1. Scope and who is responsible
Kuvos ("Kuvos", "we", "us", or "our") provides tools that turn care instructions supplied by a healthcare professional into a source-backed routine that a person reviews and confirms. This policy applies to information handled through the Kuvos website, mobile app, and related services (the "Service").
If you receive Kuvos through a hospital, insurer, employer, or other organisation, that organisation may be responsible for some processing and may give you an additional privacy notice. Its notice applies to its own handling of your information.
Health privacy: Kuvos handles health-related information with care, but HIPAA or another sector-specific health law applies only where its legal requirements are met. This policy does not claim that every Kuvos deployment is covered by HIPAA.
2. Information we collect
Information you or an authorised person provides
- Account details, such as name, email address, mobile number, profile image, and sign-in information.
- Patient profile and Care Circle details, including name, timezone, role, invitations, and sharing preferences.
- Care documents and images you upload, including prescriptions, discharge notes, physiotherapy sheets, and their file details.
- Care-plan information extracted from a document, source excerpts and locations, reviewer decisions, corrections, explanations, reminder times, plan names, and questions.
- Activity records, such as tasks marked done, skipped, missed, notes, reason codes, and actions taken on another person's behalf.
- Messages and information you send when contacting support or participating in a pilot.
Information collected automatically
- Session and security data, such as IP address, device or browser information, session identifiers, timestamps, and audit events.
- Notification data, including device push tokens, notification preferences, delivery status, and interactions needed to route you to the relevant screen.
- Technical logs needed to operate, secure, diagnose, and improve the Service.
The public website does not currently use advertising cookies or third-party behavioural analytics. If that changes, we will update this policy and provide any choices required by law.
3. How we use information
We use personal information to:
- create and secure accounts, verify sign-in, and manage sessions;
- receive documents, extract possible care instructions, show source evidence, and save human review decisions;
- create confirmed routines, reminders, completion records, questions, and Care Circle updates;
- authorise access, attribute actions, preserve audit history, and prevent misuse;
- provide support, communicate service changes, and respond to requests;
- maintain, troubleshoot, and improve reliability, accessibility, and safety; and
- comply with law, enforce our terms, and protect users, Kuvos, and others.
Where law requires a legal basis, we rely on your consent, performance of our agreement with you, our legitimate interests in operating a safe service, compliance with legal duties, or another basis available under applicable law. You may withdraw consent where processing depends on it, without affecting earlier lawful processing.
5. Your choices and rights
Depending on where you live, you may ask to access, correct, update, export, or delete personal information; withdraw consent; object to or restrict certain processing; or nominate another person to exercise rights where local law permits. You may also revoke a Care Circle invitation, leave a patient profile where the Service allows, change notification settings, or disable device notifications.
To make a request, email vipasana@kuvosai.com. We may need to verify your identity and authority, especially for a request about another person. Some information may be retained where required for legal, security, audit, or care-record integrity reasons. You may also complain to the privacy or data-protection authority that applies where you live.
6. Retention
We retain information for as long as reasonably needed to provide the Service, keep source and review history intact, meet contractual and legal duties, resolve disputes, and maintain security and audit records. Retention can vary by data type, deployment, and the organisation providing your access. When information is no longer needed, we delete or de-identify it, subject to limited backup and legal-retention periods.
7. Security
We use administrative, technical, and organisational safeguards designed to protect personal information, including access controls, encrypted transport, restricted roles, and audit records. No system is completely secure. Protect your device and credentials, use the Service only on devices you trust, and tell us promptly if you suspect unauthorised access.
If a security incident affects your information, we will investigate and provide notifications required by applicable law.
8. Children and people represented by others
The Service is not intended for a child to create and manage an account independently. A parent, legal guardian, authorised caregiver, or participating organisation may provide information about a child or a person who cannot manage the Service alone only when legally authorised to do so. Where required, we obtain verifiable consent from the parent or lawful guardian.
9. International transfers
Kuvos and its service providers may process information in countries other than the one where you live. Where required, we use contractual, organisational, or other lawful safeguards for those transfers and comply with applicable transfer restrictions.
10. Changes and contact
We may update this policy as the Service or applicable law changes. We will post the revised version here, update the date above, and provide additional notice when required.
Questions, rights requests, or privacy complaints can be sent to vipasana@kuvosai.com.