Legal
Privacy Policy
Last Updated: June 15, 2026
Tiny Watermelon, LLC (“Tiny Watermelon,” “we,” “our,” or “us”) respects your privacy and is committed to protecting personal information entrusted to us. This Privacy Policy explains how information is collected, used, disclosed, stored, and protected when using the Watermelon platform and related services.
1. Company Information
Tiny Watermelon, LLC
13307 Cedarbrook Ave NE
Albuquerque, NM 87111
Email: hi@tinywatermelon.com
Website: https://tinywatermelon.com
2. Scope
This Privacy Policy applies to the Watermelon software platform, customer organizations, authorized users, providers using the platform, parents and guardians receiving appointment offers, and website visitors. This Privacy Policy does not apply to third-party websites or services.
3. HIPAA Notice
Watermelon serves healthcare and therapy organizations. When Tiny Watermelon receives, stores, transmits, or processes Protected Health Information (“PHI”) on behalf of a healthcare organization, Tiny Watermelon acts as a Business Associate under HIPAA.
In those situations, use and disclosure of PHI is governed by applicable law, HIPAA, and the applicable Business Associate Agreement. If a conflict exists between this Privacy Policy and HIPAA requirements, HIPAA controls.
4. Information We Collect
A. Customer Information
Organization name, contact names, email addresses, phone numbers, user roles, and authentication information.
B. Patient and Family Information
Customer organizations may store child names, parent or guardian names, addresses, contact information, appointment information, service authorization information, and scheduling information.
C. Provider Information
Provider names, disciplines, availability, schedule information, service regions, and commute zones.
D. Technical Information
IP addresses, browser information, device information, session information, authentication status, and audit log records.
5. Information We Do Not Collect
Watermelon is not intended to collect or store credit card information, payment card data, clinical notes, diagnoses, treatment records, therapy session notes, or insurance billing records. If such information is inadvertently uploaded, customers should contact us immediately.
6. How We Use Information
We use information to provide services, authenticate users, manage schedules, send appointment offers, deliver transactional communications, maintain security, monitor system performance, maintain audit records, and comply with legal obligations.
We do not sell personal information.
7. Email and Communications
Watermelon sends transactional communications only — magic link authentication emails, appointment notifications, service-related notices, and administrative notices. We do not send marketing emails through the platform. Platform emails may be sent from noreply@tinywatermelon.com.
8. Authentication
Watermelon uses passwordless authentication. Administrative and provider users may be required to complete multi-factor authentication using an authenticator application. Authentication information may include magic-link tokens, MFA verification status, session identifiers, and security logs.
9. Information Sharing
A. With Service Providers
We use service providers that support operation of the platform: Amazon Web Services (hosting, email delivery, and infrastructure), Neon (database services), and Cloudflare (DNS services). These providers may receive information necessary to perform services on our behalf.
B. With Customer Organizations
Information entered into Watermelon is accessible to authorized personnel of the applicable customer organization.
C. Legal Requirements
We may disclose information when required by law, court order, subpoena, or governmental request.
D. Business Transfers
Information may be transferred in connection with a merger, acquisition, financing, reorganization, or sale of assets.
10. Data Security
We implement commercially reasonable security measures including TLS encryption in transit, role-based access controls, multi-factor authentication, audit logging, session timeout controls, encrypted MFA secret storage, and secure cloud infrastructure. No method of transmission or storage can be guaranteed completely secure.
11. Data Retention
Information is retained while customer accounts remain active. Following termination, information may be retained for 30–90 days. Backup data may be retained for 30–180 days. Certain information may be retained longer where required by law.
12. Data Deletion
Subject to legal obligations and backup retention requirements, information will be deleted according to our retention practices following account termination. Covered Entities may request deletion of data through the contact information below.
13. International Users
Watermelon is intended for organizations located within the United States. Data is processed and stored within the United States.
14. Children
The platform is not intended for direct use by children. Children whose information is stored within the platform are patients of customer organizations. Any information relating to children is processed solely on behalf of customer organizations.
15. California and Other State Privacy Rights
Where applicable law grants privacy rights, individuals may have rights to request access, correction, or deletion, and to receive information about processing activities. Certain rights may be limited where HIPAA or other legal requirements apply. Requests may be submitted using the contact information below.
16. AI Services
Tiny Watermelon may use artificial intelligence tools to support business operations and platform development. Protected Health Information will not be disclosed to third-party AI providers except as expressly authorized, contractually permitted, and compliant with applicable law.
17. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes may be communicated through the platform, email, or other reasonable methods. Continued use of the Services after such changes constitutes acceptance of the updated Privacy Policy.
18. Contact Information
Privacy questions: hi@tinywatermelon.com
Tiny Watermelon, LLC
13307 Cedarbrook Ave NE
Albuquerque, NM 87111