Privacy Policy

1. Information We Collect

We collect account information you provide (such as your name, email, and clinical specialty) and usage information generated as you interact with the Service, including the questions you ask and answers returned.

Authentication is handled by our authentication provider; your password is never stored by CAN Evidence.

2. No Patient Data

The Service is not intended to receive identifiable patient information. You agree not to submit protected health information (PHI). Do not include names, dates, record numbers, or other identifiers in your questions.

3. How We Use Information

We use your information to provide and improve the Service, to maintain your conversation history, and to keep the Service secure. Your data is scoped to your account and not shared with other users.

4. Third-Party Processing

To generate answers, your questions may be processed by third-party AI and medical-evidence providers. Because you must not submit PHI, this processing is limited to non-identifiable clinical questions.

5. Data Security

We maintain administrative, technical, and organizational safeguards designed to protect your information against unauthorized access, disclosure, alteration, and loss, including encryption in transit and access controls scoped to your account. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

6. Data Retention and Your Choices

We retain your information for as long as your account is active or as needed to provide the Service and to meet our legal obligations. You can delete individual conversations at any time. To request deletion of your account, contact us through the support channel provided to you.

7. Your Privacy Rights

Depending on where you live, you may have rights over your personal information, such as the right to access, correct, delete, or port your data, and to object to or restrict certain processing. Residents of the European Economic Area and the United Kingdom have these rights under the GDPR and UK GDPR; California residents have rights under the CCPA/CPRA, including the right to know, delete, and correct personal information and to not be discriminated against for exercising those rights. We do not sell your personal information. To exercise any of these rights, contact us through the support channel provided to you; we will respond as required by applicable law.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected here and, where appropriate, accompanied by an updated clinical-use acknowledgement.

9. Contact Us

This Service and your personal information are controlled by CAN Mobilities, Inc., a Delaware corporation. For privacy questions or to exercise your rights, contact us through the support channel provided to you within the Service.