Privacy Policy

1. About PurpleCare

PurpleCare is a digital healthcare experience and operations platform developed by Purple Crayola.

PurpleCare enables participating healthcare organisations to provide patients with secure digital access to healthcare services and information. Depending on the services enabled by your healthcare organisation, this may include appointments, healthcare reports, digital check-in, communications, billing and payments, family or dependant access, virtual care, health and wellbeing features, community experiences and other services connected to your healthcare journey.

We recognise that healthcare information is personal and sensitive. PurpleCare is designed to support appropriate access, clear accountability and responsible handling of the information used to provide these services.

This Privacy Policy explains how personal information may be collected, used, shared, protected and retained when you use a PurpleCare mobile application, patient portal or related PurpleCare digital service.

2. PurpleCare and your healthcare organisation

PurpleCare is a configurable platform used by participating healthcare organisations.

The healthcare organisation providing your PurpleCare service may determine why and how information relating to your healthcare and use of its services is processed. Depending on the applicable data-protection framework and the particular processing activity, that healthcare organisation may act as the data controller or hold an equivalent legal responsibility for that information.

Purple Crayola provides and operates the PurpleCare technology platform and may process information on behalf of participating healthcare organisations in order to provide, secure, maintain and support the service.

Purple Crayola may also process limited information for its own legitimate platform-security, service-management, legal, regulatory and operational purposes where permitted by applicable law.

Your healthcare organisation remains responsible for the healthcare services it provides, including clinical decisions, treatment and the clinical records arising from your care.

Your healthcare organisation may provide additional privacy information that applies specifically to its PurpleCare service. Where relevant, this will be made available through that organisation’s PurpleCare instance or other appropriate channels.

3. Information PurpleCare may process

The information processed through PurpleCare depends on the services enabled by your healthcare organisation and how you use them.

3.1 Account and identity information

This may include:

• Your name
• Patient or hospital identification number
• Email address
• Telephone number
• Date of birth
• Gender and other relevant demographic information
• Account and approval status
• Authentication and verification information
• Information used to associate your PurpleCare account with the correct healthcare record

This information helps establish and maintain the relationship between your digital PurpleCare account and your healthcare identity.

3.2 Healthcare and care-related information

Where enabled by your healthcare organisation, PurpleCare may process information such as:

• Appointments
• Healthcare reports
• Laboratory and diagnostic results
• Consultation-related information
• Visit summaries
• Prescriptions and medication-related information
• Investigation information
• Follow-up information
• Patient support documents
• Other information made available as part of your healthcare journey

PurpleCare does not determine your diagnosis, treatment or clinical care.

Healthcare information presented through PurpleCare originates from, or is managed in connection with, your healthcare organisation and the healthcare systems and services it uses.

3.3 Health and wellbeing information

Where health and wellbeing features are enabled and you choose to use them, PurpleCare may process supported information such as:

• Steps
• Active minutes
• Sleep duration
• Resting heart rate
• Weight
• Health goals
• Related health trends and summaries

Where PurpleCare requests access to information from your device or an authorised health service, that access is subject to the permissions you choose to grant.

Purple Crayola does not sell health information and does not use health information processed through PurpleCare for third-party advertising or advertising profiling.

3.4 Appointments and access to care

Depending on the services enabled by your healthcare organisation, PurpleCare may process:

• Appointment requests
• Appointment bookings
• Appointment dates and times
• Appointment status
• Selected services or specialties
• Clinician or care-team information
• Reason-for-visit information where provided
• Appointment availability
• Virtual appointment information
• Rescheduling or cancellation activity

This information is used to support the digital access-to-care journey provided by your healthcare organisation.

3.5 Check-in and digital patient identity

Where enabled, PurpleCare may process information associated with:

• Digital patient cards
• Patient identification
• Eligible appointments
• Digital check-in
• Check-in status
• Check-in time and channel
• Relevant scan or access activity

These services help connect your digital identity and appointment information with the arrival processes operated by your healthcare organisation.

3.6 Billing and payment information

Where billing or digital payment services are enabled, PurpleCare may process:

• Invoice information
• Amounts due
• Payment status
• Transaction references
• Payment-related status information
• Relevant appointment or service information

Depending on the payment service used, payment-card or banking information may be processed directly by an authorised payment provider rather than stored by PurpleCare.

