Introduction
Sikka Software Corporation (“we”, “us”, “Sikka” or “our”) provides our platform software, web
browser apps, iOS and Android smartphone apps (collectively, the “Apps”), and the websites located
at www.sikka.ai and www.practicemobilizer.com (the “Sites”). Through these
Sites and Apps, we operate various online services that enable our business customers (“Users”) to
receive business reporting, analytics and smart recommendation services from Sikka Software and our
marketplace partners (the “Services”). Please read the Privacy Policy carefully so that you can
understand how we collect, use, and disclose personal information when you use the Apps, the Sites
or the Services. If you do not understand any aspect of our Privacy Policy, please feel free to
contact us using the information found at the end of the Privacy Policy.
This Privacy Policy is a part of the Sites and Apps Terms of Use so by accepting the Terms of
Use, you are consenting to the use and disclosure of your personal information as outlined in
this Privacy Policy.
Health-related Personal Information
In certain circumstances, the Apps, the Sites and the Services collect or use your personal
information while acting as a “business associate’ under the US Health Insurance Portability and
Accountability Act of 1996 (“HIPAA”), or as the “agent” or “information manager” of a “health information custodian” under equivalent local legislation (including laws in other Canadian provinces), which may constitute Protected Health Information as defined
below. A “business associate” includes an entity that provides services to a HIPAA covered entity
that involves the use or disclosure of Protected Health Information. If you or your health care provider or
health insurance company qualifies as a HIPAA covered entity or a health information custodian under equivalent local legislation, and we provide services to you or them or on your or
their behalf, we may qualify as your or their business associate, agent or information manager. “Protected Health Information” as defined
under HIPAA, generally means individually identifiable information about you that identifies you and
that relates to your physical or mental health or condition, the provision of health care to you, or
payment for health care provided to you. To the extent we are acting as a business associate, agent or information manager, we
will only use and disclose your Protected Health Information as permitted by HIPAA or equivalent local legislation, which may
include, but not be limited to, fulfilling our service obligations, our internal management and
administration, to carry out our legal responsibilities, de-identify or aggregate data, or as
otherwise required by law.
Third Party Sites
The Site contains links to other sites. Sikka is not responsible for the privacy policies of any
third party sites. We encourage users to be aware when you leave our Sites and to review any third
party privacy policy.
When we use the term “Personal Information” in this Privacy Policy, we mean information that is personally
identifiable to you (if you are a health care provider or a patient) or your patients (if you are a health care provider),
and allows you or your patients to be identified directly or indirectly, such as usernames, passwords,
registration information, home contact information (e.g., home address, personal email address),
health or medical information (“Health Information”) and information we collect via technology (see below).
The Health Information we collect also includes information regarding procedures performed on a patient,
clinic notes regarding that patient, and information regarding the individuals who performed those procedures.
Depending on your jurisdiction, Personal Information does not include: certain publicly available information
(such as your NPI number and business contact information such as your business address, email or phone number),
business or practice information, deidentified data or aggregated information unless otherwise prohibited by law.
We may use Personal Information for the following purposes (subject to applicable legal
restrictions):
To provide you with the Apps, Sites and Services,(for example, to provide data storage and access services for health care providers, and if requested or consented to by a patient, to generate an indicator used by insurance companies for underwriting purposes in connection with an application for insurance by that patient),
To improve the services offered – by performing quality reviews and similar activities,
To create deidentified or aggregated Information,
To notify you when updates are available,
To market and promote our Apps, Site and the Services offered to you through the Apps and Sites, although any such use is at your option and you can opt out at privacy@sikka.ai,
To fulfill any other purpose for which Personal Information is provided to us, and
For any other purpose for which you give us authorization or we notify you about in
accordance with applicable law.
We may also disclose Personal Information that we collect or you provide as permitted or
allowed by law, as follows:
To health care providers and insurance companies to provide you with the Apps, Sites and Services
if requested or consented to by a patient (for example, to provide to insurance companies for underwriting
purposes in connection with an application for insurance by that patient),
To contractors and service providers we use to support our business and who are bound by
contractual obligations,
To law enforcement, regulators or other entities, which can include providing Personal
Information as permitted by law, regulation, subpoena, court order, legal process or
government request,
When we believe in good faith that disclosure is necessary to protect your safety or the
safety of others, to protect our rights, to investigate, prevent and prosecute fraud or
theft or to respond to a government request, and
To a buyer or other successor in the event of a merger, divestiture, restructuring,
reorganization, dissolution or other sale or transfer of some or all of our assets, whether
as a going concern or as part of bankruptcy, liquidation or similar proceeding, in which
Personal Information is among the assets transferred.
Cross-Border Transfers:
We may transfer your personal information across borders to fulfil any of the purposes described in this policy,
which may make that information subject to applicable disclosure laws in those jurisdictions.
You may contact us (as provided below) to obtain information about our policies and practices
regarding our transfer of personal information across borders, or to ask questions about the collection,
use, disclosure or storage of personal information by us or our foreign service providers.
