Privacy Policy

CareFlow is practice-management software for doctors, operated by Gemmalou Gutierrez(trading as CareFlow) at careflow.partners. This policy explains what we collect, why, and the controls you have. It applies to the CareFlow web app and the CareFlow iOS and Android apps.

Who controls the data

You, the clinician or practice, are the data controller for the patient records you enter. Gemmalou Gutierrez (trading as CareFlow) acts as yourdata processor and only processes that information to provide the service you asked for.

What we collect

• Account data: your name, email, phone number and currency preference.
• Practice data you enter: patients, hospitals, appointments, clinical notes, intake responses, documents, invoices and payments.
• Technical data: authentication tokens, device type and error logs needed to keep the app running.

What we never do

• We do not sell, rent or share your data with advertisers or data brokers.
• We do not use patient data to train advertising or public AI models.
• We do not allow one account to read another account's records — every table and file is access-controlled per doctor at the database layer.

Security

• Data is encrypted in transit (TLS) and at rest by our hosting provider.
• Row-level security scopes every record to the owning doctor's account.
• Uploaded documents live in a private bucket; patient-facing links are token-based, time-limited and revocable by you at any time.

Regulatory commitments

• HIPAA (US): CareFlow is built to support HIPAA-aligned workflows — access control, audit-friendly records and minimum necessary disclosure. If you are a covered entity, execute a Business Associate Agreement with us before entering protected health information.
• GDPR (EU/UK): we process on your instructions under a Data Processing Agreement. Lawful basis for patient records is normally the provision of healthcare (Art. 9(2)(h)).
• Philippine Data Privacy Act of 2012 (RA 10173): health information is sensitive personal information. You are the personal information controller and must obtain patient consent or rely on a lawful medical basis before recording it.

Retention and deletion

Deleted patients and hospitals stay recoverable for 30 days, then are permanently purged. You can export or request full deletion of your account data at any time; we complete verified deletion requests within 30 days, except where retention is legally required.

Your rights

You may access, correct, export or delete your data, withdraw consent, and object to processing. Patients should direct such requests to their treating doctor, who controls the record inside CareFlow.

Children

CareFlow accounts are for licensed healthcare professionals only. Paediatric patient records entered by a clinician are handled under the clinician's own legal basis and consent process.

Contact

Privacy questions, BAA/DPA requests or data-subject requests: support@careflow.partners.