3.7 Communications and notifications

PurpleCare may process communications associated with your healthcare journey, including:

• Appointment confirmations
• Appointment reminders
• Report notifications
• Email care updates
• SMS care updates
• Push notifications
• Support communications
• Communication preferences
• Message-delivery and failure information

Some communications may be necessary to provide a service you have requested, protect your account or communicate important information relating to your healthcare journey.

4. Family, dependant and delegated access

PurpleCare can support authorised access to another patient’s profile.

For example, a parent, guardian, spouse or other appropriately authorised representative may be permitted to assist another person with aspects of their healthcare journey.

Depending on the relationship and permissions established, an authorised representative may be able to access selected services such as appointments, reports, check-in, privacy requests, patient information or other enabled functionality.

PurpleCare is designed so that authorised representatives do not need to obtain or use another patient’s login credentials.

Where permitted, an authorised user can move between their own profile and an approved linked patient’s profile while remaining authenticated as themselves.

Relevant information may include:

• The relationship between the individuals
• Invitations and acceptance of access
• Permissions associated with the relationship
• The patient profile being managed
• Changes to or revocation of access
• Actions performed while acting for another patient

PurpleCare can record both the authenticated person performing an action and the patient context in which the action occurred. This helps maintain accountability and an appropriate audit trail.

The availability and extent of delegated access may depend on the patient’s age, consent, the nature of the relationship, the healthcare organisation’s policies and applicable law.

5. Community and participation

Where Community features are enabled, PurpleCare may process information you choose to provide through those services, including:

• Community posts
• Replies
• Event participation or registration
• Content reports
• Moderation information
• Other information you choose to contribute

Where a community experience permits anonymous participation, your identity may not be displayed to other participants.

This does not necessarily mean that the underlying activity is anonymous to PurpleCare or the healthcare organisation. Information may still be retained where necessary for moderation, safeguarding, security, abuse prevention or accountability.

6. Device, session and technical information

PurpleCare may process limited technical information required to operate and protect the service, including:

• Device or session identifiers
• Device name
• Authentication events
• Login activity
• Active application sessions
• Push-notification registration information
• IP address and related security information where recorded
• Application and service events
• Error and diagnostic information
• Security and audit information

This information helps PurpleCare maintain secure sessions, protect patient accounts, investigate unusual activity, maintain service reliability and support users.

Where supported, you may be able to review and revoke other active mobile sessions associated with your account.

7. How personal information is used

Personal information processed through PurpleCare may be used to:

• Create, verify and manage your account
• Connect your digital account with the appropriate patient record
• Authenticate you and maintain secure sessions
• Provide services enabled by your healthcare organisation
• Display appointments and support appointment management
• Provide eligible healthcare reports and other information
• Support digital patient identification and check-in
• Provide billing and supported payment journeys
• Deliver relevant communications and notifications
• Support virtual-care services where enabled
• Support authorised family and delegated access
• Provide health and wellbeing functionality you choose to use
• Provide community functionality where enabled
• Provide help and support
• Receive and manage privacy requests
• Maintain permissions and access controls
• Maintain appropriate audit records
• Detect, investigate and respond to security events
• Monitor service reliability
• Improve the usability and performance of PurpleCare
• Meet applicable legal, regulatory and compliance requirements

Purple Crayola does not sell patient or health information.

Purple Crayola does not use healthcare information processed through PurpleCare for third-party advertising.

8. Who may have access to your information

8.1 Your healthcare organisation

PurpleCare is designed to support services provided by your healthcare organisation.

Information may therefore be accessible to appropriately authorised personnel where required for their responsibilities, which may include:

• Clinical teams
• Patient-services teams
• Appointment and administrative teams
• Diagnostic teams
• Pharmacy teams
• Finance teams
• Support teams
• Privacy and compliance personnel
• Information-technology and authorised system-administration personnel

Access is intended to reflect the responsibilities and permissions associated with each role.

8.2 Authorised representatives

Where you have authorised another person to manage aspects of your healthcare journey, that person may have access to the information and services permitted by the relevant delegated relationship.

8.3 Technology and service providers

PurpleCare and participating healthcare organisations may use trusted providers to support particular services.

Depending on the PurpleCare instance, these may include providers supporting:

• Cloud hosting and infrastructure
• Secure storage
• Content delivery
• Email and SMS communications
• Push notifications
• Payment processing
• Virtual consultations
• Authentication
• Service monitoring
• Healthcare-system integrations
• Other infrastructure necessary to provide the service

Information is made available to such providers only where necessary for the relevant service and subject to appropriate security, confidentiality, contractual and data-protection requirements.

