Beta
Log in
Trust Center

Privacy Policy

Last Updated: July 06, 2026 · Version 1.0

HIPAA Compliant (USA)PIPEDA Compliant (Canada)PHIPA Compliant (Ontario)
Jillogram does not use identifiable patient data or Protected Health Information to train, fine-tune, or improve any AI or large language model. All third-party AI Services operate under executed Business Associate Agreements.

1. Introduction

This Privacy Policy (“Privacy Policy”) describes Moonrise Medical Inc. dba Jillogram (“Jillogram”, “we”, “us”, “our”) collection, use, storage, and processing of personal information and Protected Health Information (“PHI”), as well as your choices and rights with respect to such information. Jillogram is committed to protecting the privacy and security of your personal information and any PHI that it processes. In this Privacy Policy, “personal information” means information that can be used on its own or with other information to identify, contact, or locate a single person, or to identify an individual in context. Please read this Privacy Policy carefully to get a clear understanding of how we collect, use, protect, or otherwise handle your personal information and PHI.

Except as set forth in this Privacy Policy, your personal information will not be collected, stored, used, or disclosed for any other purpose without your consent. Should we change the way we use personal information, we will ensure User consent is valid before making use of personal information for a different purpose than the ones for which consent was originally obtained. You may withdraw your consent to our processing of your personal information at any time. However, withdrawing consent may result in your inability to continue using all or part of the Services.

By using the Services, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Services. This Privacy Policy should be read together with the Jillogram Terms of Service.

2. What does this Privacy Policy apply to?

This Privacy Policy applies to personal information emanating from visitors of the Jillogram website, www.jillogram.ai, and its subdomains (the “Website”), Jillogram customers who use our AI-powered clinical documentation and reporting application (the “App”) and the underlying platform and supporting software (together with the App, the “Software”) by paying fees as described in Jillogram’s Terms of Service (“Customers”), and their users. The Website, the Software, and any other products or services that Jillogram may offer from time to time are collectively referred to herein as the “Services”, while Customers, Users, and visitors of the Website are referred to herein as “User”, “you”, or “your”.

Jillogram’s Customers are healthcare practitioners who are utilizing the Software, or organizations that engage healthcare practitioners as Users. If you are a patient of a healthcare practitioner who uses the Software and do not wish for your personal information or PHI to be collected and used as described in this Privacy Policy, you must inform the healthcare practitioner that you do not consent to the use of your personal information in the Software. This Privacy Policy does not apply to the collection, use and disclosure of personal information by Customers and/or Customer’s users for their own purposes. If you want information about the purposes for which your personal information is being collected, used or disclosed by the Customer and/or their users, or the Customer’s privacy practices, we encourage you to contact the Customer directly.

The Services may contain links to third-party websites, products, or services that we do not own or operate. This Privacy Policy does not apply to the privacy practices of these third parties.

Jillogram is a clinical support tool. It is designed to assist, not replace, professional medical judgment. All clinical decisions remain the sole responsibility of the licensed healthcare professional using the platform.

3. What information do we collect and how do we collect it?

3.1 Information Collected Through the Website

Website Form and Direct Contact: When you submit a form on the Website or contact us directly through e-mail, we will collect the information that you provide, such as name, email address, phone number, name of your organization, and any other information that you may include in your communication with us. The information you provide will be used to communicate with you to provide the information that you requested.

Cookies: Our Website uses essential “Cookies”. In the future, we may use Cookies and other automatic data collection technologies with your consent to collect personal information whenever you visit or interact with the Website, allowing us to: recognize your browser and capture and remember certain information; understand your preferences based on previous or current Website activity; and enables us to provide you with improved Services. We may also use Cookies to promote our services through marketing and advertising. Some of the information collected through Cookies can constitute your personal information. You can opt-out of non-essential Cookies or prevent third-party websites from accessing our Cookies through privacy settings in your browser, however, opting-out of Cookies may disable some of the Website’s features or cause them not to work properly, and may prevent us from providing you with some information and services that you request.

Marketing and Promotional Materials: If you sign up or consent to receive marketing or promotional communications from Jillogram, we will collect your name, email, and any other information you may provide in order to communicate relevant material to you. We will only communicate materials of the types that you have consented to receive.

Usage Data: We also collect anonymized usage data to monitor performance and improve our Services. This information is stored securely.

3.2 Information Collected in the Software

Account Information: When you create an account for the Software, we collect certain registration information to create and administer your account, which may include your name, email address, professional credentials, and the name of your organization. Depending on the purpose for which you are using the Software and/or your position within your organization, you may also be asked to provide an address, a phone number, and/or billing information.

