ClearMindEHR Privacy Policy

This policy explains how ClearMindEHR ("ClearMindEHR", "we") handles information on this website (clearmindehr.ai) and the ClearMindEHR platform. Patient health information that ClearMindEHR processes on behalf of a healthcare practice is governed by that practice's Business Associate Agreement (BAA) and the practice's own Notice of Privacy Practices — not by this website policy.

Who we are

ClearMindEHR (also "ClearMindEHR") is an AI-native, psychiatry-native electronic health record platform offered to licensed healthcare practices. ClearMindEHR and the ClearMind Care patient app are products of the APEX platform.

Information we collect on this site

When you request a demo or contact us, we collect what you submit — name, work email, practice or organization, role, phone, and your message. We also collect standard technical logs (IP address, browser, pages viewed) to operate and secure the site.

How we use it

To respond to your inquiry, schedule and tailor a demo, communicate with you about ClearMindEHR, and improve the site. We do not sell your information, and we do not use it for advertising profiling.

Protected health information (PHI)

When a practice uses ClearMindEHR, ClearMindEHR acts as a HIPAA Business Associate. PHI is processed under a BAA with the practice, and protected with HIPAA-aligned controls: TLS between your browser and our network edge, encryption at rest of the production database (provided by our hosting provider), per-practice separation enforced in the database with row-level security on most patient-data tables, and audit logging of access to patient records. We do not sell PHI. Any future use of de-identified data for research is done only as permitted by contract and law, after de-identification.

Sharing

We share information with service providers (subprocessors) who help us operate ClearMindEHR under appropriate confidentiality terms. We disclose information if required by law. We do not sell personal information.

Security

We use encryption, role-based access, per-practice data separation enforced in the database, audit logging, and monitoring. No system is perfectly secure, but security is a first-class design goal of the platform.

Your choices

To access, correct, or delete information you submitted through this site, contact us at the address below. Practices and patients have additional rights under HIPAA and applicable state law, exercised through the practice.

Contact

Questions about this policy: [email protected].