Privacy Policy & HIPAA Compliance

Last Updated: 10/6/2026

HIPAA Compliance Statement

LTC-AngelRounds is designed with HIPAA compliance in mind. We implement administrative, physical, and technical safeguards to protect Protected Health Information (PHI).

Business Associate Agreement (BAA)

Covered entities using LTC-AngelRounds must execute a Business Associate Agreement with base44 platform. Contact your administrator for BAA execution.

Technical Safeguards
  • Encryption:

    All data is encrypted in transit (TLS 1.3) and at rest (AES-256)

  • Access Controls:

    Role-based access control (RBAC) ensures users only see authorized information

  • Audit Logs:

    All PHI access is automatically logged with user, timestamp, and action

  • Authentication:

    Multi-factor authentication available, password complexity requirements enforced

  • Session Management:

    Automatic session timeout after period of inactivity

  • Backup & Recovery:

    Automated encrypted backups with disaster recovery procedures

Administrative Safeguards
  • Security Officer:

    Designated privacy and security officers oversee HIPAA compliance

  • Training:

    All users must complete HIPAA training before system access

  • Risk Assessment:

    Regular security risk assessments conducted annually

  • Incident Response:

    Breach notification procedures in place per HIPAA requirements

Data Protection & Privacy

What Information We Collect

We collect and process the following PHI:

  • • Resident names, unit numbers, and care levels
  • • Health status observations and assessment notes
  • • Photos related to care (environmental, safety concerns)
  • • Staff names and contact information
  • • Emergency contact information

How We Use Information

  • • To provide quality care and safety monitoring
  • • To communicate with care team members
  • • To generate reports for quality assurance
  • • To comply with regulatory requirements

Data Retention

Records are retained for minimum of 6 years as required by HIPAA. Data can be exported or deleted upon request by authorized administrators.

Your Rights

Residents and their representatives have the right to:

  • • Access their PHI
  • • Request amendments to their records
  • • Receive an accounting of disclosures
  • • Request restrictions on certain uses and disclosures
  • • File a complaint with covered entity or HHS
Contact & Reporting

Report a Security Concern

If you suspect a security incident or privacy breach, immediately contact:

Security Officer

Email: security@angelrounds.app

Phone: (555) 123-4567

Available 24/7 for security incidents

Privacy Questions

For questions about this privacy policy or your rights: privacy@angelrounds.app

This privacy policy is subject to change. Users will be notified of material changes. Continued use of LTC-AngelRounds constitutes acceptance of updated terms.