Privacy Policy

We collect the following types of information: Personal Information: • Name, email address, phone number, and address • Date of birth and demographic information • Account credentials (encrypted) Health Information: • Medical records and health history • Lab test results and diagnostic reports • Appointment schedules and provider notes • Prescription and medication information • Insurance information and card images Technical Information: • Device type and operating system • App usage patterns and session data • Crash reports and error logs (no personal data included) • Authentication tokens (securely stored) Documents You Provide: • Insurance card images (for OCR processing) • Digital signatures on forms • Uploaded medical documents

Healthcare Services: • Scheduling and managing appointments • Displaying lab results and medical records • Facilitating communication with healthcare providers • Processing insurance information App Functionality: • Authenticating your identity • Sending appointment reminders and notifications • Enabling secure messaging with providers • Improving app performance Compliance: • Meeting legal and regulatory requirements • Maintaining security and preventing fraud

We share your information with: Healthcare Providers: • Doctors, nurses, and specialists involved in your care • Healthcare facilities and laboratories Authorized Personnel: • Probation officers assigned to your care (if applicable) may access attendance records, lab results, and appointment information Service Providers: • Amazon Web Services (AWS) - Cloud hosting and data storage • Amazon S3 - Secure document and image storage • AWS Cognito - User authentication • Sentry - Crash reporting (configured to exclude personal information) We DO NOT: • Sell your personal information • Share data for marketing without consent • Disclose information to unauthorized parties

We protect your information with: Technical Measures: • End-to-end encryption for data transmission (TLS 1.2+) • Encryption at rest for stored data • Secure token-based authentication • Automatic session timeout Storage Security: • HIPAA-compliant cloud infrastructure • Access controls and audit logging • Regular security assessments Crash Reporting: • We use Sentry for crash reporting • Personal health information is NOT included in crash reports • Only technical data is collected for debugging

You have the right to: • Access your personal and health information • Request corrections to inaccurate data • Request deletion of your account and data • Opt out of non-essential communications • Receive your data in a portable format • File a complaint regarding privacy concerns To exercise these rights, contact us at: privacy@curertech.com

We retain your information: • While you are an active user • As required by healthcare regulations • For legal and compliance purposes You may request deletion of your account at any time. Data deletion requests are processed within 90 days. Some records may be retained as required by law.

Our app uses the following services: Amazon Web Services (AWS): • Cloud hosting and infrastructure • S3 for secure document storage • Cognito for user authentication Sentry: • Error and crash reporting • Configured with sendDefaultPii: false • No personal health information collected All service providers are contractually required to protect your data.

For privacy questions or concerns:

Privacy: privacy@curertech.com
Support: support@curertech.com

If you believe your privacy rights have been violated, you may file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights.

You can also contact us here.