1. Who we are and what this policy covers
Alli Healthcare Technologies, Inc. (“Alli Health,” “Alli,” “we,” “us”) provides technology and care-management support services that help independent primary-care practices run Advanced Primary Care Management (APCM) programs for their Medicare patients. This Privacy Policy describes how we handle information collected through allihealth.ai (the “Site”) and how we handle telephone, text-message (SMS), and email communications we send and receive (Section 6).
Scope note for patients: protected health information (PHI) that Alli processes on behalf of a healthcare practice is governed by HIPAA and the Business Associate Agreement (BAA) between Alli and that practice — not by this policy. See our HIPAA & BAA page. Your healthcare provider's Notice of Privacy Practices describes how your health information is used. Section 6 of this policy nonetheless describes, for transparency, how we communicate with patients and how patients can control those communications.
2. Information we collect
- Information you submit on the Site: if you request a call or demo, we collect your name, role, practice name, work email, and (optionally) a phone number, together with any communications-consent choice you make on the form and the date, time, and page on which you made it.
- Correspondence: emails you send to hello@allihealth.ai, and texts or voicemails you leave for us.
- Communication records: for calls and texts we place or receive, we keep logs of the number, date, time, outcome, opt-in and opt-out requests, and — where disclosed at the start of a call — recordings and transcripts.
- Technical data: standard server logs (IP address, browser type, pages viewed) collected by our hosting provider. The Site does not set advertising or third-party analytics cookies.
3. How we use information
We use Site information to respond to inquiries, schedule and conduct demos, operate and secure the Site, communicate with practices about our services, honor your communication preferences, and comply with law. We do not sell personal information, and we do not use Site form submissions for third-party advertising.
4. How we share information
We share information only with service providers who help us operate — website hosting and form processing (Netlify), email (Google Workspace), and telephony and messaging platforms that place calls and deliver texts on our behalf — as required by law, or in connection with a corporate transaction. Service providers are bound to use information only to provide services to us. Mobile phone numbers and text-message opt-in data are never shared with, sold to, or rented to third parties or affiliates for their own marketing or promotional purposes.
5. Retention
We keep inquiry and demo-request information for as long as needed to respond and maintain a business relationship, and no longer than 24 months after our last interaction, unless a longer period is required by law. We retain records of communications consent, opt-outs, and do-not-call requests for at least five (5) years so that we can demonstrate compliance and continue to honor your choices.
6. Telephone, text, and voice communications (TCPA notice)
This section explains how we comply with the Telephone Consumer Protection Act (TCPA), the FCC's implementing rules, the national and state Do-Not-Call rules, and industry messaging standards. It applies to two different groups of people.
6.1 Practices, prospects, and other business contacts
- What you agree to. If you provide a phone number on the Site and check the communications-consent box, you give Alli your prior express written consent to call and text you at that number about your inquiry and our services, including by means of automated dialing technology, prerecorded or artificial voice, or an AI-generated voice. If you do not check the box, we will contact you only by email or by a live, manually dialed call.
- Consent is not a condition of purchase. You can request a demo, purchase services, or do business with Alli without agreeing to receive automated calls or texts.
- Frequency and cost. Message frequency varies with your inquiry. Message and data rates may apply according to your carrier plan.
- How to opt out. You may revoke consent at any time and by any reasonable means: reply STOP (or END, CANCEL, UNSUBSCRIBE, QUIT, or REVOKE) to any text; say “stop calling” or press the opt-out key on any automated call; email hello@allihealth.ai; or tell any Alli representative. We will honor your request promptly — and in all cases within ten (10) business days — and may send one final message confirming the opt-out. Opting out of texts does not opt you out of calls, and vice versa, unless you tell us to stop both.
- Do Not Call. We maintain an internal do-not-call list and honor the National Do Not Call Registry and applicable state registries for any marketing calls. To be added to our internal list, use any of the methods above.
6.2 Patients enrolled in a practice's APCM program
Alli contacts patients only on behalf of, and at the direction of, the patient's own healthcare practice, as that practice's HIPAA business associate. These communications are care-management check-ins and related healthcare messages — they are not advertising or telemarketing, and Alli never promotes its own products to patients.
- Consent. Before any automated check-in, the patient's practice obtains and documents the patient's consent to the APCM program and to be contacted by phone, text, or email at the number(s) the patient provides, including by automated dialing, prerecorded or artificial voice, and AI-generated voice. The consent record is kept in the patient's chart and in Alli's system.
- Identification and AI disclosure. Every automated call identifies the practice on whose behalf it is made and Alli, states at the beginning of the call that the voice is AI-generated, and provides a telephone number the patient can call back. Texts identify the practice and Alli. Caller ID displays a working, callable number.
- Recording. Check-in calls may be recorded and transcribed so that the patient's care team can review them. Where recording occurs, it is disclosed at the start of the call. Recordings, transcripts, and summaries are PHI and are handled under the BAA with the practice.
- Frequency and length. Automated check-in attempts are limited to no more than one (1) per day and three (3) per week per patient. Calls are brief (typically about one minute), and texts are kept to 160 characters where practicable. Replies within an ongoing conversation are not counted as new contact attempts.
- Opt-out. A patient may stop texts at any time by replying STOP, and may stop automated calls at any time by saying “stop,” pressing the opt-out key during a call, calling the number provided on the call, or telling their practice. Requests are honored immediately for that channel. Because automated check-ins are how the APCM program delivers between-visit care, a patient who opts out of all automated contact may be withdrawn from the program by their practice; the patient may stop participating in APCM at any time by telling their practice, and doing so never affects the care they receive from their doctor.
- Emergencies. Check-ins are not an emergency service. Patients experiencing a medical emergency should call 911.
6.3 Email
Commercial email from Alli includes a working unsubscribe link and our postal address, and unsubscribe requests are honored within ten (10) business days, as required by CAN-SPAM. Transactional and relationship emails (for example, replies to your inquiry) are not subject to unsubscribe.
7. Your choices and rights
You may request access to, correction of, or deletion of the personal information you submitted through the Site by emailing hello@allihealth.ai. Depending on your state of residence, you may have additional rights under state privacy laws; we will honor verified requests as those laws require. Patients should direct requests about their health information to their healthcare practice.
8. Security
We use commercially reasonable safeguards for Site and communications information, including encryption in transit (HTTPS), access controls, and tenant isolation for practice data. No method of transmission or storage is completely secure.
9. Children
The Site is intended for healthcare professionals and business contacts. It is not directed to children under 13, and we do not knowingly collect their information.
10. Changes and contact
We will post any changes to this policy on this page with an updated effective date. Questions, opt-out requests, or privacy requests: hello@allihealth.ai.