Privacy Policy

Lifecare EMS provides an operations platform for licensed ambulance agencies. We process personal information, including Protected Health Information ("PHI") as defined by HIPAA, on behalf of our customer agencies under a Business Associate Agreement.

• Account data: name, email, agency, role, authentication metadata.
• Operational data: transports, routes, fleet telematics, audit events.
• PHI submitted by customer agencies: patient demographics, insurance, face sheets.
• Technical data: IP address, browser, device, and log information for security.

• To provide, secure, and improve the platform.
• To enforce role-based access and tenant isolation.
• To meet legal, regulatory, and audit obligations.

We do not sell personal information. We share data only with subprocessors required to run the service (hosting, email delivery, AI inference) under written data-protection terms.

Data is encrypted in transit and at rest. Access is restricted by least-privilege, row-level security, and full audit logging. Sessions expire after inactivity.

Patients should contact their healthcare provider to exercise rights over PHI. Agency users may update or delete account data from the in-app Account page or by contacting their admin.

Questions about this policy: andrew@leanengineering.io.