HIPAA Compliance

ClapDiet is designed to meet HIPAA requirements for protecting your health information.

What Is HIPAA?

HIPAA (Health Insurance Portability and Accountability Act) is a US law that:

Sets standards for health data protection

Gives patients rights over their data

Requires organizations to safeguard health information

ClapDiet and HIPAA

Our Commitment

ClapDiet treats your health data as Protected Health Information (PHI):

Technical safeguards in place

Administrative controls established

Physical security measures

Regular compliance reviews

What This Means for You

Your lab results are protected

Your health conditions are confidential

Your tracking data is secured

You control access to your information

HIPAA Safeguards We Implement

Technical Safeguards

✅Encryption (AES-256 at rest, TLS 1.3 in transit)

✅Access controls (role-based, least privilege)

✅Audit logging (all access tracked)

✅Automatic logoff

✅Transmission security

Administrative Safeguards

✅Security officer designated

✅Workforce training

✅Access management procedures

✅Incident response plan

✅Regular risk assessments

Physical Safeguards

✅Data center security (AWS)

✅Device controls

✅Workstation security

Business Associate Agreements (BAAs)

When we work with third parties that access health data:

We sign BAAs with them

They're bound to HIPAA requirements

Examples: cloud hosting, analytics

Your Rights Under HIPAA

Access Your Data

You can view and download your health information.

Learn about data export →

Request Corrections

If something is wrong, you can request corrections.

Know Who Accessed Your Data

We maintain audit logs of access.

Request Restrictions

You can ask us to limit how we use your data.

Breach Notification

If a breach occurs:

We'll notify affected users promptly

Within 60 days as required

Details on what happened

Steps you should take

Questions?

For HIPAA-related questions:

Email: privacy@clapdiet.com

Subject line: "HIPAA Inquiry"

Note: While ClapDiet follows HIPAA principles, we're a consumer health app. If your healthcare provider shares data with us, they may have additional obligations. Related Articles:

Data Security

Exporting Your Data