Information we Collect via technology:
To the extent permitted by applicable laws, as providers/practices use the Apps, the Sites or the Services, certain information
about providers/practices may be passively collected by cookies, navigational data and third party tracking services, including:
Mobile Phone Numbers for Authentication: When you register for an account and opt-in to SMS-based two-factor authentication, we collect and store your mobile phone number. This information is used exclusively for sending one-time authentication codes and security-related messages to verify your identity when you use the Apps or access the Sites from a computer or other device. Collection of your mobile phone number for this purpose requires your express written consent during the registration process.
Activity Information. We may track the actions you take on the Apps, Sites and Services,
such as your navigation, choices, timing of decisions, frequency of visits, paths and
outcomes,
Device and Browser Information. When you use the Apps or access the Sites from a computer
or other device, we may collect information from that computer or device, such as IP
address, mobile carrier, the type of computer or device, operating system, browser type,
connection speed and access times, and other information about how you use the Apps and the
Sites,
Precise Location. Certain features of the Apps and Sites may use GPS technology to collect
precise information about the location of your device so that the Apps can provide you with
certain Services associated with business recommendation features. You can approve or
disable the collection of precise location information through your device.
Analytics
We use analytics providers such as Google Analytics to help analyze how users use the features in
the Apps and Sites to improve our Apps, Sites and Services. For more information, please visit
www.google.com/policies/privacy/partners/. You can opt out of Google’s collection and processing of
data by going to http://tools.google.com/dlpage/gaoptout.
De-Identified, Aggregated & Public Information
We may use deidentified information and aggregated information pursuant to applicable laws and/or
as requested or consented to by a patient. We may also use business and publicly available information
about you or your practice for Sikka’s business purposes.
Communication of Personal Information to Third Parties
We may need to transfer or communicate your Personal Information to certain third party entities,
including your insurance and other health care professionals or service providers and will only communicate
Personal Information in this manner if requested or consented to by the patient,
unless otherwise allowed by applicable law. We may share your mobile phone number with third-party SMS
service providers who deliver authentication text messages on our behalf. These service providers are
contractually prohibited from using your mobile phone number for any purpose other than delivering authentication
messages and are required to maintain appropriate security safeguards to protect your information.
Your Personal Information may be communicated outside of your jurisdiction of residence:
such communications will only be made in full compliance with all the requirements of applicable privacy laws.
Security of Information Collected
We use industry standard physical, technical and administrative security measures and safeguards to
protect the confidentiality and security of your Personal Information. However, since the Internet
as well as cellular mobile networks is not a 100% secure environment, we cannot guarantee, ensure,
or warrant the security of any information you transmit to us. There is no guarantee that
information may not be accessed, disclosed, altered, or destroyed by breach of any of our physical,
technical, or managerial safeguards. Even though there are many benefits to using these Apps, as
with all electronic communications there are some risks such as (i) failure of hardware, software
and/or Internet connections; we are not responsible for failures, distortions, delays, or other
problems resulting from equipment configuration, connection, signal power, hardware, software or any
equipment used to access the internet; and (ii) no guarantee that the confidentiality or security of
electronic transmissions via the Internet and cellular mobile networks can be assured due to
potentially unsecure mobile phones, computers and links. This could result in your data becoming
lost or intercepted during transmission. It is your responsibility to protect the security of your
login information and to use good judgment before deciding to send information via the Internet and
a smartphone Apps. Please note that e-mails and other communications you send to us are not
encrypted, and we strongly advise you not to communicate any confidential information through these
means.
A Special Note about Children and Minors
We do not knowingly allow individuals under the age of majority to create accounts that allow access to
our Apps. If you are below the age of majority, you are not permitted to use these Apps or the Services.
Your Choices
Consent. Unless otherwise permitted by applicable law, we need a request or consent by a patient for the collection,
use, and communication of Personal Information. Patients are not obliged to provide us with your Personal Information,
however, we may be unable to provide some or all of our services if we do not have it. You may have the right
to object to and change your preferences or opt out of certain uses and disclosures of your Personal Information.
Where you have consented to our processing of your Personal Information, you may withdraw that consent at any time
and prevent further processing by contacting us as described below subject to certain exceptions as described to your
and/or allowed by law (please note that this will not affect the validity of any processing performed prior to such withdrawal).
Email and Telephone Communications. At any time, you may unsubscribe from our mailing
list, by clicking the “unsubscribe” link in the email. Note that you will continue to
receive transaction-related emails regarding the Apps, Sites or Services or communications
regarding updates to the Apps, Sites or Services or updates to our terms or this Privacy
Policy).
