Privacy-first clinical documentation

• Account information such as name, email address, Google authentication identifiers, clinic profile details, and billing status.
• Workspace content entered into CuraMonk, including patient records, journey context, notes, templates, approvals, exports, audit events, and settings.
• Technical information such as device, browser, request metadata, logs, security events, and product usage needed to operate and protect the service.
• Support communications you send to us, including screenshots, descriptions, and contact details.

• Provide, secure, maintain, and improve CuraMonk.
• Authenticate users, manage subscriptions, enforce access controls, and support clinic configuration.
• Generate clinician-reviewed draft notes and workspace summaries requested by authorized users.
• Detect, prevent, and investigate security, misuse, fraud, reliability, and compliance issues.
• Respond to support requests and communicate service, billing, security, or policy updates.

CuraMonk may process protected health information when a covered entity or authorized clinician enters PHI into the workspace. When required, CuraMonk makes a Business Associate Agreement available to customers before workspace use with PHI.

Customers are responsible for ensuring they have the authority to enter patient information, configure appropriate access, and use generated drafts only after clinical review.

We do not sell workspace content or patient information. We may share information with service providers that help operate CuraMonk, including hosting, authentication, database, payment, email, analytics, support, security, and AI infrastructure providers, subject to appropriate contractual safeguards where required.

We retain information for as long as needed to provide the service, comply with legal obligations, resolve disputes, enforce agreements, preserve audit integrity, and support customer retention settings. To request help with privacy or deletion questions, contact [email protected].