Privacy Policy — Restwell Sleep Intake App
Effective date: August 4, 2026
Restwell is a private, in-office iPad app used by our practice to let patients complete sleep-intake questionnaires. This policy explains what the app does with information. In plain terms: your information stays on the iPad in our office and is not sent to us over the internet, sold, or shared with advertisers.
Who this applies to
This policy covers people who enter information into the Restwell app on a practice iPad (patients completing intake forms) and the clinicians who use it. Restwell is distributed privately to our own practice and a small number of colleagues — it is not offered to the general public.
What information the app handles
When a patient fills out the forms, the app records the answers they provide, which may include:
- Health-related information (sleep history, symptoms, questionnaire responses, medications, and similar intake details)
- Basic details such as date of birth, age, gender, height, weight, and collar size
- A Record ID (a chart/EHR number entered by staff) used only to label the exported file
The app combines the answers into a single PDF for the patient's record.
Where information is stored
- All information stays on the iPad. It is saved locally on the device and is encrypted at rest using the iPad's built-in file protection.
- The exported PDF is de-identified in its file name — the file name contains only the Record ID and a date (for example, LP-INTK_0428_20260101.pdf), with no name, date of birth, or Social Security number. (The patient's name may appear inside the document, as part of their clinical record.)
- The clinician controls what happens to each record — reviewing it, sharing it to the patient's chart through the practice's own systems, and deleting it from the iPad when it is no longer needed.
Internet use and third parties
Restwell works offline for everything except one feature:
- Medication name lookup. When a patient begins typing a medication name, the app sends only the letters typed to the U.S. National Library of Medicine's public drug-name service to suggest matching medications. This request contains no patient name, Record ID, or other identifying information — just the partial drug name — and is used only to help spell medications correctly.
Aside from that lookup, the app makes no network connections.
What the app does not do
- It does not send patient information to the developer or to our practice over the internet.
- It does not use analytics, advertising, tracking, or third-party marketing tools.
- It does not create user accounts or collect contact information.
- It does not upload data to any cloud service.
Security
- Information is stored encrypted on the device.
- Access to saved records and settings is protected by a provider PIN and, where available, Face ID / Touch ID.
- The app locks automatically when idle or when the iPad is set aside.
No system is perfectly secure, but we take reasonable steps to protect information on the device.
How long information is kept
Records remain on the iPad until the clinician exports them to the patient's chart and/or deletes them from the app. Deleting a record removes it from the device.
Children's privacy
Restwell is used under the supervision of our clinicians as part of care. Any information about a minor is entered as part of that minor's own clinical intake and is handled the same way as described above.
Your rights
Because the information is part of your clinical record, requests to access, correct, or delete it are handled through our practice's normal medical-records process. Please contact us using the information below.
Changes to this policy
If we change how the app handles information, we will update this policy and revise the effective date above.
Contact us
Luis Peña, MA, LPC, DBSM
4306 Yoakum Blvd, Ste 538
Houston, TX 77006
Phone: 713.529.6555
Email: counseling@luispenalpc.com
This policy describes how the Restwell app handles information on the device and does not itself constitute legal advice. Because the app is used in a clinical setting, it should be read alongside our practice's HIPAA policies and applicable state law.