Privacy Policy

1. Introduction

CuraNet ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our healthcare management platform and related services (collectively, the "Services").

By accessing or using our Services, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our Services.

2. Information We Collect

2.1 Personal Information

We may collect the following types of personal information:

• Identity Information: Full name, date of birth, gender, government-issued identification numbers
• Contact Information: Email address, phone number, mailing address
• Account Information: Username, password, security questions and answers
• Professional Information: Medical license numbers, specializations, certifications (for healthcare providers)

2.2 Health Information

We collect and process Protected Health Information (PHI) as defined under HIPAA, including:

• Medical history and records
• Appointment details and scheduling information
• Treatment plans and clinical notes
• Prescription and medication information
• Insurance and billing information

2.3 Technical Information

• IP address, browser type, and operating system
• Device identifiers and mobile network information
• Usage data, including pages visited and features used
• Cookies and similar tracking technologies

3. How We Use Your Information

We use your information for the following purposes:

• Healthcare Services: Facilitate medical appointments, consultations, and treatment coordination
• Account Management: Create and maintain user accounts, authenticate users, and provide customer support
• Communication: Send appointment reminders, health alerts, and service-related notifications
• Legal Compliance: Comply with applicable healthcare regulations, including HIPAA, and respond to legal requests
• Service Improvement: Analyze usage patterns to enhance our platform's functionality and user experience
• Security: Detect, prevent, and address technical issues and potential security threats

4. Information Sharing and Disclosure

4.1 Healthcare Providers

We may share your health information with authorized healthcare providers involved in your care, including doctors, nurses, specialists, and administrative staff, as necessary for treatment, payment, and healthcare operations.

4.2 Business Associates

We may share information with third-party service providers who assist us in operating our platform, subject to appropriate Business Associate Agreements that ensure HIPAA compliance.

4.3 Legal Requirements

We may disclose your information when required by law, including:

• In response to court orders, subpoenas, or legal process
• To comply with regulatory requirements
• To protect the rights, property, or safety of CuraNet, our users, or others
• In cases of suspected abuse, neglect, or domestic violence as required by law

4.4 Emergency Situations

We may disclose health information in emergency situations to prevent serious harm to you or others, or for public health activities.

5. Data Security

We implement comprehensive security measures to protect your information:

• Encryption: All data is encrypted in transit and at rest using industry-standard protocols
• Access Controls: Role-based access controls ensure only authorized personnel can access your information
• Audit Logs: We maintain detailed logs of all system access and data modifications
• Regular Security Assessments: We conduct regular security audits and vulnerability assessments
• Employee Training: All staff receive regular training on privacy and security best practices

6. Your Rights and Choices

6.1 HIPAA Rights

Under HIPAA, you have the right to:

• Access: Request copies of your health information
• Amendment: Request corrections to your health information
• Restriction: Request restrictions on how your information is used or disclosed
• Accounting: Receive an accounting of disclosures of your health information
• Confidential Communications: Request communications through alternative means or locations

6.2 Account Management

• Update your personal information through your account settings
• Modify communication preferences
• Request account deletion (subject to legal retention requirements)

7. Data Retention

We retain your information for as long as necessary to:

• Provide our Services and maintain your account
• Comply with legal, regulatory, and professional obligations
• Resolve disputes and enforce our agreements

Health information is typically retained for a minimum of six (6) years after the last date of service, or longer as required by applicable law.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure that such transfers comply with applicable data protection laws and implement appropriate safeguards to protect your information.

9. Children's Privacy

Our Services are not intended for individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information promptly.

10. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience, analyze usage patterns, and improve our Services. You can control cookie settings through your browser preferences, though disabling cookies may affect certain functionality.

11. Third-Party Links

Our Services may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of material changes by posting the updated policy on our website and updating the "Last Updated" date. Your continued use of our Services after such changes constitutes acceptance of the updated policy.

13. Contact Information

14. Effective Date

This Privacy Policy is effective as of January 17, 2025, and applies to all information collected by CuraNet on or after this date.