Effective Date: November 29th 2024 | Last Updated: June 9th 2026

GABBY is made by MAYYA AI LLC (“we,” “our,” or “us”). We care about your privacy. We work hard to keep your personal data safe. This Privacy Policy explains what we collect and how we use it. It also explains who we share it with and how we keep it safe when you use our software on our website or mobile app.

1. Information We Collect

We collect information so we can run our services, support better care, and follow healthcare laws.

Health Data

  • Personal Health Information (PHI): Your name, date of birth, medical history, hospital referrals, care plans, treatment records, insurance, Medicare, and Medicaid data.
  • Care Data: Past and current care data we use to make assessments and suggestions.

Account Data

  • Account Information: Names, email addresses, roles (such as nurse or doctor), and login details.
  • Activity Logs: Things you do on the platform, such as opening a patient record.

Technical Data

  • Device details, IP addresses, browser type, and how you use the platform.

Cookies and Tracking

We may use cookies and similar tools to improve your experience and learn how the platform is used.

2. How We Use Your Information

We use your information to:

  • Review hospital referrals and suggest the right nursing home admissions.
  • Watch patient care and send important alerts to healthcare staff.
  • Suggest changes to a patient’s level of care.
  • Follow healthcare laws, including HIPAA, Medicare, and Medicaid rules.
  • Give nurses and doctors chat-based access to patient data.
  • Make our platform work better and easier to use.

3. How We Share Your Information

We do not sell your information. We only share it in these cases:

Providers Who Help You

Your care providers — such as your nurses and doctors — can see your data so they can help you. They can view things like your health history, care plans, treatment records, alerts, and insurance details. We only show each provider the data they need to do their job and care for you. Providers see this data inside the platform, and every time they open your record we keep a log of it.

Third Parties

  • Insurers, Medicare, and Medicaid Providers: To process payments and claims.
  • Service Providers: Trusted partners who help us run, improve, and protect the platform. They must keep your data safe and can only use it to do work for us.

Legal Reasons

We may share information to follow the law, enforce our terms, or protect the rights and safety of our users or others.

4. Data Security

We use strong security steps to protect your information, such as:

  • Encrypting your data when it is stored and when it is sent.
  • Hosting your data on a HIPAA-compliant AWS platform.
  • Limiting who can access data and running regular checks to stop unauthorized access.

5. Security and Data Breaches

We work hard to keep your data safe. But no system is ever 100% safe. If a data breach happens and your personal information may have been exposed, here is what we will do:

  • We will act fast. We will look into the breach right away and work to stop it and limit the harm.
  • We will tell you. If the law requires it, or if we believe your data is at risk, we will notify you. We will email you or contact you another way, and we will do this without undue delay.
  • We will explain what happened. Our notice will tell you, as best we can, what information was involved and what we are doing about it.
  • We will help you protect yourself. We will share steps you can take to protect your data, such as changing your password or watching your accounts for unusual activity.
  • We will tell the right authorities. When the law requires it, we will also report the breach to the proper government agencies.

6. Business Transfers

We may one day sell our company, merge with another company, or transfer part of our business. If that happens, your information may be passed to the new owner. The new owner may want to use your data in a way this policy does not already allow. If that happens, we will email you first. We will tell you about the change and any choices you have.

7. User Rights

You have these rights over your data:

  • Access: Ask to see the personal data we hold about you.
  • Correction: Ask us to fix data that is wrong or incomplete.
  • Deletion: Ask us to delete your data, as long as the law lets us.
  • Opt-Out: Limit data use that is not required, such as analytics.

To use these rights, email us at info@mayya.ai

8. Cookies and Tracking Technologies

Our platform may use cookies to:

  • Keep you logged in.
  • See how the platform is used.
  • Make features work better.

You can manage your cookies through your browser settings.

9. Third-Party Links

Our platform may link to other websites or services. We do not control them and are not responsible for their privacy practices.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make a change, we will post the new policy with an updated date. If the change is important, we will also email you so you know about it. Please keep your email address up to date so you do not miss these notices.

11. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us:

Email: info@mayya.ai