Notice of Privacy Practices

Effective date: May 28, 2026

 

​

​

​

​

About Our Program

KURA Care (“we,” “us,” or “our”) is a health technology company dedicated to improving patient outcomes. We operate a blood pressure management program delivered via SMS text message (the “Program”) that helps you track your blood pressure, heart rate, and daily lifestyle habits so you can better understand and support your own health.

​​

​

​

​​

​

​

​

​

​

​

Why We Provide This Notice

Federal law — specifically the Health Insurance Portability and Accountability Act (HIPAA) — requires us to maintain the privacy of certain health information we collect, to give you notice of our legal duties and privacy practices, and to notify you if a breach occurs that may compromise your information. Even where specific HIPAA requirements may not apply, we are committed to protecting your health information with the same high standards.

This Notice tells you:

• What types of health information we collect from you

• How we use and may share that information

• Your rights regarding your information

• How to contact us with questions or complaints

 

​

Information We Collect

When you participate in our SMS blood pressure management program, we collect the following categories of information:

 

Health and Biometric Data (Provided by You via SMS)

• Blood pressure readings (systolic and diastolic measurements)

• Heart rate / pulse readings

• Other vital signs you voluntarily submit

 

Lifestyle and Habit Data (Provided by You via SMS)

• Daily physical activity and exercise habits

• Sleep patterns and duration

• Dietary and nutrition habits

• Stress levels and mental wellness check-ins

• Medication adherence reminders (general, not prescriptive)

• Other lifestyle information you voluntarily share

 

Account and Contact Information

• Mobile phone number

• Name (if provided during enrollment)

• Demographic information you choose to provide (e.g., age, gender)

 

Technical and Usage Data

• Message timestamps and frequency of engagement with the Program

• Device or carrier information associated with your SMS messages

We do not collect information from wearable devices, electronic health records, insurance systems, or any source other than what you voluntarily input into our SMS Program.

 

​​

​

How We Use Your Information

We use the health information you provide for the following purposes:

 

To Operate and Deliver the Program

We use your information to send you personalized SMS messages, wellness tips, trend feedback, and general health education content based on the data you provide. This is the primary purpose for which your information is collected.

 

To Improve the Program

We may analyze de-identified and aggregated data to improve our program content, identify patterns that help us deliver better health education, and develop new features.

 

To Communicate With You

We use your contact information to send program-related messages, technical notifications, and responses to your inquiries. We do not use your information to send unsolicited marketing communications unless you have explicitly opted in.

 

For Safety

If we believe there is an immediate threat to your health or safety or the health or safety of others based on information you share, we may use or share information as necessary to prevent or reduce that serious and imminent threat.

 

To Comply With the Law

We will use or share your information when required to do so by applicable federal, state, or local law, or in response to valid legal process.

 

​​

​

When We May Share Your Information

We do not sell your personal health information. We share your information only in the limited circumstances described below.

 

Service Providers (Business Associates)

We work with trusted third-party vendors who help us operate the Program — such as SMS delivery platforms, cloud storage providers, and data analytics services. These vendors are contractually required to safeguard your information and may only use it to provide services to us. Where required by HIPAA, we enter into Business Associate Agreements with these vendors.

 

With Your Consent

We may share your information for any purpose you authorize in writing, including sharing with your personal physician or healthcare team if you request it.

 

For Health Research (De-Identified Only)

We may share de-identified, aggregated data (information that cannot reasonably be used to identify you) with researchers, public health organizations, or academic institutions to advance understanding of blood pressure management and cardiovascular health. This de-identified data is not considered protected health information under HIPAA.

 

To Protect Safety

We may disclose information to prevent or lessen a serious and imminent threat to the health or safety of a person or the public, consistent with applicable law and ethical standards.

 

Legal and Government Requirements

We may disclose your information when required by law, including to:

• Comply with federal, state, or local legal obligations

• Respond to lawsuits or legal proceedings in which we are involved

• Cooperate with government oversight or law enforcement inquiries as required by law

• Report to public health authorities as required by applicable law

​​

​

​

​

​

​

 

​

​

​

​

 

​

​

Your Rights Regarding Your Health Information

You have the following rights with respect to the health information we maintain about you. To exercise any of these rights, please contact us using the information in the “Contact Us” section at the end of this notice.

 

Right to Access and Receive a Copy

You have the right to request access to and receive a copy of the health information we hold about you. We will respond to your request within 30 days. We may charge a reasonable, cost-based fee for providing a copy.

