Privacy Policy

Chiropractic practices are "covered entities" under the Health Insurance Portability and Accountability Act (HIPAA). When a Practice uses Simo to create, store or send protected health information ("PHI") about its Patients, we act as the Practice's business associate. We sign a HIPAA Business Associate Agreement ("BAA") with every Practice before it uses Simo with patient information.

We use and disclose PHI only as the BAA allows: to provide the Service to the Practice, as required by law, and as otherwise permitted by HIPAA. Where this Privacy Policy and a Practice's BAA differ about PHI, the BAA controls.

If you are a Patient, the Practice that treats you decides how your health information is used, and its Notice of Privacy Practices describes your rights. To see, correct or ask questions about your records, please contact your chiropractic office. If you contact us, we will pass your request to your Practice.

Information Practices and Users give us

• Account details: name, clinic name, email address, clinic zip code, role and team, and a password (stored only as a secure hash).
• Practice information: the Practice Brain (philosophy, techniques, services, fees, care packages, payment options, insurance mix, brand colors, logo and clinic photos), Clinic Playbook documents, and the Practice's own financial agreement wording.
• Work in Simo: chats with Simo, team channel messages and direct messages, training scores, content drafts, and design requests.
• Care plans and re-exams: information a doctor enters or dictates, or captures from a photo of an exam form, such as a Patient's first name, condition, exam findings, outcome scores and the chosen care package.
• Billing details: the plan chosen and billing contact. Card details are entered on Stripe's secure pages; we never see or store full card numbers.

Information about Patients

• Contact details for the care plan link: the email address or mobile phone number the Practice uses to send a Patient their secure link and one-time code.
• Plan acceptance records: the Patient's typed name, drawn signature, the payment option chosen, the agreement exactly as shown, the date and time, whether it was signed in the office or on the link, and the device's IP address and browser type.
• Payment records: amounts, due dates and payment status for the Patient's care plan. Card payments are handled by Stripe on behalf of the Practice; we never see full card numbers.

Information collected automatically

• Usage and device information: pages visited, features used, IP address, browser and device type, and dates and times, kept in server logs and an audit trail for security.
• Cookies: only the cookies the Service needs to work (see section 8).

Information from others

• Stripe tells us whether a subscription or Patient payment succeeded, failed or was refunded, and the status of a Practice's connected Stripe account.
• A Practice may add Users by invitation and enters Patient information as described above.

• To provide the Service: answering questions, building care plans, training staff, writing content, sending secure links and codes, and processing a Practice's subscription and its Patients' payments.
• To personalize Simo for each Practice, using that Practice's own Practice Brain and Playbook.
• To send service messages, such as email confirmations, password resets, notifications Users have switched on, payment notices and the Monthly Owner Report.
• To keep the Service secure, prevent fraud and abuse, enforce fair use, and keep audit records.
• To provide support, onboarding calls and answers to questions.
• To meet legal obligations and enforce our Terms and Conditions.

We do not sell personal information, and we do not use PHI for marketing. We do not use Practice or Patient information to train AI models.

• Simo's answers are generated by Anthropic's Claude models, accessed through Amazon Bedrock in United States AWS regions and covered by our BAA with Amazon Web Services. Under Amazon's terms, prompts and responses are not used to train the models, and we keep Bedrock's request logging switched off.
• Dictation uses Amazon Transcribe Medical (also covered by the AWS BAA). Recordings are converted to text and not stored.
• General chat has a filter that blocks patient names, ages and similar details. Patient details belong in the Care Plan Builder's protected fields, which are saved only to the Practice's records.
• Prices in care plans are calculated by Simo's software from the Practice's own fee schedule, not by the AI.

Through the Simo Care Plan Messages program, Simo sends text messages on behalf of a chiropractic Practice to a Patient who has asked the Practice to text them. Messages come from Simo's toll-free number.

• What we send: a secure link to the Patient's care plan, and a one-time code that confirms it's them before the plan opens. Texts contain only the clinic's name and a link or code; never a diagnosis, a price or plan details.
• How you opt in: you ask your chiropractic office to text you your plan. The front desk confirms in Simo that you asked before anything is sent. Agreeing to texts is not a condition of care or of buying anything.
• How often: usually 2 messages each time your office sends a plan (the link and a code), plus a new code if you ask for one.
• Message and data rates may apply.
• To stop: reply STOP at any time. You'll get one message confirming you've been unsubscribed, and no more texts from that number. Your office can still send your plan by email.
• For help: reply HELP, contact your chiropractic office, or email anthony@adidsolutions.com.