8.4 Optional learning content and event websites

PurpleCare offers optional educational content from YouTube/Google and MedlinePlus, provided by the US National Library of Medicine. PurpleCare uses YouTube API Services for embedded video playback. In app versions offering the third-party content consent controls, we ask you to agree before Learning’s third-party lists, images and guides load. A separate choice appears before a YouTube player or an event website loads within PurpleCare. Video playback does not start automatically. You can decline, leave the screen, or choose an external browser where offered without losing access to your other patient services. Controls may vary by app version; keep your app updated.

When you load this content, the relevant providers receive your IP address, technical request or browser information, and the resources you request or interact with. Providers may infer an approximate location, such as your city or region, from your IP address for purposes described in their policies, including usage analytics. This does not require access to your device’s precise GPS location. Viewed health topics may indicate health interests. MedlinePlus may retain access logs for service improvement and security. The condition search within PurpleCare filters the downloaded catalogue locally rather than sending your search text to MedlinePlus.

Embedded YouTube players and event websites may use cookies or similar device storage and may process interactions for their own purposes, including analytics, security, personalisation and advertising, as described in their policies. YouTube may display advertisements. PurpleCare does not automatically include your patient record, HealthKit/Health Connect readings or PurpleCare sign-in token in these content requests. Information you choose to enter into an event website is provided directly to its operator and service providers under that website’s own privacy policy and terms.

On Android, YouTube’s embedded player may also use Android WebView Media Integrity to receive app identity information, including package name, version and signing certificate, and a device-integrity attestation token for security and abuse prevention. This is separate from patient records and does not make the player anonymous.

Where available, select Stop third-party content to close the content view, or leave the screen. Requests already sent may finish. This does not delete information already received by a third party or erase its cookies. The app does not remember your loading consent after the content screen is destroyed. If you open content in another browser or app, that service’s settings, terms and privacy controls apply.

Please read the Google Privacy Policy, YouTube Terms of Service, and NLM privacy information, together with the event operator’s policy before submitting information. Contact PurpleCare through our support page for questions about the app; third-party retention and deletion requests may need to be directed to that provider.

9. Connected healthcare and enterprise systems

PurpleCare can connect to systems operated by your healthcare organisation or its authorised partners.

These may include:

• Hospital information systems
• Electronic medical record systems
• Laboratory systems
• Radiology systems
• Scheduling systems
• Finance systems
• Payment platforms
• Customer-relationship systems
• Communications platforms
• Identity systems
• Other healthcare or enterprise technology

Where these connections are enabled, information may move between PurpleCare and the connected system to support the relevant patient or operational journey.

The specific systems connected to your PurpleCare service depend on your healthcare organisation’s technology environment.

10. Security and access control

PurpleCare uses technical and organisational measures designed to protect personal and healthcare information.

These may include:

• Authenticated access
• Secure account credentials
• Role-based permissions
• Patient-level access controls
• Delegated-access permissions
• Session controls
• Secure transmission of information
• Administrative access controls
• Audit logging
• Security monitoring
• Controlled release of patient information
• Appropriate separation of patient and operational information

No digital service can guarantee absolute security.

Purple Crayola and participating healthcare organisations therefore maintain security and governance processes designed to reduce risk, identify inappropriate activity and respond appropriately where a security incident occurs.

11. International transfers and data location

PurpleCare may use infrastructure, technology providers or service providers operating in countries different from the country in which you receive healthcare.

Where personal information is transferred internationally, appropriate safeguards are applied as required by applicable data-protection law.

Hosting, data-residency and integration arrangements may also vary between PurpleCare instances according to the requirements of the participating healthcare organisation.

Where relevant, your healthcare organisation may provide additional information about the arrangements applicable to its PurpleCare service.

12. Your privacy choices and rights

Depending on where you live, the healthcare organisation providing your care and the laws that apply, you may have rights relating to your personal information.

These may include the right to:

• Request access to your personal information
• Request correction of inaccurate information
• Request deletion of eligible personal information
• Request restriction of certain processing
• Request portability of eligible information
• Object to certain processing
• Withdraw consent where processing depends on consent
• Raise a concern or complaint about the handling of your information

PurpleCare supports a structured privacy-request process where this functionality is enabled for your healthcare organisation.

Some requests may need to be handled directly by your healthcare organisation, particularly where they relate to clinical records, healthcare information or information for which the healthcare organisation has specific legal responsibilities.

13. Account and data deletion

PurpleCare provides a process through which users can request deletion of their account and eligible personal information.

