Health Information Privacy

Some of what GO-180 helps you with touches health-related information — for example financial-readiness assessments, insurance and TRICARE details, and (where offered) wellness check-ins. This notice explains how we handle that information, the protections we apply, and the choices you have. It works alongside our Privacy Policy.

How HIPAA applies

The federal Health Insurance Portability and Accountability Act (HIPAA) Privacy Rule applies to “covered entities” (such as health plans and most healthcare providers) and their business associates. Where GO-180 acts in one of those roles, the protections of the HIPAA Privacy and Security Rules apply to the protected health information involved. In every case — whether or not HIPAA technically applies to a given interaction — we apply the safeguards described below to health-related information you share with us.

Health-related information we may handle

  • Financial-readiness assessment details you choose to provide.
  • Insurance, TRICARE, and benefits information used to give you guidance.
  • Documents you upload to your encrypted locker.
  • Any wellness or screening responses, where that feature is made available to you.

How we protect it

  • Encryption— sensitive data is encrypted in transit (TLS) and sensitive document links are encrypted at the application layer (AES-256-GCM).
  • Access controls— role-based access, separate user and administrator authentication, and two-factor authentication for administrators.
  • Audit logging— access to sensitive records is logged so we can detect and investigate inappropriate access.
  • Minimum necessary— we limit who can see your information to those who need it to provide the service.

How we use and share it

We use your health-related information to provide and improve the services you ask for. We share it only with service providers who process data on our behalf under contract (for example, secure hosting, email, and messaging providers), or when required by law. We do not sell your health information. See the Do Not Sell or Share page for your related choices.

Your rights

  • Access a copy of the health-related information we hold about you.
  • Ask us to correct information that is inaccurate or incomplete.
  • Ask us to delete information, subject to legal retention requirements.
  • Ask us to restrict certain uses, and withdraw consent for optional features.
  • File a complaint with us — and, where HIPAA applies, with the U.S. Department of Health and Human Services, Office for Civil Rights — without fear of retaliation.

How to reach us

To exercise any of these rights or ask a question about health-information privacy, email privacy@go180.ai or use our contact form.

Crisis support

If you are a veteran in crisis, the Veterans Crisis Line is always available:

This notice is provided for transparency and is not legal advice. We update it when our practices materially change.