Last Modified: July 2026

Reform Labs operates Docent Health (“Docent”), a health companion that helps you bring your family’s medical records into one clear picture. Reform Labs (the “Company,” “we,” or “us”) is committed to protecting and respecting your privacy. This Privacy Policy (“Policy”) describes how we gather and use your information. This Policy applies to the information we collect, or you provide, through any of Reform Labs’ digital resources (for example, via our websites, applications, email correspondence, marketing materials, and other online or downloadable tools) (collectively, “online resources”) that reference or display a link to this Policy. By using websites and other online resources that reference or display a link to this Policy, you are accepting and agreeing to the practices described herein.

How We Collect Information and What Information We Collect

We receive information from you and from the health systems, patient portals, and providers you choose to connect. The amount and type of information we collect, and how we collect it, depends on which features of the range of online services we offer (“Services”) are being used. We collect information that you give us by filling in forms or data fields through our online resources. If you submit any personal information related to other people in connection with the Services, you represent that you have the authority to do so and to permit us to use the information in accordance with this Policy. We may combine the information collected from you through the Services with information we receive from and about you from others, and use the combined information in accordance with this Policy. Some examples of the personal information we collect include:

• Registration Information: We may collect your email address and password (your login credentials), and other information necessary to register and set up your account for our Services.
• Identity information: The information we collect may include your name, date of birth, contact information (postal address, email address, phone number), and account preferences.
• Family member information: We may collect names and identifiers for members of your family and others (such as your children, spouse, or parents) whose care you help manage and whom you have chosen to add to your account, where you have the authority to do so.
• Payment Information: To the extent necessary to process a payment, you may also give us certain of your financial information, including credit card information, bank details.
• Health records information: When you choose to connect a patient portal, health system, or provider, Docent collects and imports a copy of your family’s health records — which may include conditions and diagnoses, medications and prescriptions, visit and after-visit summaries, lab and test results, immunizations, and allergies — so that we can organize them and translate them into plain language for you. You choose which family members and which providers to connect, and nothing is gathered unless you set it up.

We collect information from your computer or electronic devices. We (or a third-party designated by us) receive certain types of information whenever you visit our websites or otherwise use Reform Labs’ online resources.

• Device and IP Information: We collect the Internet Protocol (IP) address used to connect your computer to the internet, information about your browser type and version, time zone settings and geographic location, browser plug-in types and versions, and operating system and platform. If you use a mobile device to access our website or online resources, we may collect information about your device, including your device ID and device type, as well as usage information about your device and your use of our mobile websites and other mobile resources. Reform Labs may log this information and analyze it to determine anomalous behavior, detect threats and generally improve our Services.
• Cookies and Beacons: We collect information provided by tracking technologies, such as cookies, beacons, single-pixel tags, local share objects (Flash), local storage, Etags and scripts.
• Visit and Use Information: We collect information about your visits to our website and use of our online resources, including the full Uniform Resource Locators (URL), clickstream to, through and from our website (including date and time), the products or services you viewed or searched for, page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), and methods used to browse away from the page.
• Information from Third-Party Sites and Services: In cases where Reform Labs has integrated with third party providers or services, we may have access to your information on such third-party services.

How We Use Your Information

Information we receive from you. We use the information we collect from you to provide the Docent service to you and the family members whose care you manage; to gather, organize, and explain your family’s health records; and to carry out our obligations under our agreement with you. We may also use this information to notify you about changes to our Services, or changes to regulatory requirements that may affect our Services or your use of them; and to provide you with information about Services we believe may interest you.

Information we receive from your computer or electronic devices. We (or a third party designated by us) may use this information to improve our website and ensure that content is presented in the most effective manner for you and your computer or device; and to secure, maintain, troubleshoot, and improve the Services. We do not use your information to deliver advertising to you, and we do not sell your information.

Disclosure of Your Information

Rest assured that Reform Labs will never rent or sell your personal information. We will share your personal information only as described below.

