PSYCKES Privacy Statement

Thank you for visiting the Psychiatric Services and Clinical Knowledge Enhancement System (PSYCKES) for mobile devices developed by the NYS Office of Mental Health. This App integrates Medicaid claims, medical records, and multiple health-related data into a digestible format for NYS providers to support data-driven clinical decision-making, care coordination, and quality improvement. As used herein, "we" refers to NYS OMH and the software developers with whom it contracts to provide the App.
This privacy statement describes what information NYS OMH may gather, use or disclose about users and governs usage of the PSYCKES App. Please read this document carefully before you access and use the App.
This privacy statement applies to:

• Information we collect about users in the PSYCKES App
• How we use the information
• Choices users have about how we collect and use information

This privacy statement does not apply to:

• Privacy practices associated with any activities done outside of your use of this App
• Products and services not available or enabled through this App

Information We Collect in the NYS OMH PSYCKES Application

You provide your account information voluntarily when you submit verification documentation through the PSYCKES Application. "Account information" refers to login credentials, device and usage data. During your session with the PSYCKES application, you may enter client identifying information. "Client information" refers to personally identifiable information such as name, address, date of birth, Medicaid ID, and/or social security number, which alone, or when combined, may be used to identify individuals you serve. The account information and client information that PSYCKES collects is used only for authorized purposes.
PSYCKES safeguards the account information and client information it receives with operational, administrative, technical, and physical safeguards to prevent unauthorized or inappropriate access, use, or disclosure. Policies to protect the confidentiality of personal information are based on applicable federal and state law.

How We Use and Disclose the Information

PSYCKES uses account information it receives from registrants for reasons including:

• To facilitate authentication and otherwise manage user accounts. We may process your information so you can log in to your account, as well as keep your account in working order.
• To respond to user inquiries/offer support to users. We may process your information to respond to your inquiries and solve any potential issues you might have with the requested service.
• To send administrative information to you. We may process your information to send you details about our products and services, changes to our terms and policies, and other similar information

The collection of information through the PSYCKES App and the disclosure of that information are subject to applicable law, including the Health Insurance Portability and Accountability Act (HIPAA).To Learn more about Health Information Privacy, visit HIPAA for Individuals | HHS.gov
PSYCKES does not share or sell your personal information with unaffiliated third parties.

Application Time Out

For security purposes, your session is set to end after 15 minutes of user inactivity. When you are actively using the Application, you will receive a session timeout warning after 14 minutes of inactivity, allowing you to either continue your session or logout. If you do not make a selection, your session will end. If the Application is running in the background, you will be logged out after 15 minutes of inactivity.

Information We Retain

We retain your login credentials when you establish a login session with the PSYCKES Application. This information is retained for the duration of the login session and is transmitted via API and retained for 15 minutes.

Location Data

This Application does not collect geolocation information.

Security

PSYCKES safeguards the account information and client information it receives with operational, administrative, technical, and physical safeguards to prevent unauthorized or inappropriate access, use, or disclosure. Policies to protect the confidentiality of account information and client information are based on applicable federal and state law.
Users are granted access to the PSYCKES-Medicaid application by their organization's designated Security Managers. The Security Managers are responsible for reviewing access requests, verifying a user's information (i.e., name, title, email address, current user ID for other OMH applications, if applicable), determining whether an individual's job responsibilities warrant access to the application, and maintaining compliance with their internal security protocols.
To protect users connecting to the App, we've implemented security controls which include authentication of the provider mobile application, encryption, as well as monitoring and auditing of App activities.

We have implemented these safeguards as part of our ongoing commitment to protecting account and client information. However, it is important to note that no application or system is entirely secure, and the potential for data breaches cannot be completely eliminated.

Children

We are committed to complying with the Children's Online Privacy Protection Act. This Application is not meant for use by children under 18 years of age.

Reviewing & Updating Your Account Information

You can provide and update your account information in the User Role Profile available in the 'Settings' section within both the PSYCKES web and mobile applications.

Changes to this Privacy Statement

We will occasionally update this privacy statement. When we do, we will revise the "effective date" at the top of the privacy statement. Your continued use of the Application after we have notified you of changes as described above constitutes your acceptance of the changes.

How to Contact Us

If you have any questions or concerns regarding the PSYCKES mobile app,  please contact the PSYCKES Team.