Notice of Privacy Practices
Effective date: June 30, 2026
This Notice of Privacy Practices describes how Heather Hirsch MD PLLC may use and disclose protected health information about you and how you can get access to this information. Please review it carefully.
RealDocAI, Inc. operates Flourish App and provides technology, administrative, and management support. RealDocAI does not provide medical care. Clinical services are provided by Heather Hirsch MD PLLC and its healthcare professionals.
Our Duties
Heather Hirsch MD PLLC is required by law to maintain the privacy of protected health information, provide this Notice, follow the terms of the Notice currently in effect, and notify affected individuals following a breach of unsecured protected health information when required by law.
How We May Use and Disclose Health Information
Treatment
We may use and disclose health information to provide, coordinate, or manage your care, including communications among clinicians, pharmacies, laboratories, and other healthcare providers involved in your care.
Payment
We may use and disclose health information to bill and collect payment, confirm coverage, process claims, or obtain payment from you, a health plan, or another responsible party.
Healthcare Operations
We may use and disclose health information for healthcare operations, including quality review, care coordination, licensing, credentialing, training, compliance, business management, and technology support.
Business Associates
We may disclose health information to business associates, including RealDocAI, that perform services for us. Business associates are required to protect health information under written agreements and applicable law.
Other Uses and Disclosures Permitted or Required by Law
We may use or disclose health information when permitted or required by law, including for public health activities, health oversight, abuse or neglect reporting, legal proceedings, law enforcement, coroners or medical examiners, organ donation, research when legally permitted, serious threats to health or safety, workers' compensation, and specialized government functions.
Uses That Usually Require Written Authorization
We generally need your written authorization to use or disclose health information for marketing where required by HIPAA, sale of protected health information, most uses and disclosures of psychotherapy notes, and other purposes not described in this Notice. You may revoke an authorization in writing, except to the extent we have already relied on it.
Your Rights
You have the right to request access to inspect or receive a copy of your health information, request an amendment, request an accounting of certain disclosures, request restrictions, request confidential communications, and receive a paper copy of this Notice. Some requests must be made in writing and may be subject to legal limits.
Reproductive Health Information
When required by law, we will not use or disclose protected health information for prohibited purposes related to lawful reproductive healthcare. We may require an attestation before certain disclosures involving reproductive health information when required by HIPAA.
Complaints
You may file a complaint if you believe your privacy rights have been violated. You will not be retaliated against for filing a complaint. Complaints may be sent to the contact below or to the U.S. Department of Health and Human Services Office for Civil Rights.
Contact
Privacy contact: Security Officer Betty Wang MD
Email: support@joinflourish.app
Mailing address: 25 Goodburlet Rd Unit #970, Henrietta, NY 14467-9998