CuraPath ("we", "our", or "us") is a mobile app that helps patients follow their hospital discharge instructions. This policy explains what information we collect, how we use it, and your rights.
Uploaded documents are processed using Anthropic's Claude models through Amazon Web Services (AWS) Bedrock, under a HIPAA Business Associate Agreement with AWS. Your discharge paperwork is used only to extract structured care instructions and is not used to train AI models. We do not store the raw image or PDF after processing is complete.
Your data is stored on secure cloud servers. Passwords are hashed using bcrypt and are never stored in plain text. Access tokens expire after one hour; refresh tokens expire after 30 days. All data in transit is encrypted via HTTPS/TLS.
We retain your data for as long as your account is active. You can permanently delete your account and all associated health data at any time from the Settings screen in the app. Deletion is immediate and irreversible.
CuraPath is not directed at children under 13. We do not knowingly collect personal information from children under 13.
CuraPath is a personal care-tracking tool, not a medical device. It does not provide medical advice, diagnosis, or treatment recommendations. AI-extracted content may contain errors — always refer to your original discharge paperwork and contact your care team with any health concerns. In an emergency, call 911.
Questions about this policy? Email us at kspothuganti@gmail.com.