Privacy Policy

1. Introduction

Knit Health, Inc. ("the Company," "we," "us," or "our") operates beknithealth.com (the "Service"). Knit Health is an AI-powered operations-intelligence platform built for hospital scheduling and staffing leadership. This Privacy Policy describes what information we collect through the Service, how we use it, and your choices. It governs information collected via beknithealth.com and through direct communications with us.

We are based at 1033 Demonbreun Street, Suite 300, Nashville, TN 37203. You may reach us at [email protected].

2. Information We Collect

2.1 Information You Provide

We collect information you submit directly, including:

• Contact details (name, title, email, phone) when you fill out our demo request form, contact form, or subscribe to updates;
• Institutional information you share (hospital or health system name, number of clinical units, scheduling context);
• The content of messages you send us;
• Account credentials when you register for platform access.

2.2 Operational Data Processed Through the Platform

Knit Health's platform is an operations-intelligence layer for hospital scheduling and staffing. When a hospital or health system uses the platform, the Company processes operational workforce data on behalf of that client organization, which may include scheduling exports, census admission-discharge-transfer feeds, and historical shift patterns. This data is processed solely to generate staffing coverage forecasts, gap alerts, and operational recommendations for the client.

This data does not include patient clinical records, diagnoses, treatment information, or individually identifiable health information for patient-care purposes. Hospital clients remain responsible for their own HIPAA obligations. The Company is prepared to enter into a Business Associate Agreement ("BAA") with clients under the Health System plan where the data shared qualifies under applicable HIPAA definitions.

2.3 Information Collected Automatically

When you visit beknithealth.com, we automatically collect limited technical information:

• IP address and approximate location (city/region level);
• Browser type, operating system, device class;
• Pages visited, referring URLs, time on page;
• Cookie and similar identifiers (see Section 5).

2.4 We Do Not Knowingly Collect Children's Data

beknithealth.com is directed to healthcare operations professionals and is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided information to us, contact [email protected] and we will delete it.

3. How We Use Information

We use the information we collect to:

• Respond to demo requests and sales inquiries from hospital operations and nursing leadership teams;
• Provide and improve the Knit Health staffing-intelligence platform;
• Deliver scheduling coverage forecasts, gap alerts, and recommended actions to authorized platform users;
• Send service updates and, where required by applicable state law with your consent, marketing communications;
• Detect, investigate, and prevent fraud or abuse;
• Comply with legal obligations.

We do not use hospital operational workforce data submitted through the platform to train our models without explicit written agreement from the client organization. We do not sell personal information for monetary value. Where applicable state law treats certain advertising arrangements as a "sale" or "share," see your state's section below.

4. Sharing of Information

We share personal information only with:

• Service providers acting on our behalf (hosting, email delivery, analytics) under contractual confidentiality terms;
• The authorized personnel at the client hospital or health system in connection with that client's platform use;
• Authorities, when required by law or to protect rights, safety, or property;
• A successor entity in the event of a merger, acquisition, or asset sale, subject to this Policy.

We do not sell personal information to third parties.

5. Cookies and Tracking

We use cookies and similar technologies to operate the site, remember preferences, and measure visitor engagement with our product pages and demo request experience. For details and choices, see our Cookie Policy.

6. Data Retention

We retain personal information only as long as needed for the purposes described here, to comply with legal or accounting obligations, and to resolve disputes. Marketing-list contacts who have not engaged are purged after 24 months. Server access logs are retained 90 days, then aggregated. Operational workforce data processed on behalf of hospital clients is retained per the terms of the applicable client agreement and deleted upon contract termination or on request.

7. Security

We use administrative, technical, and physical safeguards designed to protect personal information, including TLS encryption in transit, restricted-access databases, and least-privilege access controls. Our data handling practices are HIPAA-aligned for clients with applicable data sharing; we are available to execute a BAA for Health System plan clients where required. No system is perfectly secure; we cannot guarantee absolute security.

8. Your General Rights

Depending on your jurisdiction, you may have rights including access, correction, deletion, and the ability to limit certain processing. To make a request, email [email protected]. We will respond within the timeframe required by applicable law, including US Federal and Tennessee general law.

9. Tennessee Residents (TIPA)

Under the Tennessee Information Protection Act ("TIPA"), Tennessee residents have the rights described below.

9.1 Your TIPA Rights

• Right to Confirm and Access personal data we process about you.
• Right to Correct inaccuracies, taking into account the nature of the data and processing purposes.
• Right to Delete personal data we have collected from or about you.
• Right to Data Portability in a portable format where technically feasible.
• Right to Opt Out of targeted advertising, sale, and profiling for significant decisions.

9.2 How to Exercise

Email [email protected]. We respond within 45 days; one 45-day extension is available with notice.

9.3 Appeal

You may appeal a denial by replying to our response. Unresolved appeals may be reported to the Tennessee Attorney General.

9.4 California Visitors

If you are a California resident, you may also exercise rights under the California Consumer Privacy Act ("CCPA") and California Privacy Rights Act ("CPRA"), including the right to know, the right to delete, the right to correct, and the right to opt out of sale or sharing. We do not sell personal information and do not "share" personal information for cross-context behavioral advertising. To submit a CCPA/CPRA request, email [email protected] with the subject line "California Privacy Request."

10. Changes to This Policy

We may update this Policy from time to time. Material changes will be reflected by a new "Last updated" date and, where appropriate, a notice on the Service.

11. Contact

Questions, requests, or complaints can be sent to: