← Back to mdcareflow.com

Privacy Policy

Effective June 16, 2026 · mdcareflow.com · operated by Revly Development LLC

Introduction

This Privacy Policy (“Privacy Policy”) of Revly Development LLC (“Revly Development LLC”, “Us”, or “We”) sets forth the terms applicable to you (“You” or “Your”) and describes how we collect, use, process, and disclose your Personal Information in connection with your access to and use of the CareFlow AI application, including https://mdcareflow.com (the “Website”) and any application(s), including updates, available through the Website (the “Application”), and the terms of service that apply to any services accessible through such Application (collectively, the “Services”), plus any information we collect in our capacity as a Business Associate to your healthcare provider, which is a Covered Entity under the Health Insurance Portability and Accountability Act (“HIPAA”). Your trust is important to us and we are committed to protecting the privacy and security of your Personal Information.

BY ACCESSING AND/OR USING THE APPLICATION OR WEBSITE, YOU ARE ACKNOWLEDGING THAT YOU HAVE READ AND AGREE TO THE TERMS OF THIS PRIVACY POLICY. IF YOU DO NOT AGREE, YOU MUST IMMEDIATELY CEASE USING THE APPLICATION AND WEBSITE.

Mobile information privacy commitment. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Information sharing to subcontractors in support of the services to which the user has agreed is not considered third-party sharing for marketing or promotional purposes. All other categories of personal information are subject to the disclosures below.

1. Scope and HIPAA

CareFlow AI is a healthcare platform used by medical practices to deliver Chronic Care Management (CCM), Remote Patient Monitoring (RPM), and related services. When we process Protected Health Information (PHI) on behalf of a healthcare practice (a “Customer”), we do so as a Business Associate under HIPAA pursuant to a Business Associate Agreement (“BAA”) executed with that Customer.

For PHI, the BAA and the Customer’s own Notice of Privacy Practices govern collection, use, disclosure, and patient rights regarding that information. This Privacy Policy describes how we handle non-PHI information collected by mdcareflow.com (for example, marketing-site visitors, prospective customers, and general support inquiries) and how the Service processes information generally.

2. Information We Collect

There are three general categories of information we collect: Information You Give to Us, Information We Automatically Collect from Your Use of the CareFlow AI Application and Services, and Information We Collect from Third Parties (collectively, “Personal Information”).

2.1 Information You Give to Us

We ask for and collect the following Personal Information when you use the CareFlow AI Application. This information is necessary for the adequate performance of the contract between you and us and to allow us to comply with our legal obligations. Without it, we may not be able to provide you with all requested services.

  • Account Information. When you sign up for a CareFlow AI account, we require certain information such as your first name, last name, email address, and role or practice affiliation.
  • Profile and Practice Information. To use certain features (such as managing a practice), we may ask you to provide additional information including your address, phone number, NPI, tax ID, and EMR system details.
  • Identity Verification Information. To maintain a trusted environment, we may collect identity verification information or other authentication information as permitted by applicable laws.
  • Payment Information. To use certain features, we may require certain financial information (such as bank account or credit card information) to facilitate payment processing.
  • Patient Information (PHI). When a Customer adds a patient to the Service, we receive demographic data, contact information, diagnoses, medications, allergies, vital-sign readings, lab results, encounter notes, care-management minutes, and similar clinical information. This information is PHI governed by the BAA between Revly Development LLC and the Customer.
  • Communications. When you communicate with Revly Development LLC or use the CareFlow AI Application to communicate with other users, we collect information about your communication and any information you choose to provide.

2.2 Information We Automatically Collect

When you use the CareFlow AI Application, we automatically collect Personal Information about the services you use and how you use them.

  • Geo-location Information. When you use certain features, we may collect information about your precise or approximate location through data such as your IP address or mobile device GPS. Most mobile devices allow you to control or disable location services in the device’s settings menu.
  • Usage Information. We collect information about your interactions with the CareFlow AI Application such as the pages or content you view, your searches, and other actions.
  • Log Data and Device Information. We automatically collect log data and device information when you access and use the Application, even if you have not logged in. This includes details about how you’ve used the Application, IP address, access dates and times, hardware and software information, device information, unique identifiers, crash data, cookie data, and pages viewed.
  • Cookies and Similar Technologies. We use cookies and similar technologies when you use our platform or mobile app. We may collect certain information by automated means using technologies such as cookies, web beacons, pixels, browser analysis tools, server logs, and mobile identifiers. You have the right to accept or reject cookies via your browser controls. If you choose to reject cookies, you may still use our website, though access to some functionality may be restricted. Revly Development LLC does not currently respond to Do Not Track (DNT) browser signals.
  • Mobile / SMS Information. If a patient opts in to receive SMS messages, we collect the mobile telephone number, opt-in timestamp, opt-in source, message delivery status, and any keywords (such as STOP, HELP) the patient sends.

2.3 Information We Collect from Third Parties

Revly Development LLC may collect information, including Personal Information, that others provide about you when they use the CareFlow AI Application, or obtain information from other sources and combine that with information we collect. We do not control how third parties providing your information process your Personal Information, and any request regarding disclosure of your Personal Information to us should be directed to such third parties.

2.4 Children’s Data

Our websites and applications are not directed to children under 13 and we do not knowingly collect any Personal Information directly from children under 13. The Service may be used to deliver care to pediatric patients only when the Customer practice has obtained appropriate parental or guardian consent and complies with applicable laws. If you believe we are processing Personal Information pertaining to a child inappropriately, please contact us immediately using the information in the “Contact Us” section below.

3. How We Use Information We Collect

We may use, store, and process Personal Information to (1) provide, understand, improve, and develop the CareFlow AI Application, (2) create and maintain a trusted and safer environment, and (3) provide, personalize, measure, and improve our advertising and marketing.

3.1 Provide, Improve, and Develop the Application

We use Personal Information to provide, improve, and develop the CareFlow AI Application, including:

  • providing, maintaining, securing, and improving the Service;
  • authenticating users, preventing fraud, and detecting abuse or security incidents;
  • delivering care-coordination workflows requested by the Customer practice, including scheduled SMS reminders, vital-reading prompts, education content, and provider-initiated messages;
  • generating AI-assisted clinical decision-support content (care plans, risk narratives, summaries) for review by qualified care team members;
  • responding to support requests and communicating about the Service;
  • producing de-identified analytics (de-identified in accordance with 45 CFR § 164.514) for product, research, and aggregate reporting.

3.2 Create and Maintain a Trusted and Safer Environment

We may use Personal Information to:

  • detect and prevent fraud, spam, abuse, security incidents, and other harmful activity;
  • conduct security investigations and risk assessments;
  • verify or authenticate information or identifications provided by you;
  • conduct checks against databases and other information sources, including background checks, to the extent permitted by applicable laws and with your consent where required;
  • comply with our legal obligations;
  • resolve disputes with users and enforce our agreements with third parties;
  • enforce our Terms of Use and other policies.

In limited cases, automated processes may restrict or suspend access to the CareFlow AI Application if such processes detect activity that poses a safety or other risk. If you challenge a decision based on an automated process, please contact us as provided in the Contact Us section below.

3.3 Advertising and Marketing

We may use Personal Information to provide, personalize, measure, and improve our advertising and marketing based on our legitimate interest in offering you products or services that may be of interest. You may opt out of receiving marketing materials at any time by following the unsubscribe link or by contacting us.

3.4 SMS Terms for U.S.

For text messaging in the United States, by opting in to receive one or more text messages (“Opting In”) or using a Revly Development LLC arrangement in which Revly Development LLC sends one or more text messages (“Text Message Service”), you accept these SMS Terms, consent to the handling of your Personal Information as described in this Privacy Policy, and agree to resolve disputes as described in our Terms of Use. Message and data rates may apply. Revly Development LLC will use reasonable commercial efforts to deliver automated text messages to the number you provide. Carriers and Revly Development LLC are not liable for delayed or undelivered messages.

By Opting In to a Text Message Service:

  • You expressly authorize Revly Development LLC to use auto-dialer or non-auto-dialer technology to send text messages to the cell phone number associated with your Opt-In. You do not have to Opt In as a condition of purchase.
  • You consent to the use of an electronic record to document your Opt-In. To withdraw that consent or request a paper copy, contact us via the Contact Us section below.
  • You confirm that you are the subscriber to the relevant phone number or the customary user of that number on a family or business plan and that you are authorized to Opt In.
  • These SMS Terms still apply if you withdraw consent or opt out of the Text Message Service.

Opting Out: Text STOP to any message to opt out. Text HELP for assistance. Revly Development LLC may terminate any Text Message Service at any time with or without notice.

3.5 Your Choices

  • To opt out of marketing emails, click “unsubscribe” at the bottom of any marketing email or update your Notification settings in your CareFlow AI account.
  • To revoke SMS permissions, text STOP in response to any message.
  • Please note that even if you opt out of marketing communications, we may still send you important transactional information about your account.

4. Sharing & Disclosure

4.1 Sharing With Your Consent

Where you have provided consent, we share your information as described at the time of consent. We will disclose your information when:

  • you have given us your consent to share or use information about you;
  • we believe we need to share information to provide a service you have requested from us or from your provider;
  • we are complying with laws or responding to lawful requests and legal process, or responding to an emergency situation;
  • we believe it is necessary to protect our rights and the security of our Application, or the rights of our customers or partners, or to avoid liability or violations of the law; or
  • in connection with a merger, financing, acquisition, or bankruptcy transaction involving sale or transfer of all or a portion of our business or assets.

4.2 HIPAA-Related Sharing

  • We share your information with our HIPAA Covered Entity clients who provide you with services, including medical groups, practices, hospitals, health systems, physicians, specialists, and staff.
  • We share your information with third parties that you consent to or direct us to send or receive information to or from.
  • We share your information with third-party vendors, consultants, agents, and other service providers with whom we contract as Business Associates under HIPAA to help us provide or improve the Application. These include Amazon Web Services (hosting, AI inference via Amazon Bedrock), Clerk (authentication), Twilio (SMS/voice delivery), and Neon (database hosting). Each is bound by written agreements requiring appropriate confidentiality, security, and HIPAA Business Associate obligations.
  • We may disclose your health information to third-party vendors in accordance with HIPAA requirements and your providers’ internal privacy practices (see HIPAA Privacy Rule at 45 C.F.R. section 164.506).
  • We may share aggregated, de-identified information (which no longer identifies an individual user) for regulatory compliance, industry and market analysis, research, demographic profiling, and other business purposes, in accordance with our agreements with our HIPAA Covered Entity clients.

We do not sell personal information. We do not sell mobile telephone numbers or any other personal information.

5. Other Important Information

5.1 Analyzing Your Communications

We may review, scan, or analyze your communications on the CareFlow AI Application for fraud prevention, risk assessment, regulatory compliance, investigation, product development, research, analytics, and customer support purposes, based on our legitimate interest in ensuring compliance with applicable laws and our Terms, preventing fraud, promoting safety, and improving our services.

5.2 Third-Party Partners & Integrations

The CareFlow AI Application may contain links to third-party websites or services. Revly Development LLC does not own or control these Third-Party Partners and when you interact with them, you may be providing information directly to the Third-Party Partner, Revly Development LLC, or both. These Third-Party Partners have their own rules about collection, use, and disclosure of information. We encourage you to review the privacy policies of other websites you visit.

5.3 Personal Information Processing Location

The Personal Information we collect through the Application and Website will be stored on secure servers in the United States. Personal Information may be transmitted to third parties who store or maintain the data on their secure servers within the United States. These third parties are not permitted to transfer your Personal Information outside of the United States.

5.4 Data Security

We implement administrative, physical, and technical safeguards designed to protect information against unauthorized access, alteration, disclosure, or destruction, including encryption in transit (TLS) and at rest, access controls, audit logging, role-based permissions, and regular security reviews. These safeguards are intended to meet our obligations under the HIPAA Security Standards.

WHILE REVLY DEVELOPMENT LLC USES REASONABLE SECURITY CONTROLS, WE CANNOT GUARANTEE THAT SUCH TECHNIQUES WILL PREVENT UNAUTHORIZED ACCESS TO YOUR PERSONAL INFORMATION. REVLY DEVELOPMENT LLC IS UNABLE TO GUARANTEE THE SECURITY OR INTEGRITY OF PERSONAL DATA TRANSMITTED OVER THE INTERNET. YOU ASSUME THE RISK THAT UNAUTHORIZED ENTRY OR USE, HARDWARE OR SOFTWARE FAILURE, AND OTHER FACTORS MAY COMPROMISE THE SECURITY OF YOUR PERSONAL INFORMATION AT ANY TIME.

You are solely responsible for preventing unauthorized access to your devices and your CareFlow AI account by protecting your account credentials. Please note that Revly Development LLC will never send you an email requesting confidential information such as passwords or Social Security Numbers. If you receive a suspicious email, please notify us at privacy@mdcareflow.com. If you know of or suspect any unauthorized use or disclosure of your account information, please notify Revly Development LLC immediately.

6. Your Rights

You may exercise any of the rights described in this section by sending an email to privacy@mdcareflow.com. We may ask you to verify your identity before taking action on your request.

6.1 Managing Your Information

You may access and update some of your information through your Account settings. You are responsible for keeping your Personal Information up-to-date.

6.2 Rectification

You have the right to ask us to correct inaccurate or incomplete Personal Information about you that you cannot update yourself within your CareFlow AI account.

6.3 Data Access and Portability

In some jurisdictions, applicable law may entitle you to request copies of your Personal Information held by us in a structured, commonly used, and machine-readable format, and/or request us to transmit this information to another service provider where technically feasible.

6.4 Data Retention and Erasure

We generally retain your Personal Information for as long as necessary to provide the Service, comply with legal obligations (including HIPAA recordkeeping requirements), resolve disputes, and enforce our agreements. PHI retention is governed by the applicable BAA and Customer Agreement. In certain jurisdictions, you can request deletion of your Personal Information; however, we may retain certain information as necessary for fraud detection, legal compliance, tax and auditing obligations, or backup systems for a limited period of time.

6.5 Withdrawing Consent and Restriction of Processing

If we are processing your Personal Information based on your consent, you may withdraw your consent at any time by changing your Account settings or by contacting Revly Development LLC. Withdrawal of consent does not affect the lawfulness of processing activities based on such consent before its withdrawal. In some jurisdictions, you may also have the right to limit certain ways in which we use your Personal Information.

6.6 Objection to Processing

In some jurisdictions, you may require Revly Development LLC not to process your Personal Information for certain specific purposes (including profiling) where such processing is based on legitimate interest. If you object, Revly Development LLC will no longer process your Personal Information for these purposes unless we can demonstrate compelling legitimate grounds or such processing is required for the establishment, exercise, or defense of legal claims. To object to direct marketing processing, email privacy@mdcareflow.com.

6.7 Lodging Complaints

You have the right to lodge complaints about our data processing activities by contacting us at the address in the Contact Us section below or by filing a complaint with a supervisory authority.

7. State Privacy Rights

Depending on the state in which you reside, you may have additional rights, including:

  • Right to access a copy of your Personal Information;
  • Right to correction of your Personal Information;
  • Right to delete your Personal Information from our Services;
  • Right to receive your Personal Information in a structured, commonly used, and machine-readable format;
  • Right to opt out of certain uses of your Personal Information;
  • Right to prohibit our collection of Personal Information that is not relevant and necessary to providing you Services.

PHI is excluded from most state privacy laws and is governed by HIPAA. To exercise non-PHI rights, email privacy@mdcareflow.com.

8. Operational Transfers

To facilitate our operations, Revly Development LLC may transfer, store, and process your information within our family of companies, partners, and service providers based in the United States. We are continuously implementing and updating administrative, technical, and physical security measures to help protect your information.

9. Changes to This Privacy Policy

Revly Development LLC reserves the right to modify this Privacy Policy at any time. If we make changes, we will post the revised Privacy Policy on the CareFlow AI Application and update the effective date. We will do our best to notify you of material changes via email or in-product notice. If you disagree with the revised Privacy Policy, you may cancel your account. Continued use of the Application after the revised Privacy Policy becomes effective constitutes your acceptance of the changes.

10. Contact Us

If you have any questions or concerns after reading this Privacy Policy, please contact us:

© 2026 Revly Development LLC. All rights reserved. CareFlow AI is a product of Revly Development LLC. “Revly LLC” and “Revly Development LLC” are used interchangeably and refer to the same legal entity.