Dysphagia Intervention Plan

1. Who This Policy Covers

Dysphagia Intervention Plan is operated by Rebecca Henning. This policy applies to the web and mobile service and explains how information is handled when clinicians, clinic administrators, and patients use it.

Clinicians and clinics enter and manage patient records. A clinic or clinician may have separate legal and professional duties governing those records. Patients should contact the clinician or clinic that provided their plan for questions about records maintained on that organization's behalf.

2. Information the Service Handles

Clinician and clinic-administrator information may include name, email address, username, organization details, profile image, account role, clinic invitations, and subscription status.

Patient information entered by a clinician or clinic may include name, date of birth, patient code or other identifier, assessment details, health history entered into notes, diet and liquid recommendations, treatment plans, exercises and frequencies, progress or completion records, and messages between the patient and care team. A patient account may include email address and information needed to link that account to the assigned record.

The service also handles information you send in support requests, account and plan activity needed to operate the product, and subscription details. Stripe processes payment information at checkout; the app does not store full payment-card numbers. The app uses Supabase for account authentication and database services. Technical information may also be processed by the infrastructure providers used to run the service.

3. How Information Is Used and Shared

Information is used to create and display care plans, authenticate accounts, link patients to their own plans, support clinician-patient messaging and exercise tracking, administer subscriptions, respond to support requests, maintain service operations, and address security or legal issues.

Information is made available to the clinician, clinic, or patient accounts authorized for the relevant workflow. Supabase provides authentication and database services; Stripe processes subscription checkout and billing. Infrastructure providers may process technical information required to host and operate the web and mobile service.

4. Organization and Clinician Responsibilities

Clinicians and clinic administrators are responsible for determining whether they are authorized to enter patient information, providing any notices and obtaining permissions required for their use, keeping account access appropriate, maintaining records they need for care, and complying with applicable professional, privacy, and recordkeeping obligations. They should direct patient requests about records they manage to the relevant clinic or clinician.

This policy does not establish a business associate agreement or represent that the service or any provider is HIPAA compliant. Organizations must confirm that their agreements, deployment configuration, and workflows are appropriate before entering regulated information.

5. Security

The service uses account authentication and database access policies to limit access to records. The apps encrypt selected information stored locally on a device. These controls do not mean that all information is end-to-end encrypted, and this policy makes no claim about encryption at rest for every database, backup, or infrastructure provider. Security settings and agreements depend in part on production configuration and provider terms.

No method of storage or transmission can be described as completely secure. Protect your credentials, use the service only on devices and accounts you are authorized to use, and report suspected unauthorized access using the contact below.

6. Retention and Deletion

Account and care-plan information is retained while needed to provide the service, follow the instructions of the clinician or clinic managing the record, and meet applicable obligations. Account holders can use account-deletion controls where available or request help at the contact below. Deleting a patient login does not necessarily delete the separate patient record managed by a clinic.

A clinic-scoped cleanup function can delete some clinic patient records and related data after 60 days without recorded access. This cleanup is configuration-dependent and does not set a 60-day retention period for every account, clinic, or record. Exercise-completion information stored locally may be cleaned up after 30 days when app maintenance runs; server-side exercise and audit records do not have a single published fixed retention period.

The service does not publish a fixed backup-retention schedule. Deletion from active systems may not immediately remove copies retained in backups or by infrastructure providers under their recovery processes. Provider retention terms and the production configuration govern those copies.

7. Privacy Requests and Choices

You may contact Rebecca Henning to ask about information associated with your account or to request access, correction, or deletion, subject to applicable law and the role of the clinician or clinic managing the record. Patients should also contact that clinician or clinic for records they supplied or control. We will review requests and explain if a request must be handled by the organization that provided the service or is limited by law or recordkeeping obligations.

Available plan exports may not include all account or service information. We do not promise a particular response deadline or deletion of all copies on a fixed schedule.

8. Children and Authorized Representatives

Clinicians may enter information about patients under 18. A parent, guardian, or other legally authorized representative should assist with a minor's account and requests where required by applicable law. The clinician or clinic remains responsible for determining who may access the minor's record.

9. Changes and Contact

We may revise this policy when the service or its information practices change. The current version and effective date will be posted here. Material changes may require renewed acceptance before continued use.

Privacy contact: Rebecca Henning at neurorestoretherapy@gmail.com.