Privacy Policy
Last Updated: July 2026
Version: 1
We collect the device information you give us so we can notify you when something we monitor matches your implant device. We do not sell your information. We do not advertise using your health data. We do not allow advertisers to track you on our platform. You can access, correct, export, or delete your information whenever you want. HIPAA does not apply to our service. Please read our Health Data & HIPAA: What Applies to Us and What Doesn't for a plain-language explanation.
1. Who This Policy Covers
This Privacy Policy applies to The Implant Experience LLC and the services described in our Terms of Service. If you are simply browsing our public website, only the visitor information described in Section 9 applies.
2. Information We Collect
- Account Information: Email address, encrypted password (never stored in plain text), and age confirmation.
- Device Information (Health Data): Device manufacturer, model, device type, lot/serial number, and implant date you provide.
- Communication Preferences: Your notification preferences and alert settings.
- AI Companion Conversations: If you choose to use the AI Companion. See our AI Companion Disclosure.
- Support Messages: Messages you send us.
- Technical Information: IP address, browser type, and system error logs retained for 60 days for security and reliability.
- Payment Information: Payments are securely processed by Stripe. We never store your full card number.
We do not purchase information from data brokers or enrich your profile using third-party data.
3. Why We Collect Information
We collect only the minimum information necessary to provide the services you request.
- Match safety information to your implant device.
- Notify you of safety alerts.
- Manage your account.
- Respond to support requests.
- Protect the security of the Service.
- Comply with legal obligations.
We never use your health information for advertising, profiling, or automated decision-making.
4. Information Sharing
We share information only with:
- Service providers working under written contracts including AWS, Microsoft 365, and Stripe.
- The AI provider supporting our AI Companion (only if you use it), under a contract prohibiting independent use or AI training with your data.
- Government authorities when legally required.
- A successor organization if our company is acquired or merged.
We never share health information with:
- Manufacturers
- Insurance companies
- Employers
- Advertisers
- Data brokers
- Law firms
To request a list of third parties with whom we have shared your health data, email support@theimplantexperience.com.
5. Security
Your information is stored in the United States using encryption in transit, encryption at rest, access controls, and audit logging.
Although HIPAA does not legally apply to us, we voluntarily follow security practices modeled after the HIPAA Security Rule.
If a breach involving your health information occurs, we will notify affected users and the FTC as required by the FTC Health Breach Notification Rule.
6. Your Privacy Rights
- Know whether we collect, share, or sell your health data.
- Access your information.
- Receive a list of every third party with whom we have shared your health information.
- Correct inaccurate information.
- Export your information.
- Delete your information and request deletion by our service providers.
- Withdraw your consent at any time.
- Exercise these rights without discrimination.
When your account is deleted, we retain only consent records for legal compliance purposes. These records do not contain health information.
7. We Never Sell Health Data
We never sell or share your health information for advertising purposes.
If this policy ever changes, we will notify you beforehand and obtain consent where required by law.
8. Data Retention
- Account & Device Information: While your account remains active, then deleted within 60 days of account closure.
- Technical Logs: 60 days.
- Consent Records: 3 years.
- Payment Records: As required by applicable tax laws.
9. Cookies & Tracking
We do not use advertising or marketing trackers.
- No Meta Pixel.
- No advertising remarketing tags.
- No advertising trackers.
We only use:
- Essential cookies for login and security.
- Privacy-friendly analytics that do not build user profiles or send personal information to third parties.
We honor Global Privacy Control (GPC) signals.
10. Children, Changes & Contact
Our Service is intended only for adults aged 18 and older.
If you believe a child has submitted personal information, please email support@theimplantexperience.com.
If we make a material change to this Privacy Policy, we will provide at least 30 days' notice and obtain your consent where required.