Health Data Notice

Plain English

Your DEXA scan produces detailed health data about your body. We think you should know exactly what happens with that data, so here it is in plain language.

What Data Your Scan Produces

A DEXA scan generates body fat percentage, lean muscle mass broken down by region (arms, legs, trunk), bone mineral density with T-scores and Z-scores, visceral fat measurements, and regional composition data. If you've had previous scans with us, we also keep comparison data to show your progress.

Do We Have to Follow HIPAA?

Technically, no. HIPAA applies to healthcare providers, health plans, and their business associates. We're a wellness and fitness service, not a medical provider. That said, your health data still deserves to be treated with care, and that's what we do.

How We Protect Your Data

We're honest about what we are: a small mobile scanning business, not a tech company. Here's what we actually do:

• Your scan data is stored on password-protected systems
• Only David and authorized BluRithm staff can access your records
• We don't leave client data sitting on the DEXA machine after transferring it
• We use common-sense security practices for a business our size

We won't pretend to have enterprise-grade infrastructure. What we will do is treat your data the way we'd want ours treated.

Who Sees Your Data

Nobody but you and us. We don't share your scan results with anyone unless you specifically ask us to — like if you want us to send your report to your doctor or trainer.

This is especially important for corporate events: your employer booked the event, but your individual results are confidential. We deliver them directly to you and only to you.

How Long We Keep It

We keep your data as long as you're an active client, plus a reasonable time after in case you come back. The whole point of longitudinal tracking is seeing your progress over time, so we don't want to delete your baseline if you might return in 6 months.

But it's your data. If you want it gone, email info@blurithm.com and we'll delete it within 30 days.

Your Rights

• See it: Ask for a copy of all the health data we have on you anytime.
• Fix it: If something's wrong, let us know and we'll correct it.
• Delete it: Say the word and it's gone.
• Take it: We can give you your data in a format you can share with your doctor or another provider.

If Something Goes Wrong

If we ever discover that your data has been compromised, we'll tell you directly and promptly — what happened, what data was affected, and what we're doing about it. No runaround.

Questions?

Email info@blurithm.com or call (408) 438-2495. We'll give you a straight answer.