subject to applicable privacy obligations. Kodap does not sell personal information or use health information for targeted advertising.
Your clinic’s records
Your clinic is responsible for its care and clinical records. When Kodap processes information on a clinic’s behalf, the clinic’s instructions, applicable agreements and legal duties also govern that processing. This policy is not a clinic’s Notice of Privacy Practices. Ask your clinic about access to or correction of its medical records.
Retention and deletion
Retention depends on the type of information, its purpose, account activity, clinic instructions and applicable recordkeeping duties. Account information, signed clinical records, security audit history and backups can have different retention requirements. We do not promise immediate erasure of clinical records or records subject to a legal hold.
To request access, correction, export, deletion or withdrawal of an optional permission, contact tyler@kodap.ai. We will verify the request as needed and explain any applicable limitation. Uninstalling an app does not delete its account. A support request starts this process; it is not confirmation that deletion has occurred.
Choices and security
Use your device settings to manage microphone, camera and notification permissions. Appointment reminders are optional. Face ID, when used for local unlocking, is handled by Apple’s system; Kodap does not receive your facial biometric template. Keep sign-in codes private and tell us if you suspect unauthorized access.
We use access controls and protected transport and storage appropriate to the service. No system can guarantee absolute security. Our production qualification and compliance work is ongoing; this policy is not a certification claim.
Children and representatives
The public website is not directed at children. Use of a child’s information or a representative’s account requires the applicable authorized clinic and account process. Do not enter another person’s information without authority.
Contact and changes
Contact NuVybe Technologies, LLC at tyler@kodap.ai for privacy questions or requests. Please do not send medical details or identity documents in an initial email. We update this page when practices change and identify the effective date above. Material changes may also be communicated through the affected service.