Hawkeye Health Privacy Policy

Last Updated: September 11, 2026

1. Introduction

Hawkeye Health, LLC (“Hawkeye Health,” “we,” “our,” or “us”) respects your privacy and is committed to protecting the personal information you provide to us.

Hawkeye Health operates HealthDesk, a digital platform that enables organizations to provide health navigation, member engagement, communications, education, care coordination, and related support services to their members, patients, participants, or other users.

This Privacy Policy explains how Hawkeye Health collects, uses, discloses, retains, and protects information in connection with the HealthDesk mobile application, website, and related services (collectively, the “Services”).

By using the Services, you acknowledge that you have read and understood this Privacy Policy. Where applicable law requires your consent to a particular use of your information, we will obtain that consent separately.

When you access HealthDesk through an organization, such as a nonprofit, professional association, healthcare organization, payer, or other partner organization (“Partner Organization”), that organization may also have its own privacy policies and practices that apply to information it provides to or collects through the Services.

Hawkeye Health does not sell, rent, share, or otherwise provide your mobile telephone number, mobile information, SMS opt-in information, or messaging consent information to third parties or affiliates for their own marketing or promotional purposes.

2. Information We Collect

The information we collect depends on how you use the Services and the HealthDesk program provided by your Partner Organization.

Personal Information

We may collect information that identifies, relates to, or can reasonably be associated with an individual, including:

Name
Email address
Mobile telephone number
Account credentials and authentication information
Organization or program affiliation
Mailing or other contact information
User preferences
Information provided during account registration or profile creation

Health and Support Information

Depending on the Services provided by a Partner Organization, you may voluntarily provide information relating to your health, disability, injury, treatment journey, support needs, or care coordination needs.

This may include:

Health or disability information
Injury or illness information
Care coordination information
Health navigation requests
Support needs
Information about resources or services you are seeking
Information communicated to navigators, support teams, or other authorized personnel

We use this information to provide the Services and support the programs offered through HealthDesk.

Communications

We may collect information contained in or associated with communications you have with us or through the Services, including:

Questions or requests submitted through HealthDesk
Communications with navigators or support personnel
Customer support inquiries
Feedback
Survey responses
Messages exchanged through the platform
Information relating to your participation in programs or services

Device and Usage Information

When you use the Services, we may automatically collect certain technical and usage information, including:

Device type
Operating system and version
Browser type
Application version
IP address
Device identifiers
Log information
Date and time of access
Pages, screens, or features accessed
General usage and interaction information
Error and diagnostic information

We may use this information to operate, secure, troubleshoot, analyze, and improve the Services.

Cookies and Similar Technologies

We may use cookies, software development kits (SDKs), pixels, log files, and similar technologies to operate the Services, maintain account functionality, understand usage, improve performance, support security, and analyze how users interact with the Services.

The specific technologies used may vary depending on the Services and device you use.

3. How We Use Information

Hawkeye Health may use information we collect to:

Provide, operate, and maintain the Services
Create and manage user accounts
Provide health navigation and support tools
Facilitate care coordination and program participation
Connect users with resources, organizations, providers, or support services
Deliver communications requested or authorized by users or Partner Organizations
Personalize and improve the user experience
Respond to questions and support requests
Monitor and improve the functionality, reliability, and performance of the Services
Detect, investigate, and prevent fraud, abuse, security incidents, and unauthorized activity
Maintain the security of our systems and Services
Perform analytics and generate aggregated or de-identified insights
Comply with applicable laws, regulations, legal processes, and contractual obligations
Establish, exercise, or defend legal claims
Protect the rights, safety, and security of users, Hawkeye Health, and others
Fulfill other purposes disclosed at the time information is collected

We may also use aggregated or de-identified information for legitimate business purposes, including analytics, research, reporting, and improving the Services, provided that the information is no longer reasonably capable of identifying an individual.

4. How We Share Information

Hawkeye Health does not sell personal information.

We may disclose information in the following circumstances.

Partner Organizations

If you access HealthDesk through a Partner Organization, we may provide information to that organization as necessary to operate the program or Services it provides through HealthDesk.

Depending on the program, this may include information relating to:

Program participation
Account status
Engagement with Services
Communications
Health navigation or support requests
Completion of educational or other program activities
Other information necessary to provide or administer the program

The Partner Organization may have its own privacy policy governing its collection and use of information.

Service Providers

We may share information with third-party service providers that perform services on our behalf, such as:

Cloud hosting and infrastructure providers
Database and storage providers
Authentication providers
Communication and messaging providers
Email and SMS delivery providers
Analytics providers
Customer support providers
Security and fraud prevention providers
Professional advisors
Other vendors necessary to operate and maintain the Services

These service providers are authorized to process information only as necessary to provide services to Hawkeye Health or as otherwise permitted by applicable agreements and law.

