Privacy Notice

1. Who We Are

Easy Care Lite is a product of Code & Clarity, LLC ("we," "us," "our"). We operate the Easy Care Lite platform at app.easycarelite.com and the marketing website at www.easycarelite.com.

For privacy-related inquiries: support@codeandclarity.com

2. Data We Collect

2.1 Account & Facility Data

When you register, we collect:

• Your name, work email address, and password (stored as a hashed value)
• Your facility name and the number of residents you manage
• Billing information (processed by our payment processor; we do not store full card numbers)
• IP address and browser/device information at login

2.2 Resident & Operational Data

When you use the platform, you may enter data about the people in your care, including:

• Resident names, dates of birth, and contact information
• Medication records (eMAR) — names, dosages, administration times, and outcomes
• Care task records and clinical questionnaire responses
• Staff schedules and shift records
• Documents you choose to upload (care plans, assessments, etc.)

This data is entered by you and your authorized staff. We do not independently source or enrich resident data.

2.3 Usage Data

We automatically collect limited usage data to operate and improve the Service:

• Pages visited and features used within the application
• Error logs and performance metrics
• Session timestamps and duration

2.4 Marketing Website

On the marketing website (easycarelite.com), we may collect:

• Name, email, and facility name submitted through the demo request form
• Anonymous analytics data (page views, referral source)

3. How We Use Your Data

We do not sell your data, use it for advertising, or share it for any purpose other than those listed above.

4. Healthcare Data & HIPAA

Resident health information entered into the platform may constitute Protected Health Information (PHI) under HIPAA. We understand our obligations and take them seriously:

• We store PHI encrypted at rest and in transit
• Access to PHI is strictly limited to authorized personnel
• We will execute a Business Associate Agreement (BAA) with covered entities upon request — contact support@codeandclarity.com
• We do not use PHI for marketing, analytics, or any purpose beyond delivering the Service to your facility

You are responsible as the Covered Entity for obtaining appropriate resident authorizations and for training your staff on HIPAA-compliant use of the platform.

5. Data Sharing

We share data only in the following limited circumstances:

• Service providers: Trusted third-party vendors who help us operate the Service (e.g., our hosting provider, payment processor). These vendors are contractually prohibited from using your data for any other purpose.
• Legal requirements: If required by law, court order, or governmental authority.
• Business transfers: In the event of a merger, acquisition, or sale of substantially all assets, your data may be transferred. We will notify you by email beforehand.

We do not share your data with advertisers, data brokers, or any third party for commercial purposes.

6. Data Retention

We retain your account and operational data for as long as your subscription is active. Upon cancellation:

• Your data remains accessible through the end of your paid billing period
• You may request a full data export within 30 days of cancellation
• After 30 days, we will delete your data from production systems
• Backup copies may be retained for up to 90 days before permanent deletion

Demo request form submissions are retained for up to 12 months for follow-up purposes.

7. Security

We implement appropriate technical and organizational safeguards including:

• TLS encryption for all data in transit
• Encryption at rest for stored data
• Role-based access controls limiting data access to authorized personnel only
• Regular security reviews and updates
• Secure, access-controlled infrastructure

In the event of a data breach affecting your account, we will notify you within 72 hours of becoming aware of the breach, as required by applicable law.

8. Cookies & Tracking

The Easy Care Lite application uses only essential session cookies necessary for login and authentication. We do not use third-party advertising cookies or cross-site tracking technologies in the application.

The marketing website (easycarelite.com) may use analytics cookies to understand how visitors find and use the site. You may disable cookies in your browser settings without affecting your ability to use the core application.

9. Your Rights

You have the right to:

• Access — request a copy of the data we hold about you and your facility
• Correction — request correction of inaccurate data
• Deletion — request deletion of your account and associated data
• Export — receive your data in a portable format
• Objection — object to specific processing activities

To exercise any of these rights, email support@codeandclarity.com. We will respond within 30 days.

10. Children's Privacy

The Service is not directed at children under 13 and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we will delete it promptly.

11. Changes to This Notice

We may update this Privacy Notice periodically. We will notify you of material changes by email to your registered address at least 14 days before they take effect. The "effective date" at the top of this page indicates when this version was last updated.

12. Contact

Privacy questions, data requests, or BAA inquiries: