Patient Privacy Notice

1. What HIPAA Means Here

HIPAA is a United States law that sets privacy and security requirements for certain covered entities and business associates. Whether HIPAA applies to a person or organization depends on the facts and their role. This notice is general information, not legal advice, and it does not state or promise that So Know is HIPAA compliant.

2. Information You Must Not Share

Do not enter, upload, post, or message information about an actual patient, including:

• Names, initials, dates of birth, contact details, or addresses
• Medical record, account, insurance, device, or other identifying numbers
• Exact encounter dates, locations, rare circumstances, or narrative details that could identify someone
• Images, screenshots, documents, or media connected to an actual patient
• Any health or clinical information obtained through patient care

3. Do Not Rely on De-identification

Removing obvious identifiers may not prevent re-identification, and the app does not verify that content is de-identified. Use fictional, simulated, or general educational examples only. When in doubt, do not share the information and ask your privacy officer, instructor, employer, or another qualified authority.

4. Educational Use Only

Built-in examples are intended for education. User-submitted content is not reviewed as a medical record and must not contain patient information. Do not use So Know to coordinate care, document an encounter, request a diagnosis, or make a treatment decision.

5. Reporting a Privacy Concern

If content appears to include patient information, stop sharing it and use the in-app report feature. If the information came from your workplace or clinical site, also follow that organization's privacy and incident-reporting procedures.

Account action may be taken when content violates app rules. Separate legal, professional, school, or workplace consequences are determined by the applicable authorities—not by So Know.