Privacy Policy

1. Information We Collect

TrunkFlow AI, LLC collects information necessary to provide our mobile platform to pediatric field therapists and their affiliated clinics or agencies. This includes account information (name, email, organization, role), clinical data (session notes, treatment goals, therapy materials), location data (GPS coordinates during mileage logging, with explicit provider consent), and usage data (app interactions and telemetry without PHI).

2. How We Use Your Information

We use collected data solely to operate, maintain, and improve TrunkFlow AI. Clinical data is used to generate AI assisted documentation drafts and enable billing workflows. We do not sell, rent, or trade your personal or clinical information to third parties.

3. Health Information and HIPAA

TrunkFlow AI is designed as a HIPAA ready platform. For eligible plan subscribers, we execute a Business Associate Agreement (BAA) that obligates us to protect protected health information (PHI) in accordance with HIPAA's Privacy, Security, and Breach Notification rules. PHI is encrypted at rest and in transit, stored only in BAA covered infrastructure, and never used for marketing purposes.

4. Data Sharing and Disclosure

We share data only as required to deliver the service: Supabase and AWS for storage and compute under BAA covered agreements, Stripe for payment processing without receiving clinical data, Mapbox for GPS routing solely during active trips, and legal disclosures when required by law or to protect the rights and safety of TrunkFlow, our users, or others.

5. Data Retention and Deletion

You retain full ownership of all clinical data. Upon cancellation, your data remains accessible for export for 30 days and is then securely deleted from active systems within 60 days, except where retention is required by law. Backup data is purged on standard retention cycles.

6. Cookies and Tracking

TrunkFlow AI's mobile apps do not use advertising cookies. Our website may use essential cookies for authentication and security. No third party advertising or analytics cookies are deployed.

7. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, or delete your personal data, request data portability, or withdraw consent for certain processing activities. To exercise these rights, contact us at trunkflowai@gmail.com.

8. Children's Privacy

TrunkFlow AI is a professional therapy platform and does not collect data directly from children. All patient data is entered by licensed healthcare providers. Providers are responsible for obtaining appropriate guardian consent for any clinical documentation entered into the platform.

9. Changes to This Policy

We may update this Privacy Policy to reflect changes in our services or legal requirements. Material changes will be notified via email and in app notification at least 14 days before taking effect. Your continued use after the updated policy takes effect constitutes acceptance.

10. Contact Us

For privacy related inquiries, data requests, or BAA questions: trunkflowai@gmail.com
TrunkFlow AI, LLC · Seattle, Washington, USA