Kelvi Patient Privacy Policy

Effective date: September 24, 2026

This Privacy Policy explains how Hypothermia Devices, Inc., doing business as Kelvi ("Kelvi," "we," "us"), collects, uses, shares and protects information when you use the Kelvi Patient app for iOS and Android (the "app"). Clinicians using the Kelvi Clinician app are covered by the Kelvi Clinician Privacy Policy, and our website at kelvi.com is covered by a separate privacy policy.

Information we collect

Account and profile information you provide

  • Your email address, first and last name, and preferred language
  • Your password, which we store only in hashed form, never as readable text
  • Information about your injury, if you provide it
  • A profile photo, if you choose to add one. You can take it with your camera or choose it from your photo library, and the app accesses only the photo you take or select.
  • The date you accepted our terms
  • The clinicians you link your account with

Treatment information

  • Treatment plans you create or that a clinician assigns to you, including temperatures, durations, number of cycles, body area and purpose
  • Treatment schedules, directions, and your starting pain level and range of movement
  • A record of each treatment session: when it started, who started it, and any notes entered for a manually recorded session
  • Your pain and functional improvement survey responses

Device and technical information

  • Crash reports when the app encounters an error. These include device identifiers, device model, operating system version, app version and technical details about the error.
  • When the app communicates with our servers, our systems may record technical information such as your IP address and the time of the request.

Your Kelvi device

The app connects to your Kelvi device over Bluetooth to send treatment settings and show treatment progress. It does not send your name or other personal information to the device.

How we use your information

We use your information to:

  • Create and manage your account, verify your email address, and reset your password
  • Run the treatments you or your clinician program, and keep your treatment schedule and history
  • Share your treatment information with the clinicians you link with
  • Send you service messages about your account and the app
  • Diagnose crashes and fix problems with the app
  • Create de-identified data, as described below
  • Meet our legal obligations and protect the security of the app

We do not use your information for advertising, and we do not send you marketing.

De-identified data

We use treatment information to create de-identified data. De-identified data has had your name, email and anything else that identifies you removed. We use it, alone or combined with data from other users, to develop and improve heating and cooling therapy protocols and our products.

De-identified data is not personal information. It is not covered by the rest of this policy and is not removed when you delete your account.

How we share your information

We do not sell your information. We share it only as follows:

  • Clinicians you link with. A clinician you link with can see your profile, including your photo, and your treatment plans, sessions and survey responses. Removing the link ends their access through the app.
  • Service providers. We use companies that help us run the app, including Microsoft Azure, which hosts our servers and database; Sentry, which processes crash reports; and a provider that delivers our emails. They may use your information only to provide services to us, and must protect it with the same level of protection described in this policy.
  • Legal requirements. We may disclose information when required by law, such as in response to a subpoena or court order, or to protect the rights, safety or property of Kelvi, our users or others.
  • Business transfers. If Kelvi is involved in a merger, acquisition or sale of assets, your information may transfer as part of that transaction, subject to this policy.
  • With your consent. We may share your information for other purposes when you ask us to or give us permission.

We do not allow third parties to collect information about your activity across other apps or websites through the app.

HIPAA and your clinician

Your clinician may be a "covered entity" under the Health Insurance Portability and Accountability Act (HIPAA). If so, Kelvi acts as your clinician's "business associate." That means we handle your health information on your clinician's behalf, under HIPAA and a written agreement with your clinician that limits how we may use and disclose it.

Your clinician keeps your treatment records. Requests to access, correct, restrict or receive an accounting of disclosures of your treatment information should go to your clinician. If you contact us with such a request, we will refer you to your clinician.

We also protect your health information as required by California law.

Accessing and updating your information

You can view and update your profile information in the app at any time.

For a copy of your treatment information, or to correct it, contact your clinician, as described above. If you use the app without a linked clinician, email us at info@kelvi.com.

Retention and deletion

We keep your information for as long as your account exists. You can delete your account at any time:

  • In the app. Open Settings, then select Delete Account. Your account and its data are deleted immediately.
  • On our website. If you cannot sign in, have forgotten your password, or have already uninstalled the app, request deletion at kelvi.com/delete-account. Requests are processed within 30 days.

Deleting your account permanently deletes your account and all personal data associated with it, including your profile information and treatment history. If your account is linked to a clinician, that link is removed. Their account remains, but anything that came from your account, such as your treatment sessions and survey responses, is removed from theirs as well. Likewise, if a clinician you are linked with deletes their account, the treatment plans they assigned you and the sessions they ran are removed from your account.

We may need to retain certain information when we have a legal obligation or lawful basis to do so. Residual copies may remain in encrypted backups for a limited period until they are routinely deleted.

The app stores a copy of your information on your phone so it can work offline. Uninstalling the app removes that copy but does not delete your account.

Security

We use reasonable administrative, technical and physical safeguards to protect your information, consistent with the HIPAA Security Rule. These include encrypting information sent between the app and our servers, storing passwords only in hashed form, and keeping backups encrypted. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Please keep your phone and password secure, and tell us at info@kelvi.com if you think someone else has accessed your account.

Children

The app is not intended for children under 13, and we do not knowingly collect personal information from them. If we learn that we have, we will delete it. If you believe a child under 13 has given us information, contact us at info@kelvi.com.

Do Not Track

Some browsers and devices offer a "Do Not Track" setting. There is no common standard for responding to these signals, so the app does not respond to them. The app does not track you across other apps or websites.

Changes to this policy

We may update this policy from time to time. When we do, we will post the updated policy on this page and change the effective date above. If we make material changes, we will notify you by email or through the app.

Contact us

If you have any questions about this Privacy Policy, you can contact us: