Privacy Policy

Clovina Health, Inc. ("Clovina Health", "we", "us") provides scheduling, electronic visit verification (EVV), clinical documentation, and billing software to home health and home care agencies. This policy explains what information we collect, why we collect it, and how we handle it.

Who this policy covers

• Agency staff — owners, administrators, schedulers, nurses, and clinical supervisors who use our software.
• Caregivers — field staff who use the caregiver portal to clock in and document visits.
• Family members — people invited by an agency to view care for a client.
• Website visitors — anyone browsing clovinahealth.com or requesting a demo.

Client (patient) health information is entered into the platform by our customers, the agencies. For that information, the agency is the covered entity and Clovina Health is a business associate. We process it only on the agency's behalf and under our HIPAA obligations.

Information we collect

• Account information — name, work email, phone number, role, and the agency you belong to.
• Agency and client records — client demographics, care plans, tasks, medications, assessments, wound documentation, incidents, visit notes, and signatures entered by agency users.
• Visit verification data — clock-in and clock-out times and the GPS coordinates captured at those moments on the caregiver's device, used to verify that a scheduled visit occurred at the client's location. Location is captured at clock-in and clock-out only; we do not track caregivers between visits.
• Uploaded documents — credentials, licenses, applicant resumes, and clinical media such as wound photos.
• Billing information — invoices, payments, claim and remittance data. Card details are handled by our payment processor and are never stored on our servers.
• Website and product usage — pages viewed, actions taken, IP address, browser type, and demo request form submissions.

Why we use it

• To provide, secure, and support the platform.
• To verify visits and produce state-required EVV records and exports.
• To generate invoices, claims, and payment records for our customers.
• To notify users of shifts, tasks, expirations, and messages.
• To respond to demo requests and communicate about your subscription.
• To detect abuse, troubleshoot errors, and improve reliability.

We do not sell personal information, and we do not use protected health information for advertising.

Who we share it with

• Service providers who help us run the platform — cloud hosting and database infrastructure, transactional email delivery, payment processing, and error monitoring. Each is bound by confidentiality obligations and, where they handle protected health information, a business associate agreement.
• Your agency. Data you enter is visible to authorized users at your agency according to their role.
• State EVV aggregators and payers — only when your agency exports or submits records.
• Legal requirements — when required by law, subpoena, or to protect safety, and to the extent HIPAA permits.

How we protect it

Data is encrypted in transit (TLS) and at rest. Access is controlled by role, scoped to a single agency, and enforced at the database level. Administrative actions are recorded in an audit log. Access to production systems is limited to personnel who need it.

How long we keep it

We retain agency data for as long as the agency's account is active. After termination, an agency may request an export of its data; unless a longer period is required by law or the agency's own record-retention obligations, we delete or de-identify agency data within 90 days of a written deletion request. Backups age out on their normal cycle.

Your choices and rights

• Agency users can update their own profile information in the platform.
• Requests to access, correct, or delete client health information should go to the agency that maintains the record; we will assist our customer in fulfilling those requests.
• You can opt out of non-essential email at any time. Operational messages about shifts, visits, and account security are part of the service.
• Depending on where you live, you may have additional rights under state privacy laws. Contact us and we will honor applicable requests.

Children

The platform is used to document care for clients of any age, including pediatric private duty nursing clients. That information is entered by agency staff, not by children, and is handled as protected health information.

Changes

We will post any revision here with a new effective date. Material changes affecting our customers will also be sent by email.

Contact

Questions, requests, or privacy concerns: support@clovinahealth.com