Clinical Data and PHI: The Software processes audio recordings, transcriptions, summaries, clinical notes, DICOM data submitted by Users in the Software. This data may include personal information and/or PHI of a User’s patients, including recordings of the healthcare practitioner. Jillogram only stores the data submitted in the Software as necessary to provide the Services. Besides what is provided directly by a User, the Software does not access electronic medical records or collect information from a patient’s record without the express action of a User. Clinical data is transmitted to our HIPAA-compliant third-party AI services (“AI Services”) under appropriate Business Associate Agreements(“AI Service Providers”).

De-identified Data: Jillogram may create aggregated and anonymized data analytics arising from your interaction with and use of the Services (“De-identified Data”), subject to applicable privacy laws, and, where required, User or Customer consent. Such Aggregated Data shall not include any underlying personal information or PHI, nor shall they otherwise be capable of referencing back to an identifiable individual. Jillogram may use, reproduce, modify, commercialize, and otherwise exploit such “De-identified Data” for any lawful purpose, including but not limited to developing, training, improving, and commercializing its products and services, provided that such data does not identify Customer or any individual.

3.3 Third-Party AI Services

AI Service Providers: All AI Service Providers used by Jillogram to provide the Services are HIPAA compliant, and Jillogram has executed a Business Associate Agreement with each AI Service Provider. This means that none of the AI Service Providers used by Jillogram retain personal information or PHI beyond the immediate processing of your request, and none of the AI Service Providers are permitted to use your data to train any AI model. Any future additions to our list of AI Service Providers will be disclosed in an updated Subprocessor List. Jillogram will always require a Business Associate Agreement with terms substantially similar to those described in this section before any PHI is transmitted to a new AI Service Provider.

The Software currently uses the AI Service Providers listed in our Subprocessor List to process data submitted by Users.

4. How do we use your personal information?

We may use the personal information we collect for the following purposes:

  • To manage our relationship with you and provide you with information and/or services that you request, including customer support and marketing and promotional materials;
  • To create and manage your user account, to authenticate you, and to provide you with access to the Services;
  • To understand and personalize your experience with the type of content, services and product offerings in which you are most interested;
  • To process your audio recordings, transcriptions, reports, and any other data that you submit in the Software through our AI Services and return results of such processing to you;
  • To maintain and monitor the performance, reliability, and quality of the Services;
  • To research and evaluate improvements and optimizations to the Services, and to develop new products, features, and services;
  • To detect, prevent, and/or investigate security breaches, fraud, or any other trust and safety that may arise;
  • To communicate with you about your account, service updates, and changes to these policies;
  • To process payments and payments information;
  • To maintain appropriate records for internal administrative purposes;
  • To protect our business;
  • To comply with applicable legal, regulatory, and professional obligations; and
  • For other purposes, for which we provide notice and obtain consent in accordance with applicable laws.

5. Legal basis for processing your personal information

Our legal basis for collecting and using the personal information described in this Privacy Policy will depend on the personal information concerned and the specific context in which we collect it. We will normally collect personal information about you only where we have your consent to do so, where we need the personal information to perform a contract with you, or where the processing is in our legitimate business interests. In some cases, we may also have a legal obligation to collect personal information from you. We acknowledge that your consent or other legal basis for our processing of your personal information cannot be transferred to a third party other than in accordance with a business transaction (as described below under the section “Who we share your personal information with”). If you have questions about or need further information concerning the legal basis on which we collect and use your personal information, please contact us through the contact details listed below.

6. Who do we share your personal information with?

Jillogram will never sell, rent, or trade your personal information or data. Other than as described in this Privacy Policy, Jillogram will not use or share any of a patient’s personal information or PHI. We may use your personal information with the following parties:

AI Service Providers: As described in this Privacy Policy, AI Services are essential to Jillogram’s provision of the Software. Information and data is shared with AI Service Providers as necessary to provide the Services and only as described in this Privacy Policy. AI Service Providers are not permitted to retain, use, or disclose any personal information or PHI beyond the immediate processing necessary for us to provide you with the Services. We may create De-identified Data as described in this Privacy Policy for the purpose of improving and/or optimizing the Services.

Vendors or third-party service providers: We may share personal information with third parties that we use to provide and support the Services. These parties provide us services such as data storage, email delivery, billing and collections, and customer support. We enter into legally binding agreements with all such third-party service providers that permit the processing of personal information only to deliver the services that we have retained them to provide and prohibit the use of personal data for any other purpose. We keep an up-to-date list of these service providers here: https://www.jillogram.ai/subprocessors.