Legal Requirements and Protection

We may disclose information when we reasonably believe disclosure is necessary to:

Comply with applicable law, regulation, subpoena, court order, or other legal process
Respond to requests from governmental or regulatory authorities
Protect the rights, property, or safety of Hawkeye Health, our users, or others
Investigate fraud, abuse, security incidents, or violations of our agreements
Enforce our terms, policies, or contractual rights

Business Transactions

If Hawkeye Health is involved in a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar corporate transaction, personal information may be transferred as part of that transaction, subject to applicable law.

5. Text Messaging and SMS Communications

Hawkeye Health and organizations that use the HealthDesk platform may offer text messaging (SMS) communications to users who affirmatively opt in to receive them. Hawkeye Health does not sell, rent, share, or otherwise provide your mobile telephone number, mobile information, SMS opt-in information, or messaging consent information to third parties or affiliates for their own marketing or promotional purposes.

Information Collected for Text Messaging

When you opt in to receive text messages, we may collect and process information necessary to provide and manage those communications, including:

Your mobile telephone number
SMS consent and opt-in status
Messaging preferences
Records of messages sent and received
Information relating to your interaction with SMS communications

How We Use Your Information

Your mobile telephone number and related messaging information may be used to send communications that you have requested or authorized, including:

Appointment and event reminders
Program and service notifications
Administrative communications
Educational or informational communications
Notifications from a Partner Organization
Other communications consistent with the messaging program to which you have opted in

Message frequency may vary depending on your participation in a HealthDesk program and your communication preferences. Message and data rates may apply depending on your mobile carrier and plan.

Consent and Opt-Out

By providing your mobile telephone number and affirmatively opting in to receive text messages, you consent to receive SMS communications from Hawkeye Health and/or the organization providing services through the HealthDesk platform.

Your consent to receive text messages is not a condition of purchasing goods or services.

You may opt out of SMS communications at any time by replying STOP to a HealthDesk text message. After you send STOP, you may receive a confirmation message, and you will no longer receive messages from that messaging program unless you subsequently provide consent to receive them again.

For assistance, reply HELP to a HealthDesk text message or contact the organization providing your HealthDesk services. You may also contact Hawkeye Health using the contact information provided in this Privacy Policy.

Mobile Telephone Numbers and SMS Consent Information

Hawkeye Health does not sell or rent mobile telephone numbers.

Hawkeye Health does not sell, rent, or share mobile telephone numbers or SMS opt-in information with third parties for their own independent marketing or promotional purposes.

Hawkeye Health may use third-party service providers to transmit and deliver SMS communications on our behalf. These providers may process mobile telephone numbers and other information necessary to provide messaging services. Such providers are authorized to use this information only as necessary to provide the contracted services and are not authorized to use mobile telephone numbers or SMS consent information for their own independent marketing purposes.

SMS and Sensitive Information

SMS messages may contain information relating to your participation in a HealthDesk program. Because text messages may be displayed on your mobile device or accessible to others who have access to that device, you should use appropriate discretion when viewing SMS communications.

How Users Opt In

Depending on the HealthDesk program, users may be invited to provide a mobile telephone number during registration and affirmatively check a consent box authorizing SMS communications.

The specific Partner Organization providing the HealthDesk program may determine which types of communications are available and the applicable messaging preferences.

6. Health Information and HIPAA

Hawkeye Health provides technology and related services and is not itself a healthcare provider or health plan.

Certain information processed through HealthDesk may constitute health information or other sensitive information. Whether information is subject to the Health Insurance Portability and Accountability Act (“HIPAA”) depends on the circumstances in which the information is collected and the parties involved.

Where Hawkeye Health provides services to a HIPAA-covered entity and receives Protected Health Information (“PHI”) on behalf of that entity, Hawkeye Health may act as a Business Associate under applicable HIPAA requirements and a Business Associate Agreement.

In those circumstances:

The use and disclosure of PHI may be governed by the applicable Business Associate Agreement
Additional privacy and security requirements may apply
The applicable healthcare organization may have its own Notice of Privacy Practices

If you access HealthDesk through a healthcare organization, you should also review that organization's privacy practices and notices.

Not all information processed through HealthDesk is necessarily PHI or subject to HIPAA.

7. Data Security

Hawkeye Health maintains administrative, technical, and physical safeguards designed to protect information against unauthorized access, use, disclosure, alteration, or destruction.

