Privacy Policy – Beyond Care.US Mobile App

Last Updated: 13th October 2025

Beyond Care.US (“we,” “our,” or “us”) is committed to protecting your privacy and safeguarding your health information in compliance with the Health Insurance Portability and Accountability Act (HIPAA) and applicable U.S. privacy laws. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile applications (“App”) on iOS and Android.

By using the App, you consent to the practices described in this Privacy Policy.

1. Information We Collect

We may collect and process the following information when you use the App:

• Registration & Login Data: Invite code, username, password, Phone Number, and Account credentials. The phone number is a mandatory part of registration, as it serves as a unique identifier. Each user can register only one Beyond Care app account per phone number.
• Personal Information: Name, contact details, and email address. This information is collected only for communication purposes between you and Beyond Care.US.
• Medical Records & Documents: You may upload documents (images, PDFs, or other formats) containing your medical records. These are encrypted and stored securely.
• Tasks & Appointments: Created only by authorized healthcare professionals via the web-based admin panel. Tasks may include document upload requests or scheduled video call appointments.
• Video Calls: Conducted using the open-source Jitsi SDK, initiated by healthcare professionals. Audio, video, and call metadata are used only for providing the service and not shared with third parties.
• Chats:
  • One-to-one chat between you and your provider/adjuster/account owner.
  • Chat with the Beyond Care AI Assistant for health-related queries.
    All chat data is encrypted and not shared with third parties.
• Notifications: We use Firebase Cloud Messaging to send push notifications about tasks, appointments, and updates.
• Device Permissions: To deliver services, the App may request access to:
  • Camera & Microphone (for video calls and document uploads)
  • Photo Library & Storage (to upload or save documents/images)
  • Notifications (to send reminders and alerts)
  • Phone State (for secure call handling)
  • Calendar (to help with appointment scheduling)
  • Face ID / Biometrics (for secure login, if enabled)

2. How We Use Your Information

We use collected information solely for the following purposes:

• Secure login and identity verification.
• Communication with you regarding your care, tasks, and appointments.
• Allowing healthcare professionals to provide services and manage appointments.
• Supporting secure document uploads and encrypted storage.
• Conducting video consultations via Jitsi SDK.
• Enabling secure real-time chat with healthcare professionals and the Beyond Care AI assistant.
• Sending reminders, alerts, and notifications through Firebase.
• Improving our services and user experience.

We do not sell, rent, or share your personal data or health-related information with any third-party services.

3. HIPAA Compliance & Data Security

• All Protected Health Information (PHI) is collected, stored, and transmitted in compliance with HIPAA requirements.
• Data at rest and in transit is encrypted using industry-standard encryption methods.
• Access to your data is restricted to authorized healthcare professionals involved in your care.
• We maintain audit logs and monitoring for compliance and security.
• We may enter into Business Associate Agreements (BAAs) with service providers when legally required.

4. Data Sharing

We may share your information only in the following limited cases:

• Healthcare Providers: To deliver care, manage appointments, and review your medical records.
• Legal & Compliance: If required by law, regulation, or court order.

Otherwise, none of your personal or health-related data is shared with any third-party service.

5. Data Retention

• Medical documents, chats, and appointments are retained only as long as required for care delivery, regulatory compliance, or as instructed by healthcare providers.
• Users may request deletion of their data, subject to legal and medical record keeping requirements.

6. User Rights

You have the right to:

• Access your health information stored within the App.
• Request corrections to inaccurate or incomplete information.
• Request deletion of data (where legally permissible).
• Restrict or object to certain data uses.
• Obtain an accounting of disclosures of your PHI.

To exercise these rights, contact us atinfo@beyondcare.us

7. Children’s Privacy

The App is not intended for individuals under 13. We do not knowingly collect personal information from children without parental/guardian consent.

8. Security Practices

• End-to-end encryption for chats and documents.
• Secure authentication (username/password, Face ID/biometric support).
• Regular security audits and monitoring.
• Data hosted in secure, HIPAA-compliant environments.

9. Third-Party Services

• Jitsi SDK: Used for video calls. No call content is stored or shared outside Beyond Care.US systems.
• Firebase Cloud Messaging: Used for push notifications. No PHI is shared with Firebase beyond notification tokens.

10. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Updated versions will be posted within the App with a revised “Last Updated” date.

11. Contact Us

If you have questions about this Privacy Policy, our HIPAA compliance, or your rights, please contact:

Beyond Care.US

Email: info@beyondcare.us

Phone: 866-839-8819

Address:  470 Johnson Road, Suite 140, Washington, PA 15301