Privacy Policy

Recovery Predictive ("we", "us") provides clinical decision-support software to licensed addiction-recovery clinics. This policy explains what information we collect, how we use it, and the rights you have over it.

Information we process

• Account data: name, email, role, and clinic association for staff users.
• Clinical data: patient demographics, assessments, treatment plans, session notes, alerts, and documents entered by your clinic.
• Operational data: audit logs, sign-in events, and usage metrics needed for security and billing.

How we use information

We process clinical data solely on behalf of the clinic that controls it, to deliver the service, generate risk insights, and meet legal and contractual obligations. We do not sell personal data and we do not use protected health information to train machine-learning models.

HIPAA & data protection

We act as a Business Associate to our clinic customers. A signed Business Associate Agreement (BAA) governs handling of PHI. All data is encrypted in transit (TLS 1.2+) and at rest, with row-level access controls scoped to each clinic.

Sharing

We share data only with subprocessors required to operate the service (hosting, email delivery, error monitoring), each bound by a written data-protection agreement.

Your rights

Patients may exercise access, correction, and deletion rights through their treating clinic, who controls the record. Staff users may update or delete their account from Settings.

Contact

Questions: privacy@leanengineering.io.