Security & Privacy Policy

CaringHearts by VFrequentists LLP

Effective Date: July 23, 2026
Last Updated: July 23, 2026

1. Introduction and Scope

This Security & Privacy Policy (“Policy”) governs the collection, use, disclosure, and protection of information through the CaringHearts mobile application (“App,” “Service,” “Platform”) developed and operated by VFrequentists LLP (“Company,” “We,” “Us,” “Our”).

1.1 Professional User Base

This App is designed exclusively for use by qualified healthcare professionals, including but not limited to:

1.2 Professional Acknowledgment

By accessing or using CaringHearts, you (“User,” “You,” “Your,” “Healthcare Professional”) represent that you are a qualified healthcare professional and acknowledge that you have read, understood, and agree to be bound by this Policy and all applicable professional standards and regulations.

IMPORTANT: CaringHearts is designed as a professional informational and data management tool for healthcare professionals. While the App processes and organizes healthcare data, all clinical decisions, medical coding determinations, and billing practices remain the sole professional responsibility of the licensed healthcare professional using the system.

2. Data Processing Foundation and Professional Limitations

2.1 User-Provided Data Processing Framework

CaringHearts functions exclusively with data that healthcare professionals provide directly through the professional interface. The App does not:

All outputs, clinical summaries, coding suggestions, billing calculations, or processed information are derived solely from healthcare professional input data using established medical algorithms, coding standards (ICD-10, CPT, HCPCS), and billing frameworks.

2.2 Healthcare Professional Responsibility and Clinical Oversight

AS A LICENSED HEALTHCARE PROFESSIONAL, YOU ARE SOLELY AND PROFESSIONALLY RESPONSIBLE FOR:

2.3 Professional Standards Compliance

Healthcare professionals using CaringHearts acknowledge their continuing obligation to:

3. Infrastructure Security and HIPAA Compliance

3.1 HIPAA-Compliant Infrastructure for Healthcare Professionals

CaringHearts operates on enterprise-grade infrastructure specifically designed for healthcare professional use, with services provided by third-party vendors that maintain current HIPAA compliance certifications:

3.2 Business Associate Agreements and Healthcare Compliance

VFrequentists LLP maintains executed Business Associate Agreements (BAAs) with all third-party service providers who may access, store, or process PHI through CaringHearts. These agreements ensure:

3.3 Technical Safeguards for Healthcare Data

4. Professional Data Collection and Clinical Processing

4.1 Healthcare Professional Information Collection

CaringHearts collects only the information that healthcare professionals explicitly provide through the professional interface:

Under applicable privacy laws and healthcare regulations, we process professional healthcare data based on:

5. Healthcare Professional Rights and Clinical Data Management

5.1 Clinical Data Review and Professional Correction Mechanisms

CaringHearts provides healthcare-specific functionality for professional data management:

5.2 Healthcare Professional Control Rights

As a licensed healthcare professional, you maintain complete control over clinical data, including:

5.3 Healthcare Data Retention and Professional Requirements

6. Professional Disclaimer and Healthcare Professional Liability

6.1 Clinical Decision Support Disclaimer

CARINGHEARTS PROVIDES CLINICAL DECISION SUPPORT TOOLS FOR HEALTHCARE PROFESSIONALS. All clinical information processed through CaringHearts is intended to support, not replace, professional clinical judgment and decision-making.

AS A HEALTHCARE PROFESSIONAL, YOU ACKNOWLEDGE AND PROFESSIONALLY AGREE THAT:

6.2 Professional Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY HEALTHCARE LAW:

6.3 Healthcare Professional Assumption of Clinical Risk

By using CaringHearts, healthcare professionals explicitly acknowledge and professionally agree that:

7. Healthcare Data Sharing and Professional Disclosure

7.1 Professional Healthcare Data Sharing

VFrequentists LLP does not sell, rent, or trade healthcare professional information or clinical data. Information may only be shared:

7.2 Healthcare Professional Integrations

Any healthcare system integrations or professional services connected to CaringHearts:

8. Healthcare Security Incident Response

8.1 Clinical Data Breach Notification

In the event of a healthcare data security incident affecting CaringHearts:

8.2 Healthcare Professional Incident Reporting

If healthcare professionals suspect a security issue affecting clinical data:

9. Healthcare Professional Verification and Credentialing

9.1 Professional Verification Requirements

Access to CaringHearts requires verification of healthcare professional credentials:

9.2 Ongoing Professional Compliance

Healthcare professionals using CaringHearts agree to:

10. International Healthcare Professional Use

If healthcare professionals access CaringHearts from outside the United States:

11. Policy Updates and Professional Modifications

11.1 Healthcare Professional Policy Changes

VFrequentists LLP reserves the right to modify this Policy for healthcare operational requirements. Changes will be:

11.2 Continued Professional Use

Continued use of CaringHearts by healthcare professionals after policy modifications constitutes professional acceptance of updated terms. If healthcare professionals do not agree to changes, they must discontinue use and may request clinical data deletion consistent with professional documentation requirements.

12. Healthcare Professional Contact Information and Compliance

12.1 Healthcare Privacy Officer Contact

For healthcare privacy-related questions, concerns, or professional requests:

12.2 Healthcare Regulatory Compliance

This Policy is governed by healthcare laws of [State/Country to be specified] without regard to conflict of law principles. Any disputes arising under this Policy involving healthcare professionals shall be resolved through:

BY USING CARINGHEARTS, HEALTHCARE PROFESSIONALS ACKNOWLEDGE THAT:

  1. They have read and understood this entire Policy as licensed healthcare professionals
  2. They accept full professional responsibility for clinical decision-making and patient care
  3. They understand CaringHearts’s role as a clinical decision support tool, not a clinical decision maker
  4. They consent to the healthcare data practices described herein
  5. They agree to the professional limitation of liability and assumption of clinical risk provisions
  6. They maintain current professional licensure and credentials
  7. They will use CaringHearts within their professional scope of practice
  8. They acknowledge their continuing professional responsibilities for patient care and clinical outcomes

FOR HEALTHCARE INSTITUTIONS: If healthcare professionals are using CaringHearts within an institutional setting, they acknowledge additional institutional responsibilities for clinical governance, quality assurance, and regulatory compliance beyond the scope of this Policy.

This Policy represents the complete agreement regarding privacy and data protection for CaringHearts used by healthcare professionals. No other statements, representations, or agreements supersede or modify the terms contained herein.

This document was prepared in accordance with HIPAA Privacy and Security Rules, state healthcare privacy laws, professional licensing requirements, and international healthcare data protection standards. Legal and healthcare compliance review is required before implementation.

VFrequentists LLP
CaringHearts Development Team