1. Who we are and what this policy covers

Hi Neo, Inc. (“Hi Neo,” “we,” “us”) is a Delaware corporation that provides cost-transparency, patient-navigation, and cost-lock technology to health plans, self-funded employers, and health care providers.

Hi Neo, Inc., 1111B S Governors Ave STE 37234, Dover, DE 19904. Phone: (833) 818-2369.

This policy explains how we collect, use, and share personal information when you:

• visit hineo.com and its related pages;
• request a demo, email us, call us, or apply for a job; or
• deal with us as a business contact, for example at a health plan, employer, provider, or partner.

 

If you are a health plan member: when we provide our tools through your health plan or employer plan, we process your information on that plan’s behalf as a business associate under HIPAA. Your plan’s Notice of Privacy Practices governs that information. Section 4 explains more.

This policy does not cover third-party websites we link to. Their own policies apply.

2. Information we collect

Information you give us. When you request a demo, our form asks for your first name, last name, email, phone number, company, city, state, and a message. We also keep what you send us by email or tell us on calls. If you apply for a job by emailing careers@hineo.com, we receive what you send, such as your resume and contact details.

Information collected automatically. When you visit our website, we and our service providers may collect your IP address, browser and device type, pages viewed, time on page, and the site that referred you, using cookies and similar technologies. Section 6 explains this.

Information from other sources. For business outreach, we may collect professional contact information, such as name, title, employer, and work email, from public sources such as company websites and professional networking sites, and from business contact data providers.

Information we process for health plans. When a health plan or plan sponsor deploys our tools, we may process member information they provide or authorize, such as eligibility, benefit and accumulator information, prior authorization and claims information, provider and cost information, and how members use the app. We process it only to provide our services to that plan, under our agreements with it.

3. How we use information

We use the information described above to:

• respond to your requests and schedule demos;
• provide, operate, support, and improve our services for our customers;
• send you information about Hi Neo, which you can opt out of at any time;
• understand how our website is used and keep it secure;
• review job applications; and
• comply with law, enforce our agreements, and protect our rights and the rights of others.

We do not sell personal information. We do not use advertising cookies or advertising pixels on our website. We do not use health plan member information to market Hi Neo.

4. Health information and HIPAA

When we work with health plans, we act as a business associate under the Health Insurance Portability and Accountability Act (HIPAA). We sign a business associate agreement with each plan, and we use and disclose protected health information only as that agreement and HIPAA allow.

If you are a member and want to see, correct, or get a record of disclosures of your health information, please contact your health plan. If you contact us instead, we will send your request to your plan as our agreement with it requires.

5. How we share information

We share personal information only as follows:

• Service providers that help us run our business, such as cloud hosting, in-app messaging, email, website hosting, analytics, and video hosting. They may use the information only to provide services to us, under contract.
• Health plans, plan sponsors, and providers, as a health plan directs, so we can deliver our services to its members.
• Professional advisors, such as lawyers and accountants, under duties of confidentiality.
• Legal and safety reasons: to comply with law or legal process, or to protect rights, property, or safety.
• Business transfers: as part of a merger, acquisition, financing, or sale of assets, subject to this policy.
• With your consent, or at your direction.

We do not sell personal information.

6. Cookies, analytics, and embedded video

Analytics. We use Google Analytics to understand how visitors use our website, such as which pages are viewed and for how long. Google Analytics uses cookies and similar technologies to collect information such as your IP address, device and browser type, and the pages you visit, and sends it to Google, which processes it for us. You can read how Google uses this information at policies.google.com/technologies/partner-sites.

Embedded video. Some pages include videos from a third-party video hosting service. When a page with a video loads or you play it, that service may collect information about your device and viewing under its own privacy policy.

No advertising tracking. We do not use advertising cookies or advertising pixels.

Tracking across sites. Our analytics provider and our video hosting service may collect information about your online activity over time and across different websites when you use our website.

Do Not Track. Our website does not currently respond to Do Not Track browser signals.

Your choices.

• Most browsers let you block or delete cookies in their settings. Some parts of the site may not work as well if you do.
• You can opt out of Google Analytics with Google’s browser add-on at tools.google.com/dlpage/gaoptout.

7. Security, retention, and your choices

Security. We use administrative, technical, and physical safeguards designed to protect personal information: encryption in transit and at rest, access controls, and US-based cloud hosting. No system is completely secure, and we cannot promise that information will never be accessed without permission.

Retention. We keep personal information only as long as we need it for the purposes in this policy, our contracts, and the law. When a health plan agreement ends, we return or destroy that plan’s protected health information where feasible, as the business associate agreement requires.

Your choices and rights.

• You can unsubscribe from our emails with the link in each email, or by contacting us.
• You can ask to see, correct, or delete personal information we hold about you as a website visitor, job applicant, or business contact by emailing chris@hineo.com. We will verify your request and respond within 30 days. We may keep information the law requires us to keep.
• Residents of some US states and of Canada may have additional rights under local law. Contact us and we will honor them as the law requires.
• You may also complain to the privacy regulator where you live.
• We will not treat you differently for using your privacy rights.

Health plan members should send requests about health information to their plan (see Section 4).

8. Children, location, changes, and contact

Children. Our website is not directed to children under 13, and we do not knowingly collect personal information from them through it. Information about dependents on a health plan is handled for the plan under HIPAA, as described in Section 4.

Where we process information. We store and process information in the United States, in US-based cloud data centers. If you contact us from outside the United States, your information will be transferred to and processed in the United States.

Changes to this policy. We will post any update on this page with a new effective date. For material changes, we will post a notice on our website before they take effect and, where we have your email address and the law requires it, tell you by email.

Contact us. Our Privacy Officer is Chris McGarrigle, Chief Technology Officer. Email chris@hineo.com, write to Hi Neo, Inc., Attn: Privacy Officer, 1111B S Governors Ave STE 37234, Dover, DE 19904, or call (833) 818-2369.

Effective date: October 19, 2026