flex-flow-privacy-policy/privacy-policy.html at main · abbasnasser/flex-flow-privacy-policy · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>Privacy Policy - FlexFlow Healthcare Management</title>
    <style>
        body {
            font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Oxygen, Ubuntu, Cantarell, sans-serif;
            line-height: 1.6;
            margin: 0;
            padding: 20px;
            max-width: 800px;
            margin: 0 auto;
            color: #333;
        }
        h1 {
            color: #2c5aa0;
            border-bottom: 2px solid #2c5aa0;
            padding-bottom: 10px;
        }
        h2 {
            color: #2c5aa0;
            margin-top: 30px;
        }
        h3 {
            color: #2c5aa0;
        }
        .last-updated {
            color: #666;
            font-style: italic;
            margin-bottom: 30px;
        }
        .contact-info {
            background: #f5f5f5;
            padding: 15px;
            border-radius: 5px;
            margin: 20px 0;
        }
        .warning {
            background: #fff3cd;
            border: 1px solid #ffeaa7;
            padding: 15px;
            border-radius: 5px;
            margin: 15px 0;
        }
    </style>
</head>
<body>
    <h1>Privacy Policy for FlexFlow Healthcare Management</h1>
    <p class="last-updated">Last updated: December 2023</p>

    <div class="warning">
        <strong>Important:</strong> FlexFlow is a healthcare management application designed for managing patient data. This application complies with applicable healthcare privacy regulations.
    </div>

    <h2>1. Introduction</h2>
    <p>FlexFlow ("we," "our," or "us") is a healthcare management application developed for flexflow to manage patient care coordination between families, nurses, and doctors. We are committed to protecting the privacy and security of your health information.</p>

    <h2>2. Information We Collect</h2>

    <h3>Protected Health Information (PHI)</h3>
    <p>As a healthcare application, we may collect and process the following types of protected health information:</p>
    <ul>
        <li><strong>Patient Identifiers:</strong> Name, date of birth, contact information</li>
        <li><strong>Medical Information:</strong> Medical history, treatment plans, medications, vital signs</li>
        <li><strong>Clinical Notes:</strong> Doctor's notes, nurse observations, care plans</li>
        <li><strong>Treatment Data:</strong> Appointment schedules, medication schedules, progress notes</li>
        <li><strong>User Account Information:</strong> Role-based access credentials (Doctor, Nurse, Family)</li>
    </ul>

    <h3>Technical Information</h3>
    <ul>
        <li>Device information for security and performance</li>
        <li>App usage logs for troubleshooting</li>
        <li>Authentication and access logs</li>
    </ul>

    <h2>3. How We Use Your Information</h2>
    <p>We use the collected information exclusively for:</p>
    <ul>
        <li><strong>Patient Care Coordination:</strong> Facilitating communication between healthcare providers and families</li>
        <li><strong>Treatment Purposes:</strong> Managing patient treatment plans and medical records</li>
        <li><strong>Healthcare Operations:</strong> Quality improvement, staff training, and administrative functions</li>
        <li><strong>Role-Based Access:</strong> Providing appropriate information access based on user roles (Doctor, Nurse, Family)</li>
        <li><strong>Security:</strong> Monitoring and preventing unauthorized access</li>
    </ul>

    <h2>4. Data Security and Confidentiality</h2>

    <h3>Security Measures</h3>
    <p>We implement comprehensive security measures to protect health information:</p>
    <ul>
        <li>Data encryption in transit and at rest</li>
        <li>Role-based access controls</li>
        <li>Secure authentication protocols</li>
        <li>Regular security audits and monitoring</li>
        <li>Access logging and audit trails</li>
    </ul>

    <h3>Role-Based Access</h3>
    <ul>
        <li><strong>Doctors:</strong> Full access to patient medical records and treatment plans</li>
        <li><strong>Nurses:</strong> Access to patient care data and treatment implementation</li>
        <li><strong>Family Members:</strong> Limited access to relevant patient information and care updates</li>
    </ul>

    <h2>5. Data Sharing and Disclosure</h2>
    <p>We do not sell or rent patient health information. Disclosure only occurs in these circumstances:</p>
    <ul>
        <li><strong>Treatment Purposes:</strong> Sharing with authorized healthcare providers involved in patient care</li>
        <li><strong>Legal Requirements:</strong> When required by law or legal proceedings</li>
        <li><strong>Healthcare Operations:</strong> For quality improvement and administrative purposes</li>
        <li><strong>With Patient Consent:</strong> When explicitly authorized by the patient or legal representative</li>
    </ul>

    <h2>6. User Roles and Responsibilities</h2>

    <h3>Account Creation</h3>
    <p>All user accounts are created manually by authorized administrators to ensure proper role assignment and access controls.</p>

    <h3>Role Definitions</h3>
    <ul>
        <li><strong>Doctors:</strong> Medical professionals responsible for patient diagnosis and treatment planning</li>
        <li><strong>Nurses:</strong> Healthcare providers responsible for patient care implementation</li>
        <li><strong>Family Members:</strong> Designated family or caregivers with limited patient information access</li>
    </ul>

    <h2>7. Data Retention</h2>
    <p>We retain health information in accordance with:</p>
    <ul>
        <li>Applicable healthcare regulations and laws</li>
        <li>Medical record retention requirements</li>
        <li>Organizational policies and procedures</li>
    </ul>

    <h2>8. Your Rights</h2>
    <p>Depending on your jurisdiction, you may have the right to:</p>
    <ul>
        <li>Access your health information</li>
        <li>Request corrections to your records</li>
        <li>Request an accounting of disclosures</li>
        <li>Request restrictions on certain uses and disclosures</li>
        <li>File a complaint if you believe your privacy rights have been violated</li>
    </ul>

    <h2>9. Compliance with Regulations</h2>
    <p>FlexFlow complies with applicable healthcare privacy regulations including:</p>
    <ul>
        <li>HIPAA (Health Insurance Portability and Accountability Act)</li>
        <li>GDPR (for European users)</li>
        <li>Other applicable national and state healthcare privacy laws</li>
    </ul>

    <h2>10. Breach Notification</h2>
    <p>In the event of a data breach involving protected health information, we will notify affected individuals and regulatory authorities as required by law.</p>

    <h2>11. Changes to This Policy</h2>
    <p>We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify users of material changes.</p>

    <h2>12. Contact Information</h2>
    <div class="contact-info">
        <p><strong>Privacy Officer:</strong> abbas nasser</p>
        <p><strong>Email:</strong> privacy@flexflow.com</p>
        <p><strong>Phone:</strong> 71589944</p>
        <p><strong>Address:</strong>lebanon</p>

        <p><strong>For Security Concerns:</strong> security@flexflow.com</p>
    </div>

    <h2>13. Complaints</h2>
    <p>If you believe your privacy rights have been violated, you may file a complaint with:</p>
    <ul>
        <li>Our Privacy Officer at the contact information above</li>
        <li>The appropriate government regulatory authority</li>
    </ul>
</body>
</html>