Privacy Policy

This Privacy Policy explains how ShiftSummary ("we," "us," or "our") collects, uses, discloses, and protects information when you use our service. By using ShiftSummary, you agree to the practices described in this policy.

1. Information We Collect

We collect the following types of information:

• Agency Account Information: Name, email address, phone number, agency name, and billing information provided when creating or managing an account.
• Caregiver Shift Notes: Notes entered by caregivers or submitted via your care management workflow, which may include details about client care activities and wellbeing.
• Client and Family Contact Information: Names and phone numbers of care recipients and their family members or authorized contacts, provided by the agency for the purpose of sending shift summaries.
• Message Logs: Records of SMS messages sent through the ShiftSummary platform, including delivery status and opt-out requests.
• Usage Data: Information about how you interact with our service, including log data, device information, and IP addresses.

2. How We Use Your Information

We use collected information to:

• Deliver shift summary notifications to authorized family members and contacts via SMS.
• Operate, maintain, and improve the ShiftSummary platform.
• Send service-related communications, such as account alerts and support responses.
• Comply with legal obligations, including HIPAA requirements applicable to our role as a Business Associate.
• Prevent fraud and ensure platform security.

We do not sell your information or use it for advertising purposes.

3. SMS Messaging

ShiftSummary sends automated SMS messages to family members and authorized contacts of home care clients. By providing a phone number to your care agency for the purpose of receiving care updates, recipients consent to receive SMS notifications from ShiftSummary on behalf of that agency.

• Message frequency: Messages are sent following each completed caregiver shift for which a summary is generated.
• Message and data rates: Standard message and data rates from your mobile carrier may apply.
• Opt-out: Reply STOP to any message to unsubscribe. You will receive one final confirmation message and no further messages will be sent.
• Opt-in: Reply START to re-subscribe after opting out.
• Help: Reply HELP for assistance, or contact us at hello@shiftsummary.com.

ShiftSummary does not share your mobile number with third parties for their own marketing purposes.

4. HIPAA and Protected Health Information

ShiftSummary acts as a Business Associate under HIPAA for agencies that are Covered Entities. We maintain appropriate safeguards to protect PHI in accordance with the HIPAA Privacy Rule and Security Rule. A Business Associate Agreement is provided with all ShiftSummary plans.

ShiftSummary is not a medical records system and does not replace your care management software or electronic health records platform.

5. Information Sharing and Disclosure

We do not sell or rent your information. We may share information only in the following circumstances:

• Service Providers: With vendors who help us operate the platform (such as cloud hosting and SMS delivery providers), under confidentiality obligations.
• Legal Requirements: When required by law, court order, or government authority.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with appropriate notice to affected parties.
• Consent: With your explicit permission for any other purpose.

6. Data Retention

We retain account and message data for as long as your agency account is active and for a reasonable period thereafter to fulfill legal and business obligations. Agencies may request deletion of their data by contacting us at hello@shiftsummary.com.

7. Security

We implement administrative, technical, and physical safeguards to protect the information we hold. However, no method of transmission over the internet or electronic storage is completely secure. We encourage agencies to follow best practices for securing access to their ShiftSummary accounts.

8. Children's Privacy

ShiftSummary is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us and we will promptly delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify agency account holders of material changes by email or through the platform. Continued use of ShiftSummary after changes take effect constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

• Email: hello@shiftsummary.com
• Website: shiftsummary.com