Security & privacy
Where the data livesand who can reach it.
Practice administrators ask this first. Here it is before you have to.
For practices
You hold the recordPhotos and submissions belong to your practice. We process them on your behalf as a business associate under a signed agreement.
Separated by practiceYour patients, your staff and your data are scoped to your practice and are not reachable from any other practice's account.
Individually attributedNo shared logins anywhere in the platform. Every view, acknowledgment and signature is tied to a named person. That attribution is the audit trail.
Encrypted in transit and at restPhotos never pass through a browser cache or an email server. Access is time-limited and per-request.
Independently reviewedThe authentication layer is reviewed by an outside security firm before any practice goes live. That review is a gate, not a milestone.
Exportable, and yours on the way outIf you leave, you take the record with you in a readable format.
For patients
Your photos are not public and are not for saleThey are part of your care record with your surgeon's practice. They are never sold and never used in advertising.
Research use is optional and separateAt enrollment you're asked, separately, whether de-identified images may be used to improve wound care. Declining changes nothing about your care.
You can ask for your recordContact your surgeon's practice, the same as any other part of your chart.
How we reach youCheck-in reminders arrive as push notifications from the app. Text messaging is a separate, explicit opt-in inside the app — it is never switched on for you at enrollment, and you can reply STOP at any time.