Depending on the Services and information involved, safeguards may include:

Encryption of data in transit
Secure cloud infrastructure
Authentication and access controls
Role-based access
Security monitoring
Logging and auditing
Data backup and recovery measures
Administrative security policies and procedures

No method of electronic transmission, storage, or security can be guaranteed to be completely secure. Accordingly, while we work to protect information, we cannot guarantee absolute security.

8. Data Retention

Hawkeye Health retains personal information for only as long as reasonably necessary for the purposes described in this Privacy Policy, including to:

Provide and maintain the Services
Support Partner Organization programs
Fulfill contractual obligations
Maintain business and financial records
Comply with legal, regulatory, and contractual requirements
Resolve disputes
Establish, exercise, or defend legal claims
Enforce agreements and policies
Prevent fraud and maintain security

Retention periods may vary depending on the type of information, the nature of the Services, contractual requirements, and applicable law.

When information is no longer required, Hawkeye Health may delete, anonymize, de-identify, or securely dispose of it in accordance with applicable requirements.

9. Your Privacy Rights and Choices

Depending on where you live and applicable law, you may have certain rights regarding your personal information.

These rights may include the ability to:

Request access to personal information we maintain about you
Request correction of inaccurate information
Request deletion of certain personal information
Request information about how your personal information is collected and used
Restrict or object to certain processing activities
Opt out of certain communications
Withdraw consent where processing is based on consent
Appeal certain privacy decisions, where applicable

Some rights may be limited by applicable law or may not apply to all information or circumstances.

If you access HealthDesk through a Partner Organization, that organization may control certain information and may need to process your request.

To submit a privacy request, contact us using the information provided in Section 14.

We may take reasonable steps to verify your identity before completing certain requests.

10. Children's Privacy

The Services are not generally intended for children under 13 unless the applicable HealthDesk program is specifically designed to support children and appropriate parental or guardian authorization has been obtained.

Hawkeye Health does not knowingly collect personal information directly from children under 13 without appropriate authorization where required by applicable law.

Where a HealthDesk program involves children, a parent, guardian, healthcare organization, nonprofit organization, or other authorized organization may provide or manage information on the child's behalf.

If you believe that a child has provided personal information to Hawkeye Health without appropriate authorization, please contact us using the information below.

11. Third-Party Services and Links

The Services may contain links to websites, applications, resources, providers, or other services operated by third parties.

Hawkeye Health is not responsible for the privacy practices, security, content, or policies of third parties that are not controlled by Hawkeye Health.

We encourage you to review the privacy policies of third-party services before providing them with personal information.

12. De-Identified and Aggregated Information

Hawkeye Health may create aggregated, statistical, or de-identified information from information collected through the Services.

Such information may be used for purposes including:

Understanding program participation and engagement
Measuring and improving Services
Developing new features
Reporting and analytics
Research and evaluation
Business and operational analysis

We will not attempt to re-identify information that has been de-identified except as permitted by applicable law.

13. Changes to This Privacy Policy

Hawkeye Health may update this Privacy Policy from time to time to reflect changes in our Services, technology, business practices, legal requirements, or other circumstances.

When we make changes, we will update the “Last Updated” date at the top of this Privacy Policy.

Where required by applicable law, we will provide additional notice or obtain consent before implementing material changes.

14. Contact Us

If you have questions about this Privacy Policy, our privacy practices, or your personal information, please contact us:

Hawkeye Health, LLC
Email: contact@hawkeyehealth.io
Website: www.hawkeyehealth.io

For questions regarding a particular HealthDesk program, you may also contact the organization that provided you access to HealthDesk.

15. California Privacy Rights

If you are a California resident, California law may provide you with additional rights regarding your personal information, subject to applicable exceptions and limitations.

Depending on the circumstances, these rights may include rights to:

Know or access certain personal information collected about you
Request deletion of certain personal information
Request correction of inaccurate personal information
Opt out of certain uses or disclosures where applicable
Receive equal treatment for exercising applicable privacy rights

Hawkeye Health does not sell personal information or share personal information for cross-context behavioral advertising as those terms may be defined under applicable California privacy laws.

California residents may submit privacy requests using the contact information provided above.

We may need to verify your identity before responding to a request. We will respond within the time periods required by applicable law.

16. Additional Disclosures

This Privacy Policy is intended to provide a general description of Hawkeye Health's privacy practices.

Depending on the HealthDesk program, Partner Organization, applicable law, contractual requirements, or nature of the Services, additional privacy notices, consent disclosures, terms, or other information may apply.

Where a Partner Organization provides its own privacy notice or determines the purposes for which information is collected and used, that organization's privacy practices may apply in addition to this Privacy Policy.