Consoles

Users simply select their developmental stage by choosing an age range — and that’s it. From there, they access engaging, age-appropriate health education designed specifically for them.

 

The platform does not require names, logins, accounts, or any personally identifiable information. By design, we intentionally minimize data collection to reduce privacy risk. Once installed, devices are locked into the Heydoc Pediatrics platform only. Users cannot browse the internet, download apps, or access outside content, ensuring a fully controlled and secure environment with no external content delivery.

​

Because our platform is used in pediatric clinical settings, we adhere to the standards of the Children’s Online Privacy Protection Act (COPPA), a U.S. federal law designed to protect the privacy of children under 13 online. COPPA requires companies to limit data collection from children, maintain transparency, and implement strong security safeguards. Heydoc goes a step further — we do not collect personal information from children at all. Users only select an age range, with no names, emails, photos, or identifying details required. This data-minimization approach significantly reduces compliance risk for clinics and strengthens privacy protections for families.

​

We do not receive, store, or directly access any Protected Health Information (PHI). PHI refers to individually identifiable health information, such as medical diagnoses, treatment details, insurance information, or any health data linked to a specific person. Because Heydoc does not collect patient records, integrate with electronic health record (EHR) systems, or handle identifiable health data, we are not subject to HIPAA as a covered entity or business associate. However, we architect our systems to meet healthcare-grade privacy and security standards given our presence in clinical environments.

​

Both our hardware and software undergo rigorous safety and security testing. All consoles are UL-certified, meeting United States electrical safety standards. Our platform is encrypted and has undergone comprehensive OWASP vulnerability testing to identify and mitigate security risks. Hardware devices receive regular security updates, firmware integrity checks, and routine security scans to protect against unauthorized modifications or malicious software.

​

Heydoc manages full setup and installation, along with ongoing maintenance, system monitoring, and scheduled security updates — ensuring clinics do not need to manage technical infrastructure.

​

We are also in the process of testing and certifying additional console formats, including tablet and mobile versions, to expand access while maintaining the same high standards of safety, privacy, and security.