Compliance with the law, safety, security: We may also disclose your personal information to third parties: a) where required by law or regulatory requirement, court order, or other judicial authorization; b) in response to lawful requests by public authorities, including for the purposes of meeting national security and law enforcement requirements; c) to protect or defend our rights, interests, or property, or that of third parties; d) to investigate any wrongdoing in connection with our Services; and e) to protect the vital interests of an individual.

Business Transactions: In accordance with applicable legal obligations, your personal information may be provided to third parties in connection with a merger or acquisition (including transfers made as part of insolvency or bankruptcy proceedings) involving all or part of our assets, or as part of a corporate reorganization or stock sale or other change in corporate control or business change, including for the purpose of determining whether to proceed or continue with such transaction or business relationship. The personal information disclosed for such a purpose shall continue to be used for the purposes permitted by this Privacy Policy by the entity receiving such personal information.

Jillogram only uses service providers that ensure a comparable level of protection for your personal information, as provided in this Privacy Policy. Our contracts, including Business Associate Agreements, with service providers ensure that they comply with the obligations described in this Privacy Policy as it relates to the data you share with us.

7. How do we protect your personal information?

We use industry-standard physical, administrative and technical measures designed to help secure personal information against accidental or unlawful loss, access or disclosure. Only staff and service providers who have a legitimate business purpose for accessing the personal information collected by us are authorized to do so. Unauthorized use of personal information by anyone affiliated with Jillogram is prohibited and constitutes grounds for disciplinary action. Additionally, our contracts with our service providers require them to use appropriate administrative, physical and technical measures to protect your data. The service providers have agreed to not use the information we provide them for their own purposes. Security measures taken by Jillogram include:

  • All data transmitted to and from the Software is encrypted end-to-end using TLS 1.2 or higher.
  • All personal information and PHI stored within the Software is encrypted at rest using AES-256 encryption.
  • Encryption keys are managed through AWS Key Management Service (KMS) with annual rotation.
  • Access to PHI is governed by role-based access controls. Jillogram engineering staff do not have direct read access to PHI in production. All internal PHI access requires prior authorization and is logged.
  • All data lifecycle events – including deletions, access events, and consent changes – are logged to a tamper-evident audit trail retained for a minimum of 6 years in accordance with HIPAA requirements.

In addition, the Software is designed, built, and operated in compliance with the following privacy and data protection frameworks:

HIPAA (USA):

The Software operates in compliance with the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the Health Information Technology for Economic and Clinical Health Act (HITECH Act). Specifically:

  • Jillogram functions as a Business Associate under HIPAA with respect to PHI submitted by Covered Entities using the Software.
  • Jillogram has executed Business Associate Agreements with all AI Service Providers that process PHI on its behalf.
  • All PHI transmitted through the Software is encrypted in transit and at rest in accordance with the HIPAA Security Rule (45 CFR Part 164, Subpart C).
  • No PHI is retained by our AI Service Providers beyond the immediate processing of your request.
  • Jillogram maintains documented policies and procedures for breach notification in accordance with the HIPAA Breach Notification Rule (45 CFR Part 164, Subpart D).
  • In the event of a breach of unsecured PHI, Jillogram will notify affected Covered Entities without unreasonable delay and no later than sixty (60) calendar days following discovery of the breach.

PIPEDA and PHIPA (Canada):

The Software operates in compliance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and Ontario’s Personal Health Information Protection Act (PHIPA). Specifically:

  • Personal health information is collected, used, and disclosed only for the purposes identified in this Privacy Policy and in the Jillogram Terms of Service.
  • Jillogram collects only the minimum information necessary to provide the Services.
  • Users have the right to access, correct, and request deletion of their personal information held by Jillogram.
  • Jillogram does not transfer personal health information outside of Canada except as required to process requests through HIPAA-compliant AI Service Providers operating under obligations as described in this Privacy Policy.
  • Data for Canadian users is stored and processed within compliant Canadian or HIPAA-equivalent infrastructure.

Even though we take all necessary steps to protect your personal information, security breaches cannot be eliminated and we cannot guarantee a breach will never occur. Additionally, we can only protect data that we store on our systems. Users are responsible for securing any data that a User downloads, exports, or otherwise extracts from any part of the Services.

8. Data Retention

Jillogram shall retain your data in the course of offering the Services as follows:

  • You have the right to access, correct, and request deletion of your personal information;
  • Customer may configure a data retention policy within the Software to be applied across their organization. Jillogram will delete data submitted to the Software as specified in such data retention policy, and any deletion undertaken under such data retention policy will be permanent and will not include a recovery period.
  • If any data is deleted by a User, Jillogram will retain it for a 30-day recovery period during which User and Customer will be able to recover the data. After the recovery period has elapsed, Jillogram will permanently delete the data.
  • Voice and/or audio recordings are deleted following transcription by Jillogram and not written to persistent storage by Jillogram.
  • Transcripts, DICOM data, and clinical reports are retained until deleted by User or Customer, or for as long as permitted under data retention policy configured by Customer in the Software, where applicable.