• Reform Labs Personnel: Reform Labs personnel and authorized consultants and/or contractors may have access to user information as necessary in the normal course of our business.
• Health Systems and Providers You Connect: When you choose to connect a patient portal, health system, or provider, we exchange the information necessary to authenticate that connection and retrieve the records you have asked us to gather on your behalf. We share only what is reasonably necessary to fulfill your request, and only with the providers and services you have chosen to connect.
• Protection of Reform Labs, Others: We may share personal information when we believe in good faith that such release is necessary to comply with any legal obligation; to enforce or apply our Terms of Use and other policies; or to protect the rights, property, or safety of Reform Labs, our employees, our users, or others. This includes the sharing of personal information with public authorities, and other companies and organizations, in the event of a cyber security incident or for fraud protection, for example. We will also disclose your information to third parties in the event we sell or buy any business or assets, in which case we may disclose your information to the prospective seller or buyer of such business or assets, or if Reform Labs or substantially all of its assets are acquired by a third party, in which case information held by us about our users may be one of the transferred assets.
• Service Providers: Reform Labs may share personal information as well as information from tools such as cookies, log files, device identifiers and location data, with third-parties that help Reform Labs provide services to you (“Service Providers”). Our Service Providers will be given access to your information only as is reasonably necessary for Reform Labs to provide the Services. We require Services Providers to protect your data in a manner consistent with this Policy and to limit the use of such information to the performance of services for Reform Labs. Reform Labs may also remove parts of data that can identify you and share only de-identified, aggregated data with Service Providers, including combining your information with other information in a way that it is no longer associated with you.
• Data Storage: Your encrypted personal information is stored on servers provided by a third-party cloud-based service provider that protects and stores your information in a manner that is consistent with this Policy.
• De-identified and Aggregated Information: We may use and share de-identified, aggregated information — information that cannot reasonably be used to identify you or your family — for limited purposes such as research or improving care. We never sell information that identifies you or your family, we do not sell your personal information to advertisers or data brokers, and we do not use your data to serve advertising.
• With Your Consent: Except as noted above, we will contact you when your personal information is shared with third parties or used for a purpose incompatible with the purpose(s) for which it was originally collected, and you will be able to opt out to prevent the sharing of this information.

Your Rights and Choices

Your family’s data belongs to you. You may access and review the information in your account, ask us to correct information that is inaccurate, export a copy of your family’s information, and delete your account and the associated records at any time. When you delete your account, we will delete or de-identify your family’s information, except where we are required to retain it by law. To make any of these requests, contact us at privacy@reformlabs.io.

Children’s Information

Docent is intended for use by adults. A parent or guardian may add a child’s records to their own account to help manage that child’s care, and by doing so represents that they have the authority to provide and manage that information. Docent is not directed to children, and we do not knowingly allow children to create their own accounts. If you believe a child has provided us information without appropriate authorization, contact us at privacy@reformlabs.io.

State Privacy Rights

Depending on where you live, you may have additional rights regarding your personal and health information, and Docent may have additional obligations — for example under the California Consumer Privacy Act (as amended), the California Confidentiality of Medical Information Act, and the Washington My Health My Data Act. [Counsel to complete jurisdiction-specific disclosures and any required separate consumer-health-data consent.]

Communications

We will never provide your email address to a third party without your explicit permission. Reform Labs may send you emails with Docent-related news, products, offers, surveys or promotions. Pursuant to the Services provided by us to you you may also receive email notices from us informing you of actions that either have been performed by us, or are required to be performed by you, via our online resources. If you do not want to receive email from us click the “unsubscribe” instructions contained in each email message.

Please note that if you opt out of receiving email messages from us, you will continue to receive all emails related to our systems (e.g., those regarding forgotten user passwords) and legal notices (e.g., updates to our policies).

Security of Your Information

Reform Labs has implemented industry standard administrative, technical, and physical security safeguards designed to protect the personal information you provide. If you choose, access to your information on our Services is password-protected, and data is encrypted in transit (using TLS) and at rest. We support secure https access to the Service websites and regularly monitor our system for possible vulnerabilities and attacks to protect information stored on our servers. While we endeavor to create online resources that are always secure and reliable, we cannot guarantee the confidentiality of communications or materials transmitted to or from us (or to or from any other party), via the Reform Labs website or other online resources. There is no guarantee that information may not be accessed, disclosed, altered, or destroyed by breach of any of our administrative, technical, or physical safeguards and we accept no responsibility and are in no way liable for the security of the information transmitted via our website or other online resources.

You are responsible for maintaining the confidentiality of your Services access information and password and for restricting access to your devices, and you agree to accept responsibility for all activities that occur under your password. Please help keep your account safe by using a strong password.

External Websites

Our online resources may, from time to time, contain links to, or otherwise make available, third-party websites, services, or other resources not operated by us or on our behalf (“Third Party Services”). If you access Third Party Services by clicking on a hyperlink consult the privacy policies of those websites before you submit information to them. Reform Labs is not responsible for the privacy practices of third-party websites. These links are provided as a convenience only and do not constitute an affiliation with, endorsement or sponsorship of the Third Party Services.

Agreement for the Collection and Use of Your Information

By using Reform Labs websites or other online resources, you acknowledge that you have read the terms of this Privacy Policy and you agree with the collection and the use of your information as set out herein.

Changes to Our Privacy Policy

We may amend this Policy from time to time. Changes we make to the Policy in the future will be posted on this page. Please check back frequently to see any updates or changes to the Policy. Your continued use of our websites and online resources following the posting of changes to this Policy will indicate your acceptance of the Policy changes.

Questions

If you have any questions, comments or requests relating to this Privacy Policy, please send an email to privacy@reformlabs.io.