Privacy notice

§1. Introduction

Care Journal (“Care Journal,” “we,” “us,” “our”) is a product of Burna AI, Inc., a Delaware corporation. This Privacy Notice explains how Care Journal collects, uses, shares, and protects information about you when you use Care Journal’s mobile app, web app, and related services (collectively, the “Service”).

By using the Service, you agree to the practices described in this Privacy Notice. If you do not agree, do not use the Service.

This Privacy Notice does not apply to data your hospital, your clinician, your trial sponsor, or any other third party collects about you outside of Care Journal. Those parties have their own privacy practices and notices.

§2. Information We Collect

We collect three categories of information.

Information you provide directly: your name, date of birth, and contact information (email, phone) when you create an account; your cancer status, cancer type, and treatment regimen if you choose to provide them; audio recordings of doctor visits you choose to record; symptom notes, diary entries, and other content you create; profile information for dependents you add to your account; information you provide in support requests.

Information we collect automatically: device type and operating system; anonymized usage data (features used, time of use, errors encountered); IP address (used to determine general region for routing to correct data residency); crash reports (with PHI scrubbed before transmission).

Information from third parties (only with your explicit consent): calendar information (if you connect your Google Calendar or iCloud Calendar); clinical trial team information (if you arrive via a coordinator-issued token link).

We do not collect device advertising identifiers. We do not collect data from third-party advertising networks. We do not maintain a behavioral profile of you for advertising purposes.

§3. How We Use Information

We use your information to provide the Service (record visits, generate summaries, store your record); to process structured submissions to your clinical trial team if you are using trial mode; to send you communications about the Service (release notes, security notices, response to support inquiries); to improve the Service (debugging, accessibility testing, latency optimization, with no PHI used in this work); and to comply with legal obligations (HIPAA reporting, GDPR data subject requests, regulatory disclosure).

We do not use your information for advertising. We do not sell your information. We do not use your record to train AI models without your explicit, opt-in, revocable consent.

§4. How We Share Information

We share information only in these situations.

With service providers (subprocessors) who help us operate the Service. All subprocessors handling Protected Health Information have signed Business Associate Agreements with Burna AI. Subprocessors include our cloud hosting provider, our transcription provider, our authentication provider, and our email delivery provider.

With your clinical trial team (only if you are in trial mode). Trial submissions you make through a coordinator-issued token are shared with the trial team identified at the time the token was issued. This sharing is governed by your trial consent form and your hospital’s privacy practices.

With people you explicitly share with. Caregivers, family members, clinicians outside your trial team, or other Care Journal users you grant access to.

With legal authorities, only when required by law. If we receive a subpoena, court order, or other binding legal demand, we may be required to share information. We will, where legally permitted, notify you before disclosure so you have the opportunity to seek a protective order.

In a business transfer. If Burna AI is acquired or merged with another entity, your information may transfer as part of that transaction. We will notify you in advance and you will have the option to delete your account before the transfer takes effect.

We do not share information with pharma sponsors, payers, employers, or any other party without your explicit consent.

§5. Your Rights

You have rights over your information. These rights vary by jurisdiction. We honor the strongest applicable protections for every user.

Right to access. You can request a copy of all information we hold about you, in a standard, machine-readable format. We respond within thirty days, usually faster.

Right to correction. You can correct inaccurate information directly in the app, or by writing to privacy@carejournal.ai.

Right to deletion. You can delete your account and all associated data at any time. Deletion is permanent. The audit log retains a tombstone (a record that deletion occurred) for compliance purposes but does not retain the content.

Right to portability. You can export your data and take it to another service.

Right to withdraw consent. You can withdraw consent for any optional data processing at any time, with no penalty.

Right to object. You can object to specific processing activities. We will stop unless we have a legal basis to continue (in which case we will explain).

Right to lodge a complaint. If you believe we have violated your privacy rights, you can file a complaint with your local data protection authority. In the EU, this is your member state’s supervisory authority. In the UK, this is the Information Commissioner’s Office. In the US, this is the Office for Civil Rights at HHS for HIPAA matters.

To exercise any of these rights: privacy@carejournal.ai.

§6. Data Retention

We retain information as long as you have an active account, or as long as we are legally required to.

Active accounts: information is retained until you delete it or delete your account.

Inactive consumer accounts: anonymous sessions that do not convert to an account are purged thirty days after last activity.

Deleted accounts: content is permanently deleted. Audit logs (without content) are retained for the period required by HIPAA, GDPR, or other applicable law.

Trial-mode submissions: your trial record with your hospital is retained according to your trial sponsor’s retention schedule, typically twenty-five years for FDA-regulated trials. This is a separate legal matter governed by your trial consent form.

§7. Security

We use industry-standard security practices to protect your information: encryption at rest (AES-256); encryption in transit (TLS 1.3); multi-factor authentication on internal access to production systems; audit logging for all access to patient data; annual third-party penetration testing; continuous vulnerability scanning; incident response process with notification timelines.

No system is perfectly secure. If a security incident affects your information, we will notify you in accordance with applicable law (HIPAA breach notification, GDPR Article 33 and 34, state breach notification laws).

To report a security issue: security@carejournal.ai. Our responsible disclosure policy is available on request.

§8. International Transfers

For users in the European Economic Area, UK, or other jurisdictions with cross-border data transfer restrictions: your data is stored in EU-region cloud infrastructure and does not cross your country’s borders without your consent. Where transfers are required (for example, certain support operations), we use Standard Contractual Clauses or other lawful transfer mechanisms.

§9. Children’s Privacy

Care Journal is designed for adult use. We do not knowingly collect information from children under thirteen (under sixteen in the EU) without parental consent. Pediatric oncology patients are typically managed by a parent or guardian as a dependent on the parent’s account; the parent’s consent governs the child’s record.

If you believe a child’s information has been collected without proper consent, write to privacy@carejournal.ai.

§10. State-Specific Disclosures

California residents (CCPA / CPRA): Care Journal honors CCPA rights including the right to know what personal information is collected, the right to delete personal information, the right to opt out of the sale or sharing of personal information (we do not sell or share for cross-context behavioral advertising; the right is honored by default), and the right to non-discrimination for exercising these rights. The categories of personal information we collect are described in §2 above.

Colorado, Connecticut, Texas, Utah, Virginia residents: we honor the rights established by your state’s privacy law, including the rights to access, correct, delete, and port your personal data, and to opt out of targeted advertising, sale, and certain profiling. We do not engage in targeted advertising or sale.

Other US states: we honor applicable state privacy laws as they are enacted. Updates to this Privacy Notice will be made as new laws take effect.

§11. Changes to This Notice

We may update this Privacy Notice. Material changes will be announced by email to your registered address and by an in-app notice. The “Last Updated” date at the top of this notice reflects the most recent change.

If you do not agree to a material change, you have the right to delete your account before the change takes effect.

§12. Contact

For privacy questions, data subject requests, or complaints: privacy@carejournal.ai.

Postal address: Burna AI, Inc., Atlanta, Georgia.