9. Your Responsibilities

As a healthcare professional using the Software, you are solely responsible for:

  1. Obtaining all required patient authorizations and informed consents before submitting PHI to the Software under applicable law;
  2. Complying with all applicable data protection, privacy, and professional regulatory requirements;
  3. Reviewing and verifying all AI-generated outputs before clinical use;
  4. Notifying us of any changes regarding personal information that we retain; and
  5. Maintaining the confidentiality of your account login credentials.

10. Your Privacy Rights

All Users: All Users may access the personal information we hold about them to verify accuracy of your personal information, to have a general account of our uses of your personal information, and to correct your personal information as appropriate. Upon receipt of your written request, we will provide you with a copy of your personal information although in certain limited circumstances, we may not be able to make all relevant personal information available to you (for example, where that personal information also pertains to another User). In such circumstances, we will provide reasons for the denial to you upon request. We will make every reasonable effort to keep your personal information accurate, and to respond to you in a timely manner.

You have the right to ask us to remove your personal information from our databases, and we will do so to the best of our ability, but it may not be possible to completely delete all of your personal information due to technological and legal constraints (for example, when your personal information pertains to another User). All retained personal information will remain subject to the terms of this Privacy Policy.

Under HIPAA (USA): If you are a patient whose PHI is processed through Jillogram, your HIPAA rights are primarily exercised through the Covered Entity (your healthcare provider). Please contact your healthcare provider to exercise your HIPAA rights including access, amendment, and restriction requests.

Under PIPEDA and PHIPA (Canada): Canadian users have the right to:

  • Access the personal information Jillogram holds about you;
  • Request correction of inaccurate personal information;
  • Withdraw consent for certain uses of your personal information, subject to legal limitations; and
  • Request deletion of your account and associated personal data.

Users from the European Economic Area (“EEA”): If you are based in the EEA, you have additional rights as outlined below:

  • Access: If you wish to access your personal information that Jillogram collects, you can do so at any time through the Services or by contacting our privacy officer.
  • Correction, update or deletion: You can correct, update or request deletion of your personal information by contacting our privacy officer.
  • Object to processing: When we rely on your consent to process your personal information, you may withdraw consent at any time by contacting our privacy officer. This will not affect the lawfulness of processing prior to the withdrawal of your consent.
  • Data Protection Authority: You have a right to raise questions or complaints with your local data protection authority at any time.
  • Marketing: You have the right to opt-out of marketing and promotional communications we send you at any time. You can do this by clicking the “unsubscribe” link in the marketing and promotional emails we sent you or by contacting us. Please note that such marketing opt-out does not impact any transaction or operation notices that we may need to send you.

To exercise any of these rights, contact us at privacy@moonrisemedical.com. We will respond within the timeframes required by applicable law.

11. Minors

The Software is intended for licensed healthcare professionals only and is not directed at individuals under 18 years of age. Jillogram does not knowingly collect personal information from minors. Contact privacy@moonrisemedical.com if you believe a minor has submitted information through the Software.

When it comes to the collection of personal information from children under 13, the United States’ Children Online Privacy Protection Act (“COPPA”) puts parents in control. The Federal Trade Commission, the United States’ consumer protection agency, enforces the COPPA Rule, which spells out what operators of websites and online services must do to protect children’s privacy and safety online.

12. Changes to This Privacy Policy

Jillogram may update this Privacy Policy from time to time at our sole discretion. We encourage you to review this Privacy Policy each time you use the Services to see if the Privacy Policy has been updated, as indicated by the “Last Updated” date set out above or in the Software. Updates to this Privacy Policy are effective when they are posted unless otherwise indicated in any notice you receive about such updates. Your continued use of the Services after any update constitutes your acceptance of the revised Privacy Policy.

13. Contact and Privacy Inquiries

For all privacy-related questions, requests, or concerns, please contact:

Privacy Officer: privacy@moonrisemedical.com

Website: www.jillogram.ai

If contacting us, please provide your complete name, email address, and any other relevant information that may be required to address your request.

You may also contact the applicable privacy regulator if you believe your privacy rights have been violated:

  • USA — U.S. Department of Health and Human Services, Office for Civil Rights: www.hhs.gov/ocr
  • Ontario, Canada — Information and Privacy Commissioner of Ontario: www.ipc.on.ca
  • Federal Canada — Office of the Privacy Commissioner of Canada: www.priv.gc.ca
Questions? Contact privacy@moonrisemedical.com