KOTA Privacy Policy
Updated 5 January, 2026
Introduction
This Privacy Policy explains how Ankota, LLC (“Ankota,” “KOTA,” “we,” “us”) collects, uses, discloses, and protects personal and health-related information through KOTA — our companion and safety-monitoring service.
It applies to individuals, families, caregivers, home care agencies, Financial Management Services (FMS) organizations, and other partners that use or administer KOTA.
-
HIPAA Compliance and Business Associate Agreements
Ankota, LLC maintains administrative, physical, and technical safeguards consistent with the HIPAA Privacy, Security, and Breach Notification Rules (45 CFR Parts 160 and 164).
When KOTA is used by or on behalf of a Covered Entity (such as a home health, FMS, or HCBS provider), Ankota acts as a Business Associate under HIPAA and will execute a Business Associate Agreement (BAA) with that entity prior to service activation.
The BAA defines roles, responsibilities, and permitted uses of Protected Health Information (PHI). Ankota complies with all applicable HIPAA requirements whether acting under a formal BAA or providing services directly to private individuals.
All employees and contractors with access to PHI are trained in HIPAA requirements and subject to confidentiality agreements and access controls.
-
CMS PERS and Medicaid/HCBS Context
Ankota, LLC maintains administrative, physical, and technical safeguards consistent with the HIPAA Privacy, Security, and Breach Notification Rules (45 CFR Parts 160 and 164).
When KOTA is used by or on behalf of a Covered Entity (such as a home health, FMS, or HCBS provider), Ankota acts as a Business Associate under HIPAA and will execute a Business Associate Agreement (BAA) with that entity prior to service activation.
The BAA defines roles, responsibilities, and permitted uses of Protected Health Information (PHI). Ankota complies with all applicable HIPAA requirements whether acting under a formal BAA or providing services directly to private individuals.
All employees and contractors with access to PHI are trained in HIPAA requirements and subject to confidentiality agreements and access controls.
-
Information We Collect
Ankota, LLC maintains administrative, physical, and technical safeguards consistent with the HIPAA Privacy, Security, and Breach Notification Rules (45 CFR Parts 160 and 164).
When KOTA is used by or on behalf of a Covered Entity (such as a home health, FMS, or HCBS provider), Ankota acts as a Business Associate under HIPAA and will execute a Business Associate Agreement (BAA) with that entity prior to service activation.
The BAA defines roles, responsibilities, and permitted uses of Protected Health Information (PHI). Ankota complies with all applicable HIPAA requirements whether acting under a formal BAA or providing services directly to private individuals.
All employees and contractors with access to PHI are trained in HIPAA requirements and subject to confidentiality agreements and access controls.
-
How We Use Information
Ankota, LLC maintains administrative, physical, and technical safeguards consistent with the HIPAA Privacy, Security, and Breach Notification Rules (45 CFR Parts 160 and 164).
When KOTA is used by or on behalf of a Covered Entity (such as a home health, FMS, or HCBS provider), Ankota acts as a Business Associate under HIPAA and will execute a Business Associate Agreement (BAA) with that entity prior to service activation.
The BAA defines roles, responsibilities, and permitted uses of Protected Health Information (PHI). Ankota complies with all applicable HIPAA requirements whether acting under a formal BAA or providing services directly to private individuals.
All employees and contractors with access to PHI are trained in HIPAA requirements and subject to confidentiality agreements and access controls.
-
Medicaid and PERS Compliance
Ankota, LLC maintains administrative, physical, and technical safeguards consistent with the HIPAA Privacy, Security, and Breach Notification Rules (45 CFR Parts 160 and 164).
When KOTA is used by or on behalf of a Covered Entity (such as a home health, FMS, or HCBS provider), Ankota acts as a Business Associate under HIPAA and will execute a Business Associate Agreement (BAA) with that entity prior to service activation.
The BAA defines roles, responsibilities, and permitted uses of Protected Health Information (PHI). Ankota complies with all applicable HIPAA requirements whether acting under a formal BAA or providing services directly to private individuals.
All employees and contractors with access to PHI are trained in HIPAA requirements and subject to confidentiality agreements and access controls.
-
Information Sharing
Ankota, LLC maintains administrative, physical, and technical safeguards consistent with the HIPAA Privacy, Security, and Breach Notification Rules (45 CFR Parts 160 and 164).
When KOTA is used by or on behalf of a Covered Entity (such as a home health, FMS, or HCBS provider), Ankota acts as a Business Associate under HIPAA and will execute a Business Associate Agreement (BAA) with that entity prior to service activation.
The BAA defines roles, responsibilities, and permitted uses of Protected Health Information (PHI). Ankota complies with all applicable HIPAA requirements whether acting under a formal BAA or providing services directly to private individuals.
All employees and contractors with access to PHI are trained in HIPAA requirements and subject to confidentiality agreements and access controls.
-
Security
Ankota, LLC maintains administrative, physical, and technical safeguards consistent with the HIPAA Privacy, Security, and Breach Notification Rules (45 CFR Parts 160 and 164).