SMS/Text Message Communications for Two-Factor Authentication Consent and Opt-In: By providing your
mobile phone number during registration and consenting to receive authentication codes via SMS/text
message, you expressly agree to receive automated text messages from Sikka Software Corporation or
our authorized service providers for account security and authentication purposes. This consent is
not a condition of purchasing any goods or services, but is required to enable two-factor authentication
(2FA/MFA) security features for your account access:
Purpose and Message Frequency: SMS/text messages will be sent solely for the following purposes:
Initial phone number verification during account registration (one-time)
Two-factor authentication codes for secure portal login access
Account security alerts and verification requests as needed
Message frequency will vary based on your login activity and security settings. If you select
"Remember this device," you will receive fewer authentication messages (approximately once every
30 days per device). If you select "Always verify," you will receive an authentication code each
time you log in.
Message and Data Rates: Standard message and data rates may apply based on your
mobile carrier's plan. Sikka is not responsible for any charges incurred from your wireless carrier.
Supported Carriers: Our SMS authentication service is available on all major U.S. wireless carriers.
For questions about coverage or compatibility, please contact your mobile service provider.
Opt-Out and Revocation of Consent: You may revoke your consent to receive authentication text messages at any time by:
Contacting us at privacy@sikka.ai to disable SMS-based 2FA on your account
Updating your security preferences within your account settings to use alternative authentication methods (if available)
Important: Opting out of SMS authentication messages will require you to use alternative authentication methods
to access your account. If no alternative methods are configured, you may be unable to access your account
until you re-enable SMS authentication or configure another security method.
Privacy and Security: Authentication codes sent via SMS are one-time use codes that expire shortly after being sent. We do not
store the content of authentication text messages. Your mobile phone number is stored securely in your account profile and used
only for the authentication purposes described in this policy and as outlined in the "Personal Information" section of this Privacy Policy.
Third-Party Service Providers: We may use third-party SMS service providers to deliver authentication messages. These providers are
contractually obligated to protect your information and may only use your mobile phone number to deliver messages on our behalf.
No Mobile Information Sharing: We do not share your mobile phone number with third parties for their marketing purposes.
Your mobile phone number will only be used for account authentication and security as described in this policy.
Questions or Support: For help with SMS authentication or to report issues, please contact us at privacy@sikka.ai
Do Not Track (“DNT”) is a privacy preference that users can set in certain web browsers.
Please note that we do not respond to or honor DNT signals or similar mechanisms transmitted
by web browsers.
Cookies and Interest-Based Advertising. You may stop or restrict the placement of cookies
on your computer or remove them from your browser by adjusting your browser preferences.
Please note that cookie-based opt-outs are not effective on mobile applications. However, on
many mobile devices, application users may limit ad tracking of certain mobile ads via their
device settings. You may also control interest-based advertising on apps on your mobile
device in certain jurisdictions with the AppChoices app. The online advertising industry
also provides websites from which you may opt out of receiving targeted ads from our data
partners and our other advertising partners that participate in self-regulatory programs.
You can access these and learn about targeted advertising and consumer choice and privacy at
www.aboutads.info/choices/ and www.thenai.org/opt-out. To be
clear, you must separately opt
out in each browser on each device. Advertisements on third party websites that contain the
AdChoices link may have been directed to you based on information collected by advertising
partners over time and across websites. These advertisements also provide a mechanism to opt
out of the advertising partners’ use of this information for interest-based advertising
purposes.
Your Privacy Rights
You may have certain rights in relation to your Personal Information under the applicable
laws of your jurisdiction of residence. These include the right to:
request access to your Personal Information;
request rectification or correction of your Personal Information; and
withdraw your consent to the use or communication of your Personal Information.
If you with to exercise any of the above rights, please contact us, in writing, at privacy@sikka.ai.
If permissible by law, reasonable fees may be charged for any copy, transcription,
or communication of Personal Information: when such fees are applicable, you will be notified in advance.
Retention of Personal Information
We will retain any Personal Information used to render a decision about you
for a period of one year after such decision.
We will retain your Personal Information only for as long as we need it for the purposes described
in this Privacy Policy. We determine the appropriate retention period taking into
consideration to the amount, nature, and sensitivity of the Personal Information,
any applicable legal requirements, and the relevant period for bringing claims that
may implicate that Personal Information. Upon expiration of the relevant retention period,
we will take steps to delete (or, where allowed by applicable law, anonymize) your Personal Information.
Changes to our Privacy Policy
We may change this Privacy Policy from time to time in the future. We will post any revised version
of the Privacy Policy on this page and at other places we deem appropriate. Continued use of our
Apps, Sites and Service following notice of such changes will indicate your acknowledgement of such
changes and agreement to be bound by the terms and conditions of such changes. By using the Apps,
Sites and Services, you are agreeing to our collection, use and disposal of Personal Information and
other data as described in this Privacy Policy.
Questions and How to Contact Us
If you have any questions, concerns, complaints or suggestions regarding or Privacy Policy or
otherwise need to contact us, please email us at privacy@sikka.ai
Chief Privacy Officer
2870 Zanker Road, Suite 120
San Jose, CA 95134
800-94-SIKKA
privacy@sikka.ai
