Privacy Policy
Last updated: July 5, 2026
Avryn Health Management ("Avryn," "we," "us," or "our") builds a relationship intelligence platform for behavioral health organizations. We take the privacy and security of health information seriously. This Privacy Policy explains how we handle information in connection with our platform and this website.
This document is provided for general informational purposes and does not constitute legal advice. Our specific obligations to each customer are governed by our written agreements, including any Business Associate Agreement (BAA).
1. Our Role Under HIPAA
When we handle Protected Health Information (PHI) on behalf of a covered entity (such as a behavioral health treatment center), Avryn acts as a Business Associate under the Health Insurance Portability and Accountability Act (HIPAA). We sign a Business Associate Agreement (BAA) with every customer before go-live, and we handle PHI only as permitted by that agreement and applicable law.
2. Information We Process
On behalf of our customers, the platform may process:
- Alumni contact information: such as name and mobile phone number, used to deliver check-in messages.
- Engagement data: the content of SMS conversations and the engagement scores derived from them (responsiveness, sentiment, depth, consistency, and risk).
- Outcome documentation: records created and approved by your coordinators.
- Staff account information: for the coordinators and administrators who use the platform.
Through this website, we also process basic information you choose to submit (for example, when you request a demo) and standard technical information such as your browser type and IP address.
3. How Information Is Used
Information processed within the platform is used solely to provide the service to our customers: enrolling alumni, delivering personalized outreach, scoring engagement, routing alerts, supporting documentation, and producing reports. We do not sell PHI, and we do not use PHI for advertising.
Information you submit through this website is used only to respond to your inquiry and to provide information about Avryn.
4. How We Protect Information
Security is foundational to our platform. Safeguards include:
- Encryption: AES-256 encryption for data at rest and encryption in transit.
- Access controls: role-based access and multi-factor authentication (MFA) for every user.
- Auditability: an immutable audit log of activity within the platform.
- Least privilege: access to PHI is limited to what is necessary to provide the service.
5. Sharing and Disclosure
We do not sell personal information or PHI. We disclose information only:
- To our customer (the covered entity) whose data we process on their behalf.
- To trusted subprocessors (such as our SMS delivery provider) under agreements that require appropriate safeguards.
- When required by law, or to protect the safety of an individual.
6. Data Retention
We retain information for as long as necessary to provide the service and as directed by our customer agreements and applicable law. Upon termination, PHI is returned or destroyed in accordance with the applicable BAA.
7. Your Rights
If you are an alumnus or patient, requests to access, correct, or delete your health information should be directed to the treatment organization that enrolled you, as they control that information. Recipients of SMS check-ins may opt out of further messages at any time. If you contacted us through this website, you may email us to update or remove the information you submitted.
8. Children's Privacy
Our website is not directed to children, and we do not knowingly collect personal information from children through it. Any processing of a minor's health information within the platform is governed by our agreement with the responsible covered entity.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above.
10. Contact Us
If you have questions about this Privacy Policy or our privacy practices, contact us at sglamp@avrynhealth.com.