Privacy Policy

Last updated: September 22, 2026

1. Introduction

Electrome Corporation ("Electrome," "we," "us," or "our") operates the ActiPatch™ Bioelectric Pain Management Platform at painkiller.care and related subdomains (mycare.painkiller.care, patient.painkiller.care, invest.electrome.com), the ActiPatch™ web and mobile applications, and the supporting cloud services (collectively, the "Services"). This Privacy Policy describes how we collect, use, disclose, and protect information when you interact with our Services or purchase our products.

Our Services support both over-the-counter (OTC) and prescription ("Rx") FDA-cleared Pulsed Shortwave Therapy (PSWT) devices, including ActiPatch® over-the-counter (OTC) and RecoveryRx® (Rx), along with the ActiPatch™ Patient and Provider portals.

2. Information We Collect

Account & Contact Information

  • Name, email address, phone, and shipping/billing address
  • Account credentials and authentication factors
  • Role-based profile data (consumer, patient, provider, retailer, affiliate, investor)
  • Communications you send to support, sales, or clinical staff

Health Information (PHI)

When you use our clinical services (Patient Portal, Provider portal) or when a healthcare provider uses our Services on your behalf, we may collect Protected Health Information ("PHI") subject to HIPAA. Self-service consumer wellness data collected through the self-service tier of the Patient portal (device metrics, exercise logs, self-reported pain scores) is classified as Personally Identifiable Information ("PII") and is not PHI unless and until the user completes clinical onboarding (HIPAA authorization) and the data is associated with provider-directed use of a prescription device. PHI includes:

  • Self-reported pain levels, location, frequency, and symptom history
  • PSWT device usage data from ActiPatch® and RecoveryRx® sessions
  • For Rx services: prescription details, diagnoses (ICD-10), and care-team notes
  • Provider notes, care plans, and outcomes data
  • Insurance and payer information when applicable

Commerce Data

  • Orders, returns, and warranty registrations for ActiPatch® and RecoveryRx®
  • Payment method tokens (we do not store full card numbers; payments are processed by Stripe and Shopify)

Automatically Collected Information

  • Device, browser, OS, and IP address
  • Usage logs, page views, and feature interactions
  • Cookies and similar technologies (see Section 8)

Full Data Room Security Monitoring

When you use the full data room at electrome.com/data-room-full, we record visits and requests for folders, document previews, and downloads for security monitoring. These records include your IP address, request time, browser information, and the requested document or folder. An email address is included only when available from a verified signed-in session. An IP address does not establish a visitor's identity.

Access to this activity dashboard is restricted to the two authorized company owners. This monitoring does not track visits made directly through Google Drive links.

3. How We Use Your Information

  • Fulfill device orders, ship products, and process returns or warranty claims
  • Verify clinician licensure and prescription eligibility for RecoveryRx®
  • Personalize PSWT therapy guidance, reminders, and outcome tracking
  • Provide AI-assisted concierge support (only when you initiate it while signed in)
  • Communicate appointment, shipment, and clinical follow-up notifications
  • Comply with FDA, HIPAA, state pharmacy, and consumer-protection requirements
  • Conduct de-identified research to improve PSWT outcomes (consistent with HIPAA §164.514)

4. How We Share Information

We do not sell your personal information or PHI. We share information only as needed to provide the Services:

  • Healthcare Providers: If you receive care through a provider using our portal or a RecoveryRx® prescriber, your care team can access your relevant PHI.
  • Pharmacy & Fulfillment Partners: Order, shipment, and prescription routing for RecoveryRx® and RecoveryRx®.
  • Service Providers: Hosting, analytics, payments (Stripe, Shopify), email/SMS, calendaring, and customer-support vendors operating under written confidentiality and (where PHI is involved) Business Associate Agreements.
  • Legal & Safety: When required by law, subpoena, or to investigate fraud, safety, or violations of our Terms.
  • Business Transfers: In connection with a merger, acquisition, or sale of assets, with notice consistent with applicable law.

5. Data Security

We protect information using AES-256 encryption at rest, TLS 1.2+ in transit, role-based access controls, audit logging, and least-privilege production access. Detailed safeguards are described in our HIPAA Compliance page.

6. Your Privacy Rights

Depending on your jurisdiction (including California CCPA/CPRA, Virginia, Colorado, and similar state laws), you may have the right to:

  • Access and receive a copy of your data
  • Correct inaccurate information
  • Request deletion of your account and associated data, subject to legal retention requirements for medical records
  • Opt out of marketing communications at any time
  • Object to or restrict certain processing
  • Appeal a denial of any request

To exercise these rights, contact our Privacy team.

7. Data Retention

We retain account and commerce data for as long as your account is active. PHI and clinical records are retained for the longer of (a) seven (7) years from last service date, or (b) any longer period required by applicable state medical-records or pharmacy law. De-identified outcomes data may be retained indefinitely.

Full data room security activity logs use a 90-day retention period. Automated cleanup runs daily while the production service is running and deletes records older than 90 days; deletion may occur after the cutoff when the service resumes following an interruption. This period applies to the activity logs, not to the documents in the data room.

8. Cookies & Tracking

We use strictly necessary cookies for authentication and cart functionality, and limited analytics cookies to improve the Services. We do not use cross-site behavioral advertising trackers on PHI-bearing pages. You can manage cookies through your browser settings.

9. Children's Privacy

The ActiPatch® platform is intended for individuals 18 and older. RecoveryRx® may be prescribed to minors only through a licensed clinician and a parent/guardian-managed account. We do not knowingly collect information directly from children under 13.

10. International Users

The Services are operated from the United States. If you access them from outside the U.S., you consent to processing in the U.S. under U.S. law.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email and through the platform. The "Last updated" date above reflects the most recent revision.

12. Contact Us

Electrome Corporation
Privacy Officer
200 N Vineyard Blvd
Ste. A325 # 5743
Honolulu, HI 96817
Phone: (808) 300-5703
Privacy: contact our Privacy team · General: contact us