When KOTA is used by or on behalf of a Covered Entity (such as a home health, FMS, or HCBS provider), Ankota acts as a Business Associate under HIPAA and will execute a Business Associate Agreement (BAA) with that entity prior to service activation.
The BAA defines roles, responsibilities, and permitted uses of Protected Health Information (PHI). Ankota complies with all applicable HIPAA requirements whether acting under a formal BAA or providing services directly to private individuals.
All employees and contractors with access to PHI are trained in HIPAA requirements and subject to confidentiality agreements and access controls.
-
Data Retention and Documentation Matrix
Ankota, LLC maintains administrative, physical, and technical safeguards consistent with the HIPAA Privacy, Security, and Breach Notification Rules (45 CFR Parts 160 and 164).
When KOTA is used by or on behalf of a Covered Entity (such as a home health, FMS, or HCBS provider), Ankota acts as a Business Associate under HIPAA and will execute a Business Associate Agreement (BAA) with that entity prior to service activation.
The BAA defines roles, responsibilities, and permitted uses of Protected Health Information (PHI). Ankota complies with all applicable HIPAA requirements whether acting under a formal BAA or providing services directly to private individuals.
All employees and contractors with access to PHI are trained in HIPAA requirements and subject to confidentiality agreements and access controls.
-
Records & Documentation Matrix
Ankota, LLC maintains administrative, physical, and technical safeguards consistent with the HIPAA Privacy, Security, and Breach Notification Rules (45 CFR Parts 160 and 164).
When KOTA is used by or on behalf of a Covered Entity (such as a home health, FMS, or HCBS provider), Ankota acts as a Business Associate under HIPAA and will execute a Business Associate Agreement (BAA) with that entity prior to service activation.
The BAA defines roles, responsibilities, and permitted uses of Protected Health Information (PHI). Ankota complies with all applicable HIPAA requirements whether acting under a formal BAA or providing services directly to private individuals.
All employees and contractors with access to PHI are trained in HIPAA requirements and subject to confidentiality agreements and access controls.
-
Individual Rights
Ankota, LLC maintains administrative, physical, and technical safeguards consistent with the HIPAA Privacy, Security, and Breach Notification Rules (45 CFR Parts 160 and 164).
When KOTA is used by or on behalf of a Covered Entity (such as a home health, FMS, or HCBS provider), Ankota acts as a Business Associate under HIPAA and will execute a Business Associate Agreement (BAA) with that entity prior to service activation.
The BAA defines roles, responsibilities, and permitted uses of Protected Health Information (PHI). Ankota complies with all applicable HIPAA requirements whether acting under a formal BAA or providing services directly to private individuals.
All employees and contractors with access to PHI are trained in HIPAA requirements and subject to confidentiality agreements and access controls.
-
Children and Guardianship
Ankota, LLC maintains administrative, physical, and technical safeguards consistent with the HIPAA Privacy, Security, and Breach Notification Rules (45 CFR Parts 160 and 164).
When KOTA is used by or on behalf of a Covered Entity (such as a home health, FMS, or HCBS provider), Ankota acts as a Business Associate under HIPAA and will execute a Business Associate Agreement (BAA) with that entity prior to service activation.
The BAA defines roles, responsibilities, and permitted uses of Protected Health Information (PHI). Ankota complies with all applicable HIPAA requirements whether acting under a formal BAA or providing services directly to private individuals.
All employees and contractors with access to PHI are trained in HIPAA requirements and subject to confidentiality agreements and access controls.
-
Updates to This Policy
Ankota, LLC maintains administrative, physical, and technical safeguards consistent with the HIPAA Privacy, Security, and Breach Notification Rules (45 CFR Parts 160 and 164).
When KOTA is used by or on behalf of a Covered Entity (such as a home health, FMS, or HCBS provider), Ankota acts as a Business Associate under HIPAA and will execute a Business Associate Agreement (BAA) with that entity prior to service activation.
The BAA defines roles, responsibilities, and permitted uses of Protected Health Information (PHI). Ankota complies with all applicable HIPAA requirements whether acting under a formal BAA or providing services directly to private individuals.
All employees and contractors with access to PHI are trained in HIPAA requirements and subject to confidentiality agreements and access controls.
-
Contact
Ankota, LLC maintains administrative, physical, and technical safeguards consistent with the HIPAA Privacy, Security, and Breach Notification Rules (45 CFR Parts 160 and 164).
When KOTA is used by or on behalf of a Covered Entity (such as a home health, FMS, or HCBS provider), Ankota acts as a Business Associate under HIPAA and will execute a Business Associate Agreement (BAA) with that entity prior to service activation.
The BAA defines roles, responsibilities, and permitted uses of Protected Health Information (PHI). Ankota complies with all applicable HIPAA requirements whether acting under a formal BAA or providing services directly to private individuals.
All employees and contractors with access to PHI are trained in HIPAA requirements and subject to confidentiality agreements and access controls.