Privacy policy

1. Overview and scope

Clarity Care, Inc. ("Clarity," "we," "our," or "us") is committed to protecting your privacy. This Privacy Policy describes how we collect, use, disclose, and safeguard personal information when you visit our website at https://www.clarityapp.aior use our post-acute admissions intelligence platform and related services (collectively, the "Services").

By accessing or using our Services, you acknowledge that you have read, understood, and agree to this Privacy Policy. If you do not agree, please discontinue use of our Services.

This policy applies to personal information we collect from website visitors, prospective customers, and business contacts. It does not govern patient health information or other data processed on behalf of our customers ("Customer Data"), which is governed by applicable Business Associate Agreements and customer contracts.

2. Information we collect

We collect information you provide directly — such as account registration details (name, email, company, job title), contact form submissions and demo requests, support communications, and survey responses. Payment details are processed by third-party processors and not stored on our systems.

We also collect information automatically, including device and browser metadata (IP address, browser type, operating system), usage data (pages visited, time spent, referring URLs, click patterns), cookies and similar tracking technologies, and approximate geographic location derived from IP address.

As a healthcare technology company, Clarity processes protected health information (PHI) on behalf of covered-entity customers acting as a Business Associate under HIPAA. PHI is handled exclusively under the terms of executed Business Associate Agreements (BAAs) and is not subject to this Privacy Policy.

3. How we use your information

We use the information we collect to provide, maintain, and improve our Services; process transactions and manage accounts; respond to inquiries and deliver customer support; and send marketing communications where you have provided appropriate consent.

We also use data to analyze usage patterns to improve the user experience, detect and prevent fraud and security incidents, comply with legal obligations, and enforce our agreements. We do not use personal information to train AI models without explicit authorization.

4. Data handling and security

Clarity implements HIPAA-aligned administrative, physical, and technical safeguards appropriate to the sensitivity of the information we process. All data is encrypted in transit using TLS 1.2 or higher and encrypted at rest using AES-256. Access to customer and patient data is governed by role-based access controls and enforced least-privilege policies.

We maintain detailed audit logs for access to sensitive systems and conduct regular security assessments, penetration tests, and vulnerability reviews. A signed Business Associate Agreement (BAA) is available for covered-entity customers upon request.

No method of transmission over the internet or electronic storage is completely secure. While we strive to protect your information using commercially reasonable means, we cannot guarantee absolute security.

5. Data sharing and subprocessors

We share personal information only on a limited, least-privilege basis. We may share data with service providers who perform functions on our behalf — such as cloud infrastructure, analytics, payment processing, and customer support — under contractual obligations that restrict their use of data to the services they provide.

We may disclose information when required by law, court order, or governmental authority, or to protect our rights, users, and safety. In connection with a merger, acquisition, or asset sale, information may be transferred as part of that transaction, subject to standard confidentiality protections.

We do not sell, rent, or trade your personal information to third parties.

6. Data retention

We retain personal information for as long as necessary to fulfill the purposes for which it was collected, comply with applicable legal obligations, resolve disputes, and enforce our agreements. The exact retention period depends on the type of information and the context in which it was collected.

Customer Data retention is governed by the applicable BAA and customer contract. When personal information is no longer required, we securely delete or anonymize it in accordance with our data disposal standards.

7. Your rights and choices

Depending on your location, you may have rights regarding your personal information, including the right to access, correct, delete, or obtain a portable copy of data we hold about you, and the right to opt out of marketing communications at any time.

• Access & portability: Request a copy of the personal information we hold about you in a structured format.
• Correction: Request that we correct inaccurate or incomplete information.
• Deletion: Request deletion of your personal information, subject to legal obligations.
• Opt-out: Unsubscribe from marketing communications at any time via the unsubscribe link in any email or by contacting us directly.

To exercise any of these rights, contact us at the address in Section 10 below. We will respond within the timeframe required by applicable law.

8. Children's privacy

Our Services are designed for business and healthcare professional use and are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected personal information from a child, we will take prompt steps to delete that information.

9. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or applicable law. When we make material changes, we will update the "Last updated" date at the top of this page and, where required, notify you by email or via a prominent notice in the Services. We encourage you to review this policy periodically.

Your continued use of our Services after any posted changes constitutes your acceptance of the updated policy.

10. Contact us

If you have questions about this Privacy Policy or our privacy practices, please reach out:

Clarity Care, Inc.
Email: hello@claritycare.health