Where account deletion is available through the mobile application, you can initiate the request from the relevant account or privacy controls.

Because PurpleCare is deployed for different healthcare organisations, the external account-deletion page is specific to the PurpleCare instance you use.

The appropriate deletion page is made available through your healthcare organisation’s PurpleCare service, support information or application-store listing.

This ensures that your request is associated with the correct:

• Healthcare organisation
• PurpleCare instance
• Patient account
• Patient identity
• Applicable privacy and record-management process

When you request account deletion, the request may include deletion of your PurpleCare account and personal information that is eligible for deletion.

Deletion of a PurpleCare account does not necessarily mean that all healthcare or other information associated with you can or should be deleted.

Certain information may need to be retained where this is required or permitted for purposes including:

• Healthcare and medical-record obligations
• Patient safety
• Legal or regulatory compliance
• Financial and accounting requirements
• Security and fraud prevention
• Maintaining necessary audit and accountability records
• Establishing, exercising or defending legal claims

Where information must be retained, it remains subject to the applicable privacy, security and access controls. It will not be retained merely to keep active an account you have asked to delete.

Questions specifically relating to deletion or amendment of your healthcare or clinical record may need to be directed to your healthcare organisation.

14. Data retention

Personal information is retained only for as long as reasonably necessary for the purposes for which it is processed, subject to applicable:

• Healthcare-record requirements
• Legal requirements
• Regulatory requirements
• Contractual obligations
• Financial and accounting requirements
• Security requirements
• Audit requirements
• Organisational retention policies

Different categories of information may therefore be retained for different periods.

For example, deletion of a PurpleCare application account may not result in deletion of a healthcare record that the healthcare organisation is required to retain.

Where information is no longer required and no applicable retention requirement remains, it is deleted, anonymised or otherwise securely disposed of in accordance with the relevant retention process.

15. Your communication choices

Where available, PurpleCare allows you to manage certain communication preferences.

These may include:

• Email
• SMS
• Push notifications

You can also manage device-level notification permissions through your mobile device.

Some communications may remain necessary to:

• Provide a service you have requested
• Confirm important account activity
• Protect the security of your account
• Communicate information relating to a transaction
• Meet healthcare, legal or regulatory obligations

16. Children and dependants

PurpleCare may support healthcare journeys involving children and other dependants where this is appropriate to the healthcare service.

Access to a child’s or dependant’s information is managed through the applicable patient, parent, guardian or authorised-representative relationship.

The healthcare organisation determines the appropriate authority, consent and access model in accordance with applicable law, safeguarding requirements, clinical policy and the circumstances of the patient.

As a child reaches an age at which different consent or privacy requirements apply, access arrangements may need to change.

17. Health information and advertising

PurpleCare is designed as a healthcare experience and operations platform.

Purple Crayola does not sell health information processed through PurpleCare.

Purple Crayola does not use healthcare or health information processed through PurpleCare for third-party advertising, advertising profiling or data-broker activity.

Information obtained through health integrations or device health permissions is used only for the health-related functionality, service operation and other permitted purposes associated with the PurpleCare service.

These protections for patient records and device health data do not mean that optional third-party content is ad-free or free of analytics. The independent processing described in section 8.4 applies when you choose to load that content.

18. Changes to this Privacy Policy

PurpleCare will continue to evolve.

We may update this Privacy Policy where there are changes to:

• PurpleCare functionality
• Information-processing practices
• Technology or service providers
• Legal or regulatory requirements
• Security or governance requirements

Where a change is material, appropriate steps will be taken to make the updated policy available and, where required, provide additional notice or obtain consent.

The date at the beginning of this policy indicates when it was last updated.

19. Contact and privacy enquiries

For questions about the PurpleCare platform or this Privacy Policy, contact:

Purple Crayola
PurpleCare Privacy

Email: privacy@app.purplecrayola.com
Website: purplecrayola.com

For questions concerning:

• Your healthcare records
• Your clinical information
• Your treatment
• A healthcare provider’s use of your information
• A provider-specific privacy request
• A provider-specific account-deletion request

please contact the healthcare organisation providing your PurpleCare service using the contact information available within its PurpleCare application, website or patient-support channels.

20. Complaints and regulatory rights

Depending on the data-protection law applicable to you, you may have the right to make a complaint to the relevant privacy or data-protection authority.

We encourage you to raise privacy concerns with your healthcare organisation or Purple Crayola, as appropriate, so that the matter can be reviewed and addressed.

Making a complaint does not affect any other rights available to you under applicable law.