RecoveryBuddy AI HIPAA Notice

Effective Date: August 1, 2026

Last Updated: August 1, 2026

Platform Owner

Digjy LLC

19580 West Indian School Rd Ste 105 #973

Buckeye, Arizona 85396

United States

Website: https://recoverybuddy.net

Email: [email protected]

HIPAA Notice

This HIPAA Notice explains how the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) may apply to the use of RecoveryBuddy AI and describes the responsibilities of Digjy LLC, healthcare providers, treatment organizations, Peer Recovery Coaches, and users with respect to protected health information (“PHI”).

This Notice should be read together with the RecoveryBuddy AI Terms of Service, Privacy Policy, Medical Disclaimer, and other applicable legal policies.

Important Notice Regarding HIPAA

RecoveryBuddy AI is a technology platform owned and operated by Digjy LLC.

Whether HIPAA applies to information processed through RecoveryBuddy AI depends on:

How the Platform is used.
Whether the user is a HIPAA-covered entity.
Whether Digjy LLC has entered into a Business Associate Agreement (“BAA”) with a covered entity.
The nature of the information being processed.

Use of RecoveryBuddy AI does not automatically make Digjy LLC a HIPAA Covered Entity or Business Associate for every user or every use of the Platform.

Covered Entities

HIPAA generally applies to certain healthcare organizations and professionals, including:

Healthcare providers.
Health plans.
Healthcare clearinghouses.

RecoveryBuddy AI users who are HIPAA-covered entities remain responsible for complying with all applicable HIPAA requirements.

Business Associate Relationships

When RecoveryBuddy AI provides services to a HIPAA-covered entity under a written Business Associate Agreement (“BAA”), Digjy LLC will perform its contractual obligations in accordance with the applicable BAA and relevant provisions of HIPAA.

No Business Associate relationship exists unless a written BAA has been fully executed by both parties.

Protected Health Information (PHI)

Protected Health Information (“PHI”) generally means individually identifiable health information that is protected under HIPAA.

Depending on how RecoveryBuddy AI is used, users may voluntarily submit information relating to:

Recovery status.
Behavioral health.
Wellness.
Treatment participation.
Medical history.
Medications.
Appointments.
Clinical documentation.
Recovery journals.
Communications with providers.
Progress information.

Users should carefully consider the information they choose to upload and share through the Platform.

How Information May Be Used

Where applicable, information may be processed to:

Operate the Platform.
Authenticate users.
Facilitate communication.
Support recovery planning.
Enable provider collaboration.
Provide requested AI features.
Maintain security.
Prevent fraud.
Improve Platform functionality.
Comply with legal obligations.

Processing activities are performed in accordance with applicable agreements, our Privacy Policy, and relevant legal requirements.

Artificial Intelligence and Health Information

RecoveryBuddy AI may use artificial intelligence to assist users with educational information, summaries, recovery planning, journaling support, and organizational tools.

Artificial intelligence:

Does not replace licensed healthcare professionals.
Does not diagnose medical conditions.
Does not prescribe medications.
Does not provide medical treatment.
Does not replace clinical judgment.

Healthcare providers should independently review AI-generated information before relying upon it for clinical or professional purposes.

User Responsibilities

Users are responsible for:

Determining whether HIPAA applies to their use of the Platform.
Obtaining any legally required authorizations or consents.
Configuring appropriate access permissions.
Protecting account credentials.
Limiting disclosure of confidential information to authorized individuals.
Complying with applicable healthcare laws and regulations.

Healthcare Provider Responsibilities

Healthcare providers and organizations remain solely responsible for:

Maintaining required professional licenses.
Protecting Protected Health Information.
Complying with HIPAA and other applicable privacy laws.
Exercising independent clinical judgment.
Verifying the accuracy of information used in patient care.
Managing workforce access to information.
Reporting breaches as required by law.

RecoveryBuddy AI does not supervise or direct professional healthcare services.

Security Safeguards

RecoveryBuddy AI maintains administrative, technical, and physical safeguards designed to help protect information processed through the Platform.

Security measures may include:

Encryption in transit.
Encryption at rest where appropriate.
Multi-factor authentication.
Role-based access controls.
Password hashing.
Security monitoring.
Audit logging.
Backup procedures.
Disaster recovery planning.
Vulnerability management.
Incident response procedures.

No security system can guarantee absolute protection against every threat.

Information Sharing

RecoveryBuddy AI may share information only as:

Authorized by the user.
Authorized by a healthcare organization.
Required by applicable law.
Permitted under an applicable Business Associate Agreement.
Necessary to provide requested Platform functionality.

Information is not disclosed for purposes inconsistent with applicable agreements or legal requirements.

Security Incidents

If RecoveryBuddy AI becomes aware of a security incident involving information subject to applicable legal requirements, Digjy LLC will investigate the incident and, where required by law or contract, provide appropriate notifications within applicable legal or contractual timeframes.

Retention of Information

Information is retained only as long as reasonably necessary to:

Provide requested services.
Maintain business records.
Meet contractual obligations.
Comply with applicable law.
Resolve disputes.
Maintain security.
Prevent fraud.
Support audits.

Retention periods vary depending on the nature of the information and applicable legal requirements.

User Rights

Depending on applicable law and your relationship with RecoveryBuddy AI, you may have rights regarding information processed through the Platform, including rights to request:

Access.
Correction.
Deletion, where applicable.
Copies of certain information.
Restrictions on certain processing activities.

Requests may be subject to legal limitations and identity verification requirements.

No Guarantee of HIPAA Coverage

Nothing in this HIPAA Notice should be interpreted as a representation that every feature, service, user, or deployment of RecoveryBuddy AI is subject to HIPAA.

HIPAA applicability depends upon the specific facts, legal relationships, and contractual arrangements involved.

Organizations are encouraged to consult qualified legal counsel regarding their compliance obligations.

Changes to This HIPAA Notice

RecoveryBuddy AI may revise this HIPAA Notice periodically to reflect changes in:

Applicable laws.
HIPAA regulations.
Platform functionality.
Security practices.
Business operations.
Industry standards.

Updated versions will be posted on the RecoveryBuddy AI website with a revised Last Updated date.

Contact Information

Questions regarding this HIPAA Notice may be directed to: