Privacy Policy
Checkmate Technologies LLC Privacy Policy for Patients and Service Providers
Effective Date: [publish date]
Last Updated: [publish date]
1. Introduction & Overview
Welcome to Checkmate Technologies LLC (“Checkmate,” “we,” “us,” or “our”). Checkmate Technologies LLC operates a digital health platform and mobile application designed to connect patients with licensed healthcare service providers in their local area for concierge care, wellness checkups, blood work, intravenous (IV) therapeutics, peptide-based care, sports medicine, and related healthcare services.
Important Organizational & Legal Distinction: Checkmate Technologies LLC is a technology platform and software application developer; we are not a licensed healthcare provider, medical practice, or professional entity. All clinical services, medical consultations, diagnoses, prescriptions, and therapeutic treatments rendered to users are provided strictly by and through an independent medical entity, Kings Medical Services MDPC, and its affiliated licensed clinicians and healthcare service providers. Checkmate Technologies LLC provides the technical infrastructure to facilitate scheduling, communication, and secure, HIPAA-compliant electronic medical data transmission between patients and Kings Medical Services MDPC.
This Privacy Policy outlines how Checkmate Technologies LLC and Kings Medical Services MDPC collect, use, disclose, transmit, and safeguard personal information and Protected Health Information (PHI) across our website, mobile application, and concierge service network.
2. Scope & Applicable Legal Frameworks
This Privacy Policy applies to all patients, consumers, and healthcare service providers interacting with Checkmate Technologies LLC’s mobile applications, websites, and associated digital tools across the United States. Our data handling practices conform to strict modern privacy and cybersecurity standards, including:
Health Insurance Portability and Accountability Act (HIPAA) & HITECH Act: Governing Protected Health Information (PHI) created, received, maintained, or transmitted on behalf of Kings Medical Services MDPC. Checkmate Technologies LLC acts as a Business Associate to Kings Medical Services MDPC under formal Business Associate Agreements (BAAs).
Comprehensive State Privacy Acts: Including the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), VCDPA, CPA, and other U.S. state privacy statutes.
3. Information We Collect
To deliver our concierge care platform, we collect information directly provided by users, generated through platform usage, and received from healthcare partners.
A. Information Provided by Patients
Personal Identification Information: Legal name, date of birth, biological sex, contact details (email, phone, residential address), and driver’s license or government ID for identity verification.
Health, Medical, & Wellness Data (PHI): Medical history, primary health complaints, blood work history, IV therapeutic preferences, peptide care regimens, sports injury details, vital signs, and notes for concierge checkups. We ask for your consent before your medical history is collected.
Payment Information: Financial card details, billing address, and payment processing tokens (processed via PCI-DSS compliant third-party payment gateways).
B. Information Provided by Service Providers & Clinicians
Professional Credentials & Background: Medical licensure, NPI numbers, board certifications, employment history, liability insurance verification, and background check results.
Service Delivery & Practice Details: Practice locations, available service hours, clinical specialties (e.g., peptide therapy, IV drip administration, sports medicine), and direct deposit/banking details for service disbursements.
C. Information Automatically Collected Through Platform Use
Service Location: The address where you request an in-person visit, used to schedule the appointment and direct the assigned Kings Medical Services MDPC clinician to you. The Platform does not track your real-time location.
Device & Technical Telemetry: IP addresses, browser and device type, sign-in and session records, audit logs of who viewed or changed medical records, and error diagnostics on our website, required for cybersecurity auditing and system functionality. We do not use advertising or cross-app tracking tools.
D. Information Collected Through the Clinician Mobile App
Clinicians use the Checkmate mobile app to document visits. With the patient’s consent, the app records visit audio to prepare draft clinical notes (see Section 9). It also collects photos the clinician takes to document a visit, clinical notes, prescriptions, and the information needed to sign in. See Section 12 for the app’s device permissions.
4. How We Use Your Information
Checkmate Technologies LLC and Kings Medical Services MDPC utilize collected data for the following operational and clinical purposes:
A. Platform Connectivity & Concierge Care Facilitation
Facilitating secure, encrypted connections and scheduling between patients and Kings Medical Services MDPC clinicians.
Enabling local, in-person concierge visits for wellness checkups, blood draws, sports medicine evaluations, IV therapies, and peptide care administration.
Maintaining secure electronic medical records (EMR) and processing HIPAA-compliant medical data transmissions.
With the patient’s consent, recording visit audio and preparing AI-assisted draft clinical notes for the clinician to review (see Section 9).
B. Safety, Identity Verification, & Regulatory Compliance
Verifying patient and service provider identities to prevent fraud and unauthorized access to ePHI.
Enforcing secure sign-in (passwords or one-time passcodes, with optional biometric sign-in) and access control protocols under modern HIPAA Security Rule mandates.
Conducting required technological asset inventorying, risk assessments, and periodic security reviews.
