Legal

Privacy Policy

What we collect on this website, why we collect it, and the choices you have.

Effective date: October 21, 2026

1. Who we are

AMAH ("AMAH", "we", "us", or "our") makes electronic health record software for medical aesthetics practices. This policy explains how we handle personal information collected through our marketing website at amahas.app.

You can reach us about anything in this policy at admin@amahas.app.

2. What this policy covers

This policy covers the amahas.app marketing website, including the contact form and the event survey we use at trade shows, and the emails and text messages we send as a result.

It does not cover patient information or other data that practices enter into the AMAH EHR platform. That information is governed by our agreements with each customer practice, including a Business Associate Agreement where HIPAA applies. See our HIPAA page for more.

3. Information we collect

Contact form. When you use the form on our contact page, we collect your first and last name, work email, practice or company name, the reason you are reaching out, and your message.

Event survey. At trade shows and events we may ask you to fill out a short survey on an AMAH tablet or on your own phone through a QR code. It asks for your name, practice name, email, and role, and optionally your mobile number, practice size, the software you use today and how you feel about it, your timeline for making a change, and your role in that decision. A second, optional screen asks about your biggest day-to-day frustrations, what would keep you from switching, the tools you need to connect to, features you use, how long charting takes, your comfort with AI-drafted notes, what you spend on software, your state, and anything else you want to tell us. You can skip any optional question.

The survey also records which choices you made about marketing email, text messages, and joining the Founder's Circle. When you opt in to email or texts, we store the exact wording you agreed to and the time you agreed. The survey is about your practice only. It never asks about patients or patient information.

To keep survey entries from being lost when the event Wi-Fi drops, your answers are held temporarily in the browser storage of the device you used and sent to us as soon as a connection is available. They are cleared from the device after they are sent.

Technical information. Like any website, our hosting provider receives standard request information when you visit, such as your IP address, browser type, and the page you requested, so it can deliver and protect the site. The survey also uses your IP address briefly to limit repeated automated submissions.

How you found us. If you arrive from an ad or a link that includes a campaign tag (such as src or utm_source), we keep that tag in your browser for the rest of your visit and send it with the contact form, so we know which ad or link brought you. It is cleared when you close the tab.

Advertising and measurement tags. We use the Meta Pixel and may use the Google tag to measure how well our ads work. When you visit, these tags let Meta and Google set cookies and receive information such as the pages you view, your IP address, your browser and device, and the ad that brought you. When you submit the contact form, we tell them only that a form was submitted, the reason you chose, and the campaign tag. We do not send them your name, email, practice, or message, and we have turned off Meta's automatic matching of form fields. Meta and Google handle this information under their own privacy policies.

Our fonts are served from our own site, so loading a page does not send your information to a font provider.

4. How we use it

To respond to your inquiry, schedule demos, and follow up about AMAH.

To send you a confirmation when you contact us.

To send marketing email or text messages, but only if you opted in to them.

To manage the Founder's Circle if you asked to join.

To understand what practices need so we can decide what to build.

To measure which ads and links bring visitors to the site, and to show our ads to people who have visited it.

To keep the website working and to protect it from spam and abuse.

5. Text messages

We only send text messages to people who give us their mobile number and check the separate, unchecked "OK to text me" box. We keep a record of that consent, including the wording and the time.

Message frequency varies. Message and data rates may apply. Reply STOP at any time to stop receiving texts, or reply HELP for help. You can also email us to opt out.

Agreeing to receive texts is not a condition of buying anything from AMAH.

We do not sell, rent, or share your mobile number or your text opt-in with third parties for their own marketing purposes.

6. Marketing email

We only add you to marketing email if you opt in. Every marketing email includes an unsubscribe link, and you can also ask us to stop by email. We may still send you messages that relate directly to a request you made, like a reply to your inquiry.

7. How we share information

We do not sell your personal information.

Service providers. We share information with companies that help us run the website and follow up with you, such as our website host (Vercel), our email delivery provider (Resend), and the database and data storage services that hold survey and lead records. We share only what they need to provide those services.

Advertising platforms. As described in section 3, Meta and Google receive information about your visit through their tags so we can measure and improve our ads. Depending on where you live, state law may treat this as "sharing" for advertising or as "targeted advertising." You can opt out as described in section 10.

Legal requirements. We may disclose information when we believe in good faith that the law, a court order, or legal process requires it, or to protect the rights, property, or safety of AMAH, our users, or others.

Business transfers. If AMAH is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction. We will ask the recipient to honor this policy.

8. How long we keep it

We keep contact and survey information for as long as we need it to follow up with you and for the purposes described above, or until you ask us to delete it, unless we need to keep it longer to meet a legal obligation. We keep records of your email and text consent choices for as long as we are in contact with you and for a reasonable period afterward, so we can show you agreed and honor any opt-out.

9. Security

This website is served over HTTPS, and we limit access to lead and survey records to the people on our team who need them. No method of transmission or storage is perfectly secure, so we cannot guarantee absolute security, but we take reasonable steps to protect what you share with us.

10. Your choices and rights

You can ask us to show you the personal information we have about you, correct it, or delete it by emailing admin@amahas.app. We may need to confirm your identity before we act on a request.

You can opt out of marketing email with the unsubscribe link in any marketing email, and out of texts by replying STOP.

If your browser sends a Global Privacy Control signal, we treat it as an opt-out and do not load the Meta or Google tags. You can also limit advertising tags by blocking third-party cookies in your browser, by adjusting your ad preferences in your Meta and Google account settings, or by emailing admin@amahas.app to opt out of the use of your information for advertising.

Depending on where you live, state privacy laws in the United States may give you additional rights over your personal information. If they apply to you, contact us and we will respond as those laws require. We will not treat you differently for making a request.

11. Children

This website is meant for people who work in or run medical aesthetics practices. It is not directed to children under 16, and we do not knowingly collect personal information from children under 16. If you believe a child has given us information, contact us and we will delete it.

12. Changes to this policy

This policy was last updated on October 21, 2026. We may update it as the website and our practices change. When we do, we will post the new version here and update the date. If a change materially affects how we use information you already gave us, we will ask for your consent where the law requires it.

13. Contact us

Questions, requests, or concerns about privacy? Email admin@amahas.app.