 

Right to Request Correction

If you believe that health information we have about you is incorrect or incomplete, you may request that we correct or amend it. We will respond to your request within 60 days. If we deny the request, we will explain why in writing.

 

Right to Request Restrictions on Use or Sharing

You may request that we restrict certain uses or disclosures of your information. We are not always required to agree, but we will consider all reasonable requests. Where we agree, we will honor the restriction except in emergency situations where disclosure is necessary for your safety.

 

Right to Request Confidential Communications

You may request that we communicate with you in a specific way (e.g., via a different phone number or contact method). We will accommodate all reasonable requests.

 

Right to an Accounting of Disclosures

You have the right to request a list of disclosures we have made of your health information during the prior six years, other than disclosures for program operations or those you authorized. We will provide one free accounting per 12-month period; additional requests may incur a reasonable fee.

 

Right to Withdraw Consent and Opt Out

Because our Program is delivered voluntarily via SMS, you have the right to opt out of the Program at any time by replying STOP to any of our messages or by contacting us directly. Upon opt-out, we will cease sending program messages. You may also request deletion of your health data, subject to any legal retention obligations.

 

Right to a Paper or Electronic Copy of This Notice

You may request a copy of this Notice at any time, even if you previously agreed to receive it electronically. We will provide it promptly at no charge.

 

Right to Choose Someone to Act for You

If you have designated a personal representative (such as a legal guardian or someone holding medical power of attorney), that person may exercise these rights on your behalf. We will verify the individual’s authority before acting on their request.

 

​

​

Your Choices

You have choices about how we use and share your information:

 

Sharing With Family, Friends, or Caregivers

By default, we communicate only with you. If you would like us to share program updates or health information with a family member, caregiver, or other person involved in supporting your health, please contact us to authorize this sharing.

 

Marketing

We will not use your health information for marketing purposes without your explicit written consent. If you have provided consent and wish to withdraw it, you may do so at any time by contacting us.

 

Research Participation

Your de-identified data may be used in aggregate research by default, as de-identification removes all identifiers. If you would prefer that even your de-identified data not be included in research, please contact us.

 

​

​

How We Protect Your Information

We implement administrative, physical, and technical safeguards designed to protect your health information from unauthorized access, use, or disclosure. These include:

• Encryption of data in transit and at rest

• Access controls limiting who within our organization can view your information

• Regular security assessments and employee training

• Secure SMS infrastructure and vendor agreements requiring equivalent protections

We also maintain a breach notification policy. If a breach of your unsecured health information occurs, we will notify you promptly as required by applicable law, including HIPAA’s Breach Notification Rule where it applies.

 

​

​

Data Retention

We retain your health information for as long as necessary to provide the Program, comply with applicable legal obligations, resolve disputes, and enforce our agreements. When your information is no longer needed, we will securely destroy or de-identify it.

If you request deletion of your health information, we will honor that request to the extent permitted by applicable law and any legal retention obligations.

 

​

​

Changes to This Notice

We reserve the right to update this Notice at any time. The new Notice provisions will be effective for all protected health information that we maintain, including information we created or received before issuing the revised Notice. Changes will be effective upon posting or notification. We will notify you of material changes via SMS message and will always make the current version available upon request. The effective date at the top of this document indicates when the most recent version took effect.

 

​

​

How to File a Complaint

If you believe your privacy rights have been violated, you have the right to file a complaint with us or with the U.S. Department of Health and Human Services (HHS).

 

File a Complaint With Us

Contact our Privacy Officer using the information in the “Contact Us” section below. We will not retaliate against you in any way for filing a complaint.

 

File a Complaint With HHS

You may also contact the HHS Office for Civil Rights:

• By mail: 200 Independence Avenue, S.W., Washington, D.C. 20201

• By phone: 1-877-696-6775 (toll-free)

• Online: https://www.hhs.gov/hipaa/filing-a-complaint/index.html

We will not retaliate against you for filing a complaint with HHS.

 

​

​

Contact Us

For questions about this Notice, to exercise your rights, or to file a complaint with us, please contact our Privacy Officer:

 

Company:                       KURA Care

 

Privacy Officer:             Shiow Kao

 

Mailing Address:           7084 Miramar Rd #203, San Diego, CA 92121

 

Email:                              privacy@kuracare.com

 

Phone:                            (858) 353-1381

 

Website:                         https://www.kuracare.com/ 

 

​

​

 

This Notice of Privacy Practices was last revised on May 28, 2026.