Your privacy, handled with care.

This Privacy Policy describes how ADHD Wellness Clinic LLC, doing business as Elevated Psychiatry(“Elevated Psychiatry”, “we”, “our”, or “us”), collects, uses, and protects your information when you use the Elevated Psychiatry patient portal (the “App”), available on the web and on mobile app stores.

We are a licensed psychiatric practice operating in Hawaii (HI) and California (CA), based in Hawaii. The App supports our clinical services (appointments, messaging, medication management, journaling, ADHD education, and peer community) for our active patients.

Account information. Name, email, password (stored as a salted hash), and optional profile photo.

Health information (PHI). When you use the App, we process protected health information including appointments, messages with your care team, medication records, refill requests, clinical notes shared by your provider, and documents you upload. This information is covered by HIPAA and the Notice of Privacy Practices of our clinic.

Self-reported content. Journal entries, mood check-ins, medication tracker logs, and any content you post in the ADHD Club community forum.

Device & usage data. IP address, device/browser identifiers, pages visited, and timestamps, used for security, diagnostics, and to improve the App.

Push notification tokens (if you opt in), to deliver alerts about messages, refills, or appointment reminders.

• To provide clinical services (appointments, messaging, medications, documents).
• To authenticate you, keep your account secure, and prevent abuse (including brute-force lockouts).
• To send you transactional emails (password resets, invitations, account notices) and, with your consent, notifications about messages and appointments.
• To operate the ADHD Club community forum, including moderation of posts you make under a pseudonymous display name you choose.
• To comply with our legal, regulatory, and professional obligations.

We do not sell your personal information. We do not use your PHI for advertising, and we do not train third-party AI models on your PHI.

We share information only with the service providers that make the App work. These vendors are contractually bound to protect your data and, where PHI is involved, have signed a HIPAA Business Associate Agreement (BAA) with us:

• IntakeQ — electronic health record, appointments, forms, clinical notes, and client roster.
• Spruce Health — two-way secure messaging between you and your care team.
• Keragon — HIPAA-aware workflow automation used to bridge messages between the App and Spruce.
• Resend — transactional email delivery (password resets, invitations).
• MongoDB Atlas (and the underlying cloud infrastructure) — encrypted database hosting.
• OpenAI — powers the ADHD Education Assistant. Conversations are general educational questions only; we instruct the model not to retain them for training, and we do not share your identifiable PHI with it.

We may also disclose information if required by law, to protect the safety of our patients or staff, or in connection with a change of ownership of the practice.

Elevated Psychiatry is a HIPAA-covered entity. Your treatment records, provider messages, and other PHI in the App are governed by our clinic’s Notice of Privacy Practices, which your provider has shared with you. You have the right to access, amend, and request an accounting of disclosures of your health information. To exercise these rights, email us at danielmattox@elevatingmindspsychiatry.com.

We retain your account and clinical records for the duration of the provider-patient relationship and afterward as required by medical-records retention laws in the states we operate in (Hawaii (HI) and California (CA)), typically a minimum of seven (7) years. You can ask us to delete account data that is not part of your legal medical record by contacting us.

We use industry-standard safeguards including TLS encryption in transit, encryption at rest for databases and backups, salted bcrypt password hashing, brute-force lockouts, JWT-based session tokens, and audit logs for provider actions. No system is perfectly secure, so please protect your login credentials and notify us immediately at danielmattox@elevatingmindspsychiatry.com if you suspect unauthorized access.

• Notifications. You can enable or disable push and email notifications in your profile settings.
• Forum participation. Use of the ADHD Club forum is optional and requires a separate HIPAA consent. You choose a pseudonymous display name; your real name and email are never shown to other members.
• Account deletion. Email us to close your portal account. Your clinical record is retained separately as required by law.

The App is not intended for users under 13. Minors (13+) may use the App only with the consent and supervision of a parent or legal guardian who is actively engaged with their care team.

If we make material changes, we will notify you in the App or by email. Continued use of the App after the effective date constitutes acceptance of the updated policy.

ADHD Wellness Clinic LLC, DBA Elevated Psychiatry

Based in Hawaii. Services offered in Hawaii (HI) and California (CA).

Privacy inquiries: danielmattox@elevatingmindspsychiatry.com