Privacy Policy
This Privacy Policy explains how Digital Bill Music, Software & Design ("we", "us") collects, uses, and protects information when you use NursingHomeMenu (the "Service").
1. Information We Collect
- Account information: your name, email address, password (stored only as a secure hash), and role.
- Facility information: facility name, address, state, resident counts, and aggregated dietary profiles (for example, "12 diabetic, 4 pureed").
- Billing information: handled directly by Stripe. We receive a customer ID, subscription status, and the last four digits of your card. We never see or store full card numbers.
- Usage and technical data: pages visited, menus generated, IP address, browser type, and error logs used for security and troubleshooting.
2. What We Do Not Collect
The Service is designed not to receive protected health information. Do not enter resident names, birth dates, record numbers, or other individually identifiable health information. If such information is entered, we will delete it upon discovery.
3. How We Use Information
- To provide the Service, including generating menus, recipes, and PDFs.
- To process subscriptions and send account emails such as password resets and billing notices.
- To secure the Service, prevent abuse, and fix problems.
- To improve the Service using de-identified, aggregated data.
We do not sell your personal information, and we do not use it for third-party advertising.
4. Service Providers
We share only the information needed with providers that help run the Service:
- Stripe — payment processing and subscription billing.
- Anthropic — AI model provider. Facility dietary parameters (counts, diet types, preferences) are sent to generate menus. Account names, emails, and billing details are not included.
- Our web hosting provider — stores the application and database in the United States.
5. Data Retention
We keep account and menu data while your account is active so you can access your menu history. After cancellation, we retain data for up to 12 months to allow reactivation and to meet legal and accounting obligations, then delete or de-identify it. You may request earlier deletion at any time.
6. Security
We use encrypted HTTPS connections, hashed passwords, parameterized database queries, and access controls. No system is perfectly secure, and we cannot guarantee absolute security.
7. Your Choices and Rights
You can update your account and facility information from your Settings page. You may request a copy, correction, or deletion of your personal information by emailing us. Depending on where you live, you may have additional rights under applicable law, and we will honor verified requests as required.
8. Cookies
We use only essential cookies needed to keep you signed in and protect your session. We do not use advertising cookies.
9. Children
The Service is intended for business use by adults and is not directed to children under 13.
10. Changes
We may update this policy. Material changes will be posted here with a new "Last updated" date, and account holders will be notified by email.
11. Contact
Privacy questions or requests: Digitalbil@gmail.com