Privacy Policy

Survipath (“we,” “us”) offers software that helps community oncology practices and hospitals run cancer survivorship programs. This policy explains what we collect through survipath.com and our demo, and how we use it.

The demo is not for real patient information

Our demo is for evaluation only. It is not intended to store protected health information (PHI) as defined by HIPAA. Do not enter real patient names, dates of birth, record numbers, or other identifying details. We block some identifiers automatically, but you are responsible for using only fictional information. We do not sign business associate agreements for the demo.

What we collect

• Account information: your name, work email, and a securely hashed password.
• Organization information: practice name, type, accreditation status, committee members, and services you enter.
• Demo content: fictional notes, dictation text, and the care plans and reports generated from them.
• Activity logs: actions taken in the app (for example, “care plan signed”) for security and auditing.
• Technical data: IP address, browser type, and request logs kept by our hosting providers.

How we use it

• To run the demo and generate care plans, notes, and reports you request.
• To secure the service, prevent abuse, and troubleshoot problems.
• To contact you about your account or a pilot you asked about.

We do not sell your information or use it for advertising.

Voice notes

The “Speak notes” button uses your browser’s built-in speech recognition. Depending on your browser, audio may be processed by the browser maker (for example, Google or Apple) under their privacy terms. We receive only the text.

Service providers

We share data only with providers that help us run the service:

• Supabase (database and sign-in)
• Railway (hosting)
• Anthropic (AI drafting of notes, care plans, and reports)

We may also disclose information when required by law or to protect our rights and users.

Cookies

We use only essential cookies to keep you signed in. We do not use advertising or tracking cookies.

Security

Data is encrypted in transit (HTTPS) and at rest by our providers. Each organization’s data is isolated with database access rules, and account actions are logged. No system is perfectly secure; please report concerns to the address below.

Retention and deletion

You can delete your demo organization and its data at any time from Privacy & data in the app. We may remove inactive demo accounts after 90 days. Backups are cleared on our providers’ normal schedules.

Your choices

You can request access to, correction of, or deletion of your personal information by emailing us. Depending on where you live, you may have additional rights under state law, and we will honor them.

Children

The service is for healthcare professionals and is not directed to anyone under 18.

Changes

We will post updates here and change the date above. Material changes will be emailed to account holders.

Contact

Email privacy@survipath.com.