We do not sell, rent or share mobile phone numbers or text message opt-in information with third parties or affiliates for their marketing or promotional purposes. Phone numbers are used only to send the messages described above. The above excludes text messaging originator opt-in data and consent; this information will not be shared with any third parties.

Our text messaging provider (Amazon Web Services) and mobile carriers process phone numbers and messages only to deliver them, as our service providers. Carriers are not liable for delayed or undelivered messages.

We share information only in these ways:

• With the Practice. Information about a Practice's Patients, plans and payments is available to that Practice's authorized Users. Users in a Practice can see content shared with their team.
• With service providers that help us run Simo, under contracts that limit their use of the information, and under a BAA where they handle PHI: Amazon Web Services (hosting, database, email, AI models, dictation and text messages) and Stripe (subscription billing and Patient payments). Phone and browser push notification services (Apple, Google and Mozilla) deliver app notifications, which never contain Patient information.
• With Stripe for payments. Stripe receives only what it needs to process a payment (such as the amount, the Patient's email and the payment description). We never send Stripe diagnoses, exam findings or plan contents. Stripe's use of payment information is governed by the Stripe Privacy Policy.
• For legal reasons, when required by law, subpoena or court order, or to protect the rights, safety and property of Patients, Practices, us or others, in each case as HIPAA and the BAA allow for PHI.
• In a business transfer, such as a merger or sale of assets, subject to this Privacy Policy and each Practice's BAA. Text message opt-in data and consent are never transferred or sold.
• With your consent or at your direction.

We do not sell personal information or share it for cross-context behavioral advertising.

• Simo subscriptions are billed by Stripe on behalf of ADID Solutions. Charges appear on statements as "SIMO GOSIMO.AI".
• Patient payments go straight to the Practice's own Stripe account through Stripe Connect. The Practice is the seller. For monthly plans, the Patient's card is saved on the Practice's Stripe account with the first payment, and Simo charges each scheduled payment on the Practice's behalf as the signed plan describes.
• All card details are entered on Stripe's pages. Simo never sees or stores full card numbers.

Simo uses only essential cookies: a login cookie that keeps Users signed in, and a short-lived cookie that remembers, for 30 minutes, that a Patient entered the correct code for one care plan link. We do not use advertising or cross-site tracking cookies, and we do not run third-party analytics on the Service. Stripe sets its own cookies on its payment pages to prevent fraud.

• Chats with Simo are deleted automatically after 90 days.
• Care plans and re-exams stay in the Practice's records until the Practice deletes them.
• Signed care plans (the acceptance record and payments) are kept as the Practice's records and can't be deleted from the app, even if the plan is canceled.
• Account and Practice information is kept while the Practice has an account. After an account closes, we return or destroy PHI as the BAA requires, and delete or de-identify other information unless we must keep it for legal, tax, accounting or security reasons.
• Backups of the database are kept for 14 days.

Simo runs on HIPAA-eligible Amazon Web Services infrastructure in the United States, covered by a BAA with AWS. Information is encrypted in transit and at rest. Each Practice's records are kept separate in the database, access is limited by role, and access to protected records is logged. Patient links are random, expire after 14 days, never contain a name, and open only after the Patient enters a one-time code. No system is perfectly secure; if a breach of PHI occurs, we will notify the affected Practice as required by HIPAA and the BAA.

• Users can update account details in Simo, switch notifications on or off in Settings, and ask the Practice owner or us to correct or delete their information.
• Practice owners can export or delete their Practice's information, or close the account, by emailing us.
• Patients should contact their chiropractic office to see, correct or request changes to health records. Reply STOP to any text to stop texts.
• Residents of some states have additional rights, such as to know, correct or delete personal information. To make a request, email anthony@adidsolutions.com. We will verify the request and respond as the law requires, and we will not treat anyone differently for exercising these rights.

Simo is a business tool for chiropractic practices and is not directed to children. We do not knowingly collect personal information directly from children under 13. When a Practice treats a minor, the Practice communicates with the parent or guardian, and that information is handled as the Practice's PHI under the BAA.

Simo is offered to practices in the United States. Information is stored and processed in the United States.

We may update this Privacy Policy. We'll post the new version here with a new date and, for material changes, notify Practice owners by email or in the app before the changes take effect.

Questions about this Privacy Policy or a privacy request: ADID Solutions, anthony@adidsolutions.com.