Privacy Policy

1. Information we collect

• Account information: your email address and password. Any email works; a private email is fine. Your email is used for login and account notices. Passwords are handled by our sign-in provider and stored in hashed form, never as plain text.
• Verification: when you verify, we check your NPI, first name and last name against the public federal NPPES registry. After the check we keep only whether you are verified, your profession (physician or dentist) and specialty. We do not keep your NPI, name or the registry response. To stop duplicate accounts we keep a one-way fingerprint (HMAC-SHA256) of the NPI that is not linked to your account. We do not collect license copies, ID images, selfies or workplace details.
• Your alias and any optional profile details you choose to add.
• Content: your posts and replies on the Wall, messages in Circles, reports you submit and aliases you block. Journal entries and unfinished drafts stay on your device and are not sent to us.
• Technical information: we do not store IP addresses, browser or device information in our app's records. Our hosting and sign-in providers may keep standard operational logs to run and secure the Service.
• Cookies and local storage: used only to keep you signed in and the Service working. We use no analytics, advertising or tracking tools.
• Your consent: posts can reveal information about your mental or physical health. [Separate explicit consent step at sign-up — wording TO BE CONFIRMED BY COUNSEL.] You can withdraw consent at any time by deleting your account.

2. How we use information

We use information to:

• create and secure your account and confirm you are eligible;
• run the Wall and Circles;
• review reports, enforce our Terms, and keep members safe;
• send messages about your account or the Service;
• fix problems and improve the Service; and
• meet legal obligations.

We do not sell your personal information. We do not use your posts or verification details to target advertising, and we do not share them with advertisers.

3. Who can see what

• Other members see your alias and what you post on the Wall and in Circles you join. They do not see your email, name, or NPI.
• Your Journal is visible only to you, on your device.
• Lansoft administrators can see aliases, verified status, profession, specialty and member content in order to moderate. They can hide posts and suspend aliases. They cannot see login emails, and no verification identity data is kept for them to see. Every admin action is logged.

4. When we share information

• Service providers that host and run the Service for us: Lovable (hosting) and Lovable Cloud (database and sign-in). [Confirm with providers in writing that member data is not used to train AI models.]
• Verification: we send your NPI and name to the public NPPES registry to check them.
• Legal requirements: if we receive a subpoena, court order, or other legal demand we are required to follow. Your alias is linked to your account and login email, so these could be disclosed. Where the law allows, we will try to notify you before disclosing.
• Safety: [where we believe in good faith that disclosure is needed to prevent imminent serious harm — TO BE DECIDED WITH COUNSEL, consistent with Terms §7].
• Business transfer: if Lansoft is involved in a merger, acquisition, or sale of assets. This Policy would continue to apply to your information.

We do not share your information with your employer, licensing boards, credentialing bodies, or insurers, unless the law requires it.

5. How long we keep information

• Account information is kept while your account is open.
• Wall posts fade from member view after 7 days and are permanently deleted after 90 days by default.
• Circles close one week after they start. Their messages are no longer visible and are permanently deleted after 30 days by default.
• Administrators can change these periods. Deletion runs daily, so it can happen up to 24 hours after a period ends.
• When you delete a post, it is permanently deleted. When you delete your account, your account and member content are permanently deleted. The unlinked NPI fingerprint is kept to prevent duplicate accounts. Copies may remain in backups for up to [X] days, and we may keep information longer where the law requires it.

6. Your choices and rights

You can update your alias, delete posts you made, and delete your account from My alias. You can also email info@kintikki.com to ask for a copy of your information, a correction, or deletion. Depending on where you live, you may have additional rights under state privacy law, and we will respond as that law requires.

7. Security

We use encryption in transit, database access rules that limit each member to what they are allowed to see, and limited administrator access to protect your information. No system is completely secure, so we cannot guarantee absolute security. If a breach affects your information, we will notify you as required by law.

8. Health information and HIPAA

Lansoft is not a healthcare provider or a "covered entity" under HIPAA, and the Service is not designed to hold patient information. Do not post anything that identifies a patient. Information you share about your own wellbeing is protected by this Policy and by our security practices.

9. Children

The Service is only for adults who are licensed healthcare professionals. We do not knowingly collect information from anyone under 18.

10. Where data is stored

The Service is run from the United States. Your information is stored in [the United States — TO BE CONFIRMED WITH PROVIDERS].

11. Changes to this Policy

If we make material changes, we will tell you by email or in the Service before they take effect, and we will update the effective date above.

12. Contact

Lansoft Inc., [BUSINESS ADDRESS]. Email: info@kintikki.com