Privacy Policy
Effective: August 19, 2026
Puente is a clinical communication and AI-assisted triage platform for pediatric clinics, operated by LearnedGeek LLC (Wisconsin, United States). This policy explains what data we collect, why, where it lives, and how you can request its deletion.
Who we are
Puente is the product name. LearnedGeek LLC is the entity operating the service. Under Peru's Law N.° 29733 (Personal Data Protection Law), Puente acts as data processor; the treating physician or clinic is the data controller.
What data we collect
- Patient data — phone number (primary identifier), the content of messages sent via WhatsApp, and any clinical information the patient or caregiver voluntarily shares (symptoms, child's age, medications, context). We do not request national ID, postal address, or payment information.
- Physician and clinic data — name, email, professional identifier, clinic's WhatsApp number, and the physician-patient assignment the clinic configures.
- Operational data — access logs, performance telemetry, physician decisions on each case (validation, correction, response sent), and audit of AI calls. Retained for two years per Law N.° 29733.
How data is processed
When a patient writes to their clinic's WhatsApp number, the message arrives at Puente. Our system applies structured triage questions calibrated to age and reported symptoms, and presents the prepared case to the treating physician. The AI does not diagnose or prescribe; it organizes context so the physician can decide.
Clinical reasoning uses Anthropic's Claude AI service. Messages are sent for inference and are not used to train models. The final decision and response to the patient are always issued by the human physician.
Where data is stored
- Primary storage: Microsoft Azure SQL Database, US-Central region (United States), encrypted at rest.
- Backups: Azure point-in-time restore + long-term retention, all within Azure US-Central.
- Operational telemetry: Azure Application Insights (US-Central).
Sub-processors
Puente relies on these providers to operate. Each processes data solely to provide its service to Puente:
- Microsoft Azure — hosting, database, telemetry, transactional email
- Twilio — WhatsApp messaging carrier (Business Solution Provider)
- Anthropic — AI inference for clinical reasoning
- Cloudflare — DNS and email routing (puente.health domain)
Your rights
Under Law N.° 29733 you have the right to:
- Request access to your personal data we hold.
- Request correction of inaccurate data.
- Request deletion of your data. We honor deletion requests within 30 days.
- Withdraw your consent by messaging STOP or BAJA to your clinic's WhatsApp number; the request is processed at the WhatsApp Business Platform level. You may also request deletion by email at hola@puente.health.
To exercise any of these rights, write to us at hola@puente.health.
Retention
Messages and clinical decisions are retained for two years, per Law N.° 29733 audit requirements. Operational logs and telemetry for one year. On deletion request, we remove data within 30 days, except where law requires longer retention (for example, specific regulatory orders).
Security
- Encryption at rest (Azure SQL TDE) and in transit (TLS 1.2+).
- Physician access limited to patients assigned to their clinic.
- Authentication via Microsoft Entra ID for clinical staff.
- Complete audit trail of patient data access.
Minors
Puente is used in pediatric clinics; most patients are minors. Parents, guardians, or caregivers are the ones writing on behalf of the minor. We do not solicit or require additional information about minors beyond what the responsible adult voluntarily shares for the clinical consultation.
International transfers
Data is processed in the United States (Azure US-Central, Anthropic US, Twilio US). This transfer occurs under the patient's consent to initiate contact with their clinic via a US-hosted platform, within the framework of Law N.° 29733.
Changes to this policy
We may update this policy as the service or legal requirements evolve. The effective date above reflects the last material update. Substantive changes will be notified to physician users by email.
Contact
- Data access, correction, or deletion requests: hola@puente.health
- Questions about this policy or privacy incidents: abuse@puente.health
- Operating entity postal address: LearnedGeek LLC, N61W35661 Bayshore Cir, Oconomowoc, WI 53066, United States.