C. Financial Processing & Platform Operations
Processing transactions for concierge visits, blood work, and therapeutic programs.
Disbursing payments to Kings Medical Services MDPC and affiliated healthcare service providers.
5. Data Sharing & Disclosure Disclosures
We do not sell, rent, or trade your personal information or health data. Data sharing is limited to necessary clinical and platform operations under strict confidentiality obligations:
Sharing Between Patients & Kings Medical Services MDPC: Patient health records, medical histories, and service addresses are shared directly with Kings Medical Services MDPC and its assigned clinicians to facilitate medical evaluations and care delivery.
HIPAA Business Associates & Subcontractors: Data is shared with HIPAA-compliant cloud storage providers, AI transcription and documentation services, encrypted messaging tools, and clinical lab partners bound by executed BAAs and rigorous security contracts, and with payment processors under their own security and confidentiality obligations.
Legal & Emergency Requirements: Information may be disclosed to comply with valid court orders, subpoenas, regulatory inquiries, or immediate medical emergencies threatening life or safety.
6. Cybersecurity & HIPAA Compliance Standards (2026 Framework)
Checkmate Technologies LLC implements advanced physical, administrative, and technical safeguards designed to exceed legal requirements for ePHI and sensitive health data:
Secure Sign-In & Access Controls: Passwords or one-time passcodes, optional Face ID or fingerprint sign-in on the mobile app, and role-based access so users see only the information they need.
Encryption: All ePHI and sensitive data are encrypted in transit and at rest.
Prohibition of Unlawful Geofencing: We maintain strict policies prohibiting geofence virtual perimeters around third-party healthcare facilities to track or collect consumer health data.
Security Reviews: We conduct periodic risk assessments and security reviews to maintain infrastructure integrity.
7. Consumer Health Data & Individual Privacy Rights
Depending on your state of residence (e.g., California, Colorado), you may have specific legal rights regarding your personal and non-PHI health data:
Right to Access & Confirm: You may request confirmation of whether we process your personal data and obtain a copy of your health records.
Right to Deletion & Revocation: You have the right to request deletion of non-PHI consumer health data and revoke consent for non-essential data collection. (Clinical records held by Kings Medical Services MDPC are subject to statutory medical record retention obligations under state medical board laws.)
Opt-Out Rights & Global Privacy Control (GPC): We respect recognized universal opt-out signals, including browser-based Global Privacy Control (GPC) signals. Because we do not sell your personal information or share it for targeted advertising, all users are already opted out.
Non-Discrimination: We do not discriminate against any user for exercising their legal privacy rights.
To exercise these rights, email checkmate@checkmate.health. We will respond within the time required by applicable law.
8. Patient Medical Record Amendments
Patients seeking to review, amend, or request corrections to their clinical records or ePHI must submit a formal request through our website, by email to checkmate@checkmate.health, or to Kings Medical Services MDPC. Requests will be evaluated in accordance with HIPAA Privacy Rule standard 45 CFR § 164.526.
9. Audio Recording & AI-Assisted Documentation
With the patient’s consent, Kings Medical Services MDPC clinicians may record the audio of a visit in the Checkmate mobile app. The recording is processed by an AI service, under a Business Associate Agreement, to prepare a draft clinical note. The clinician reviews, edits and signs every note; AI does not make clinical decisions. Recordings are kept as part of the medical record and are not used to train AI models. Patients may decline recording at any time without any effect on their care.
10. Data Retention & Account Deletion
Medical records are kept by Kings Medical Services MDPC for at least six years after the last service, or longer where state law requires. Other personal information is kept only as long as needed to provide the Platform and meet legal, tax and security obligations.
You can request deletion of your account at any time. Clinicians can use Settings > Delete Account in the mobile app; any user can email checkmate@checkmate.health from the email address on the account. The account is deactivated immediately, and personal information we are not required to keep is removed within 30 days. Medical records, financial records and a record of the request are kept as required by law. Full details: care.checkmate.health/policy/delete-account.
11. Children’s Privacy
The Platform is not intended for anyone under 18, and we do not knowingly collect personal information from children. If we learn that we have, we will delete it.
12. Mobile App Permissions
The Checkmate mobile app is used by clinicians. It asks for the microphone (visit recording and dictation), the camera (photos to document a visit), notifications (appointment updates), and Face ID or fingerprint (optional sign-in). The app does not access location, contacts or the photo library. Permissions can be turned off at any time in the device settings.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will post the updated version with a new “Last Updated” date and, for material changes, notify users by email or in the app.
14. Contact & Privacy Inquiries
For questions regarding this Privacy Policy, your HIPAA rights, or data practices, please contact our Data Protection Officer:
Checkmate Technologies LLC Privacy Office
Email: checkmate@checkmate.health
Phone: (917) 947-9747
Clinical Partner Entity: Kings Medical Services MDPC