Use your HSA/FSA funds to Join 4Core

Privacy Policy

4Core · Remote Patient Monitoring

Effective date: February 12, 2026 · Last updated: February 12, 2026

This Privacy Policy explains how 4Core Functional Health (“4Core,” “we,” “us”) collects, uses, protects, and shares information through the 4Core mobile application and remote patient monitoring service (the “Service”). The Service is provided to patients as part of a care relationship with a 4Core clinical practice. By using the Service, you agree to the practices described here.

Your health information is also protected by your care provider’s obligations under applicable health-privacy law, including, where applicable, HIPAA. A separate Notice of Privacy Practices provided by your 4Core practice governs how your Protected Health Information (PHI) is handled in the course of your care. Where that Notice and this Policy differ regarding PHI, the Notice of Privacy Practices controls.

1. Information we collect

  • Health and wellness data. With your explicit permission, the app reads health metrics from Apple Health (HealthKit) on iOS or Health Connect on Android, and from connected devices and services you link (such as blood-glucose, weight, blood-pressure, and wearable devices). This may include heart rate, heart-rate variability, resting heart rate, sleep, physical activity and energy, respiratory rate, blood-oxygen, body measurements, and blood glucose.

  • Account and identity information. Information needed to associate data with the correct patient record within your care relationship (such as your name and the identifiers used by your practice).

  • Device and technical information. Basic technical data needed to operate and secure the app (such as device type, app version, and diagnostic logs). We do not use this for advertising.

2. How we use your information

  • To enable your 4Core care team to monitor your health between in-clinic visits.

  • To display your data to you and to your care team through the app and clinical dashboard.

  • To operate, secure, maintain, and improve the Service.

  • To comply with legal and regulatory obligations.

We do not use your health information for advertising or marketing, and we do not sell it.

3. Apple Health (HealthKit) and Health Connect

The app accesses HealthKit and Health Connect data only after you grant permission, and only the specific data types needed to provide the Service. Consistent with Apple and Google requirements, we do not use data obtained through HealthKit or Health Connect for advertising or marketing, we do not sell it, and we do not share it with third parties except as needed to provide the Service to you and with your consent. You can review or revoke the app’s access at any time in your device settings (iOS: Settings → Privacy & Security → Health; Android: Health Connect settings).

4. How we share information

We share your information only as follows:

  • Your care team. With the 4Core clinical staff involved in your care.

  • Service providers. With vendors who process data on our behalf under contract and only to provide the Service — for example, our wearable-data infrastructure provider and our cloud hosting provider. These providers are permitted to use the data only as needed to perform services for us.

  • Connected services you choose. When you link a device or account (for example, a wearable or connected scale), data flows according to the permissions you grant.

  • Legal requirements. When required by law, regulation, legal process, or to protect the rights, safety, and security of patients, the public, or 4Core.

We do not sell your personal or health information to anyone.

5. How we protect your information

We use administrative, technical, and physical safeguards designed to protect your information, including encryption in transit and at rest, access controls limiting access to authorized personnel, and secure cloud infrastructure. No method of transmission or storage is perfectly secure, but we work to protect your information consistent with applicable law.

6. Data retention

We retain your information for as long as needed to provide the Service and to meet legal, regulatory, and clinical record-keeping requirements. Retention of clinical records is governed by your care provider’s obligations and applicable law.

7. Your rights and choices

  • Revoke the app’s access to health data at any time in your device settings.

  • Request access to, or correction of, information we hold about you.

  • Request deletion of your information, subject to legal and clinical retention requirements.

  • Contact us with any privacy question or concern using the details below.

Depending on where you live, you may have additional rights under applicable privacy law.

8. Children

The Service is not directed to children under 13, and we do not knowingly collect their information except within an established care relationship and as permitted by law. Where a minor is a patient, their information is handled under the supervising care relationship and applicable law.

9. Changes to this Policy

We may update this Policy from time to time. Material changes will be reflected by updating the “Last updated” date above and, where appropriate, by additional notice.

10. Contact us

4Core Functional Health
10917 Black Dog Lane, Charlotte, NC 28214
Privacy contact: provider@4core.ai