Privacy Policy

Cronic Care, Inc. (“Cronic Care,” “we,” “our,” or “us”) respects the privacy and confidentiality of personal and healthcare information.

Cronic Care develops an AI-Native Clinical Intelligence Platform designed to help healthcare organizations transform patient encounters and clinical information into physician-ready documentation and actionable clinical insights.

This Privacy Policy describes how we collect, use, process, disclose, and protect information through our website, applications, and related services.

1. Information We Collect

Depending on how individuals and healthcare organizations interact with our services, we may process the following categories of information.

Website and Contact Information

• Names, email addresses, telephone numbers, and organizational affiliations.
• Information submitted through contact forms, demonstration requests, and clinical evaluation inquiries.
• Website usage information, browser information, and technical logs.

Healthcare Professional Information

• Physician names, professional email addresses, and clinic affiliations.
• Provider identifiers and professional credentials.
• Account authentication information, access permissions, and activity records.

Patient and Clinical Information

When authorized healthcare organizations use the Cronic Care platform, we may process clinical information necessary to provide the requested services, including:

• Patient identification and encounter information.
• Patient–physician conversations and associated transcriptions.
• Medical histories, symptoms, medications, diagnoses, and treatment information.
• Laboratory findings, imaging reports, and other clinical documentation.
• Physician-reviewed SOAP notes, Assessment & Plan documentation, and clinical reports.

Patient information is processed to provide services to authorized healthcare organizations, subject to applicable agreements and legal requirements.

2. How We Use Information

Cronic Care uses information for purposes including:

• Providing AI-assisted clinical documentation.
• Preparing physician-ready SOAP notes and clinical summaries.
• Supporting clinical intelligence and reporting through CareInsights™.
• Supporting authorized clinical research documentation workflows through ResearchInsights.
• Authenticating healthcare professionals and managing authorized access.
• Maintaining, securing, troubleshooting, and improving platform operations.
• Responding to inquiries, providing support, and administering business relationships.
• Complying with applicable legal and contractual obligations.

Cronic Care’s AI-generated documentation and clinical insights are intended to support healthcare professionals, not replace their independent clinical judgment.

3. Physician Review and Clinical Responsibility

Cronic Care is designed around physician-governed clinical workflows.

AI-generated clinical documentation and recommendations are subject to review by authorized healthcare professionals.

Physicians and other authorized healthcare professionals remain responsible for evaluating clinical information, determining its accuracy and appropriateness, and making patient-care decisions.

4. Protected Health Information and HIPAA

When Cronic Care creates, receives, maintains, or transmits Protected Health Information (PHI) on behalf of a healthcare organization subject to HIPAA, its handling of that information is governed by applicable law and relevant contractual arrangements, including Business Associate Agreements where required.

Cronic Care’s permitted uses and disclosures of PHI are limited by applicable law and the governing agreements with healthcare organizations.

Healthcare organizations generally retain responsibility for managing patient medical records and responding to patient requests concerning those records, with Cronic Care providing assistance as required by applicable agreements and law.

5. Data Security

Cronic Care is designed to support secure, access-controlled handling of clinical information.

Security measures may include:

• Authentication and authorization controls.
• Role-based access restrictions.
• Encryption and secure communications.
• Access logging and monitoring.
• Controls governing clinical documentation review and approval.
• Infrastructure and operational safeguards appropriate to the information processed.

No electronic system can guarantee absolute security. Cronic Care works to identify and address security risks through appropriate technical and organizational measures.

6. Cloud Infrastructure and Service Providers

Cronic Care uses cloud infrastructure and authorized technology service providers to support platform operations, including hosting, authentication, storage, transcription, document processing, communications, and clinical reporting.

Service providers are permitted to process information only as authorized by applicable agreements and legal requirements.

Where required, appropriate contractual safeguards, including Business Associate Agreements, must be established before service providers process PHI.

7. Artificial Intelligence and Clinical Data

Cronic Care uses artificial intelligence technologies to support clinical documentation and the preparation of relevant clinical intelligence.

Clinical information may be processed to generate documentation, identify clinically relevant findings, and prepare reports for authorized healthcare professionals.

Any use of identifiable clinical information for AI model training, product development, or purposes beyond providing contracted services must comply with applicable law, authorizations, and governing agreements.

8. Information Sharing

Cronic Care may disclose information:

• To authorized healthcare organizations and their approved users.
• To service providers supporting contracted operations.
• As required by law, regulation, or valid legal process.
• When reasonably necessary to protect platform security, enforce applicable agreements, or respond to security incidents, subject to applicable legal restrictions.
• In connection with a lawful business transaction, subject to applicable confidentiality and privacy obligations.

We do not authorize unrestricted third-party access to patient clinical information.

9. Data Retention and Deletion

Information is retained according to its purpose, applicable agreements, operational requirements, and legal obligations.

Retention periods may vary by information category, including account information, clinical documentation, audit records, and technical logs.

Upon termination of a healthcare organization’s services, clinical information will be handled according to applicable contractual requirements and law, including provisions governing return, deletion, or continued protection of information where deletion is not feasible.

10. Cookies and Website Technologies

Our website may use cookies or similar technologies to support website functionality, security, session management, and performance.

Additional cookies or analytics technologies, if enabled, may collect technical information about website usage.

Visitors may manage certain cookies through their browser settings, although disabling essential cookies may affect website functionality.

11. Privacy Rights and Requests

Individuals may have rights to access, correct, delete, or obtain information about their personal information, depending on applicable law and the nature of the information.

For information Cronic Care processes directly, privacy requests may be submitted using the contact details below.

Patients seeking access to or correction of medical records maintained by their healthcare provider should generally contact that provider directly.

Cronic Care will assist healthcare organizations in responding to applicable patient privacy requests as required by law and contractual obligations.

California residents may have additional rights under applicable California privacy laws, subject to eligibility, exemptions, and other legal requirements.

12. Children’s Privacy

Cronic Care’s website and business services are not directed toward children for independent registration or use.

Clinical information concerning minors may be processed when submitted by authorized healthcare organizations for permitted healthcare purposes and subject to applicable legal requirements.

13. Third-Party Websites

Our website may contain links to third-party websites or services.

Cronic Care is not responsible for the privacy practices of independently operated third-party websites. Visitors should review their respective privacy policies.

14. Changes to This Privacy Policy

Cronic Care may update this Privacy Policy to reflect changes in its services, privacy practices, legal obligations, or technology.

The revised policy will be published on our website with an updated effective date.

15. Contact Information

For privacy-related questions, requests, or concerns, please contact:

Cronic Care, Inc.
Fresno, California, United States
Website: https://cronic.care
Privacy Contact: privacy@cronic.care