Peroya / Promenade LLC

Privacy Policy

Version 1.0 · Effective 27 JUN 2026

1. Who We Are

Promenade LLC ("Promenade," "we," "our," or "us") is a technology company based in Caguas, Puerto Rico. We operate Peroya (peroya.app), a patient advocacy application that helps people access, understand, and act on their health information.

Peroya is not a health plan, health insurer, healthcare provider, or licensed clinical professional. We do not provide medical or legal advice, diagnose conditions, or make coverage decisions. We build tools that help patients work more effectively within the healthcare system they already belong to.

2. How This Policy Applies

This Privacy Policy applies to the Peroya mobile application and the peroya.app website. It applies to all users regardless of their preferred language. Where Peroya provides content in languages other than Spanish and English through AI-assisted translation, this policy applies equally.

The Spanish and English versions of this policy have been reviewed by qualified personnel. Translations into other languages provided upon request may be AI-assisted and will be identified as such.

3. Information We Collect

3.1 Information You Provide

  • Account registration: your name, email address, and preferred language.
  • Health plan information: the name of your insurance plan and your member ID, which you provide to authorize Peroya to connect to your plan on your behalf.
  • Caregiver and family access: names and relationship information for any caregivers or family members you authorize to access your account.
  • Plan connection requests: if you ask Peroya to contact your health plan on your behalf, we record your authorization before taking any action.
  • Language preferences: your preferred language for receiving health information, which we use to deliver content in the language most useful to you.
  • Communications: messages you send us through contact forms or email.

3.2 Health Data Retrieved on Your Behalf

When you connect a health plan to Peroya and authorize us to act on your behalf, we retrieve your health records from that plan's secure digital connection. This data may include claims and encounter records, prior authorization requests and status, diagnoses, conditions, and medications, provider and facility information, and laboratory results and clinical notes where available from your plan.

This health information is Protected Health Information (PHI) under HIPAA. See Section 6 and our HIPAA Notice of Privacy Practices at peroya.app/hipaa for full detail.

3.3 Information Collected Automatically

  • Device type and operating system version, for compatibility and issue resolution.
  • App usage events in de-identified form, to understand which features most help patients.
  • IP address and general location (not precise GPS coordinates).
  • Browser language setting, used to default to the appropriate language on first visit.

4. How We Use Your Information

4.1 To Provide the Peroya Service

  • Connecting your health plan and retrieving your records under your authorization
  • Presenting your health data in plain language in your preferred language
  • Tracking prior authorization status and notifying you of changes
  • Helping you understand your options after a prior authorization decision, including your appeal rights
  • Preparing advocacy documents you review and authorize us to send on your behalf
  • Enabling caregivers and family members to support you under permissions you set

4.2 Patient-Authorized Outreach to Health Plans

When you ask Peroya to contact your health plan on your behalf, to request data access, submit an appeal, or file a grievance, we record your authorization before taking any action. That authorization is logged with a timestamp and accessible to you in the app at all times. Peroya acts as your representative, not independently.

4.3 Language Services

Peroya provides health information in Spanish and English as primary languages. These translations are human-curated and professionally reviewed. For patients who prefer other languages, Peroya offers AI-assisted translation. When you receive content through AI-assisted translation, a disclosure is displayed in your selected language. We use your language preference to deliver content in the most useful form for you, and we use aggregated language preference data to prioritize which languages to add as professionally reviewed options.

4.4 AI-Powered Features

Some Peroya features use artificial intelligence to generate plain-language health summaries, draft appeal letters, and provide prior authorization guidance. For these features, only the minimum necessary clinical information, such as diagnosis codes and medication codes, is used. Your name, date of birth, address, and member ID are not included. AI-generated content is reviewed by you before it is used or sent.

5. What We Do Not Do

  • We do not sell your personal information or health data. Ever.
  • We do not use your health data for advertising.
  • We do not share your PHI with employers, health plans, or any third party for marketing purposes.
  • We do not use behavioral tracking or advertising technologies.
  • We do not use your language preference data to profile you for commercial purposes.
  • Advertising is permanently excluded from the Peroya business model.

6. HIPAA and Your Health Information

Peroya accesses your health plan records solely under your authorization, exercising your federal right to direct your health data to an app of your choosing under 45 CFR § 164.524. Your health plan remains the HIPAA covered entity responsible for maintaining and protecting your original records. Peroya holds a copy of those records for the sole purpose of displaying them to you and acting on your instructions.

We have signed a Business Associate Agreement with Google Cloud Platform, our cloud infrastructure provider, which governs how your health data is stored and protected on our systems. All health data is encrypted at rest (AES-256) and in transit (TLS 1.3).

For your full rights under HIPAA and how we handle protected health information, see peroya.app/hipaa.

7. How We Share Your Information

7.1 Service Providers

We share data with service providers only as necessary to operate Peroya, under written data processing agreements:

  • Google Cloud Platform: cloud infrastructure and data storage. Business Associate Agreement in place. US data centers only.
  • Firebase (Google): push notifications for prior authorization status changes.
  • Anthropic via GCP Vertex AI: AI language processing for premium features and AI-assisted translation. De-identified clinical codes for health features; page content for translation. No PHI included in translation requests.
  • Apple Inc.: iOS App Store distribution and push notification delivery.

7.2 Health Plans, Under Your Authorization

When you direct Peroya to contact your health plan on your behalf, we share only the information necessary to fulfill that request, under your explicit recorded instruction.

7.3 Caregiver and Family Access

If you authorize a caregiver or family member to access your account, that person will see your health data within the permissions you set. You can adjust or revoke access at any time.

8. Data Retention

  • Account data: retained while your account is active and for no more than 30 days after deletion.
  • Health records: retained in encrypted storage for 12 months or until you delete them.
  • Authorization records: retained for the period required by HIPAA audit obligations.
  • HIPAA audit logs: retained for six years as required by HIPAA.
  • Language preference data: retained with your account; deleted when your account is deleted.
  • De-identified analytics: retained in aggregate form.

9. Your Rights

  • Access: view all data Peroya holds about you within the app at any time.
  • Correction: update your Peroya account information at any time. If you believe health records Peroya has retrieved on your behalf are inaccurate, Peroya will submit a formal correction request to your health plan on your behalf under your recorded authorization. Your health plan, as the covered entity responsible for your records, evaluates and responds to correction requests.
  • Deletion: delete your account and all associated data in app settings within 30 days.
  • Data portability: export your Peroya data at any time.
  • Language preference: update your preferred language at any time in your account settings.
  • Revocation: revoke any caregiver, family, or plan authorization at any time.

10. Minors

Peroya serves patients of all ages. Parents and legal guardians may access minor children's health records through Peroya subject to applicable HIPAA and Puerto Rico law. Certain health services, including mental health, substance use, reproductive health, and STI treatment, are protected under minor consent laws and are not accessible to parents through Peroya. Emancipated minors receive fully independent accounts. See peroya.app/hipaa for detail.

11. Security

  • AES-256 encryption for all data at rest
  • TLS 1.3 for all data in transit
  • iOS Keychain storage for authentication tokens
  • Encrypted local database on device
  • HIPAA audit logging of all PHI access events

12. Changes to This Policy

We will notify registered users of material changes by email and post an updated version at peroya.app/privacy with a new effective date.

13. Contact

  • Privacy questions: [email protected]
  • To file a HIPAA complaint with HHS Office for Civil Rights: www.hhs.gov/ocr