Privacy Policy

This Privacy Policy (“Policy”) describes how Splicea (“Splicea,” “we,” “us,” or “our”) collects, uses, discloses, and protects information in connection with our home health care management platform. Our “Service” includes:

• The Splicea Web Platform — our website and cloud-based software-as-a-service (SaaS) dashboard used by home health agencies, administrators, schedulers, billers, and clinical staff to manage scheduling, Electronic Visit Verification (EVV), billing, staff records, and clinical documentation; and
• The Splicea Caregiver Mobile App — our iOS and Android application used by caregivers to clock in and out of visits, complete care tasks and documentation, submit incident reports, and communicate with their agency.

By accessing or using the Service, you agree to this Policy. If you do not agree, please do not use the Service.

1. Information We Collect

Information you provide to us

When you register for or use the Service, we may collect information including your name, email address, mobile phone number, mailing address, job title or role, employer or agency affiliation, professional credentials and license information, and login credentials. Agencies and their authorized users may also enter information about caregivers, clients, and visits — including scheduling, care plans, assessments, clinical notes, medication records, and incident reports — some of which constitutes PHI.

Location information (EVV)

The Splicea Caregiver Mobile App collects your device’s geolocation (GPS) at the moment you clock in and clock out of a visit in order to verify that visits occur at the approved location, as required by state and federal Electronic Visit Verification mandates. We collect location for visit verification only; we do not continuously track your location in the background. You control location permissions through your device settings, but declining location access may prevent you from recording compliant visits.

Camera, photos, and signatures

With your permission, the mobile app may access your camera and photo library so you can attach photos to incident reports and documentation, and may capture electronic signatures for visit and care confirmation. These files are uploaded to your agency’s account.

Biometric authentication

The mobile app may offer sign-in using your device’s biometric features (such as Face ID, Touch ID, or Android biometrics). This authentication is performed by your device’s operating system. Splicea never receives, stores, or has access to your biometric data — your device simply confirms to the app that authentication succeeded.

Push notifications

If you enable notifications, we collect a device push token so we can deliver notifications such as schedule changes, messages, and reminders. You can disable push notifications at any time in your device settings.

Automatically collected information

When you use the Service, we automatically collect certain technical information, including your IP address, device and browser type, operating system, app version, device identifiers, pages or screens viewed, features used, and the dates and times you access the Service. On the web platform we may use cookies and similar technologies as described below.

Cookies and similar technologies

Our web platform uses cookies — small text files stored on your device — and similar technologies to keep you signed in, remember your preferences, maintain security, and understand how the Service is used. We use both session cookies (which expire when you close your browser) and persistent cookies. We rely primarily on cookies that are strictly necessary to operate the Service and on limited first-party analytics to improve it. We do not use the Service to serve third-party advertising, and we do not sell your information. You can control cookies through your browser settings, but disabling necessary cookies may limit functionality. Because there is no consistent industry standard, we do not currently respond to browser “Do Not Track” signals.

2. How We Use Information

We use the information we collect to:

• Operate, maintain, secure, and provide the features of the Service, including EVV, scheduling, billing, staff management, and clinical documentation;
• Authenticate users and protect accounts against unauthorized access and fraud;
• Verify visits and generate compliance records required by state and federal EVV, Medicaid, and Medicare requirements;
• Provide customer support and respond to your requests, questions, and reported issues;
• Send administrative and service-related communications, such as account notices, security alerts, schedule updates, and messages within the Service;
• Monitor, analyze, and improve the performance, reliability, and usability of the Service and develop new features; and
• Comply with our legal, regulatory, and contractual obligations.

We use PHI only as permitted by our Business Associate Agreements and applicable law — generally, to provide and support the Service for the agency and as required by law. We do not use PHI for marketing.

3. How We Disclose Information

We do not sell your personal information, and we do not disclose it except as described below:

• Within your agency. Information you enter into the Service — including schedules, visit records, and clinical documentation — is accessible to authorized users of your agency’s account according to their roles and permissions.
• Service providers. We share information with vendors who help us operate the Service — such as cloud hosting, data storage, push-notification delivery, and clearinghouse or billing partners. We limit what we share to what is reasonably necessary, and we require these providers to protect the information and, where they handle PHI, to sign Business Associate Agreements.
• Legal and safety. We may disclose information if required by law or legal process (such as a subpoena, warrant, or court order), or where we believe in good faith that disclosure is necessary to comply with the law, protect the rights, property, or safety of Splicea, our users, or others, prevent fraud or abuse, or enforce our agreements.
• Business transfers. If Splicea is involved in a merger, acquisition, financing, reorganization, sale of assets, or similar transaction, information may be transferred as part of that transaction, subject to the protections of this Policy and applicable law.
• With your direction or consent. We may disclose information at your direction or with your consent.
• Aggregated or de-identified data. We may create and use aggregated or de-identified information that does not identify you or any individual, including for analytics and improving the Service. De-identification of PHI is performed in accordance with HIPAA.

4. Protected Health Information & HIPAA

Home health agencies that use Splicea are typically “Covered Entities” under HIPAA. When we create, receive, maintain, or transmit PHI on their behalf, Splicea acts as a Business Associate. In that role:

• Our use and disclosure of PHI is governed by HIPAA and the Business Associate Agreement we enter into with each agency;
• We use and disclose PHI only as permitted by that agreement and applicable law, and as necessary to provide and support the Service;
• We maintain administrative, physical, and technical safeguards designed to protect PHI, including encryption, access controls, and audit logging; and
• Requests by individuals to access, amend, or obtain an accounting of their health information are directed to and handled by the agency (the Covered Entity) responsible for that record.

If you are a client or patient of an agency that uses Splicea, the agency — not Splicea — controls your health record. Please direct requests about your PHI to your agency.

5. Your Choices

• Account information. You can review and update your account information within the Service. If your account is managed by an agency, some changes may need to be made by an agency administrator.
• Device permissions. You can control location, camera, photo library, biometric, and notification permissions through your device settings. Disabling certain permissions may limit features such as EVV visit verification.
• Communications. You can adjust notification preferences in the Service or your device. You may unsubscribe from non-essential emails using the link in those messages; you will still receive administrative and service-related messages.
• Access and deletion. To request access to, correction of, or deletion of personal information we hold about you, contact us using the details below or contact your agency. Because we host data on behalf of agencies and are subject to legal and contractual retention obligations, some requests will be routed to the relevant agency, and we may retain information as required for backups, security, fraud prevention, and legal compliance.

6. Data Retention

We retain information for as long as needed to provide the Service, comply with our legal, regulatory, and contractual obligations (including healthcare and EVV recordkeeping requirements), resolve disputes, and enforce our agreements. PHI is retained and disposed of in accordance with our Business Associate Agreements and applicable law. When information is no longer needed, we take reasonable steps to securely delete or de-identify it.

7. Data Security

We use administrative, physical, and technical safeguards designed to protect information, including encryption of data in transit and at rest, role-based access controls, authentication requirements, and audit logging. On mobile devices, credentials and tokens are stored using the device’s secure storage. No method of transmission or storage is completely secure, and we cannot guarantee absolute security; however, we work to protect your information and to promptly investigate and respond to any suspected incidents in accordance with HIPAA and applicable law.

8. Children’s Privacy

The Service is intended for use by agencies and their authorized workforce, and is not directed to children. We do not knowingly collect personal information directly from children under 13. Health information about pediatric clients may be entered by agencies as part of providing care; that information is handled as PHI under this Policy and HIPAA.

9. Third-Party Services

The Service may rely on or link to third-party services (such as cloud infrastructure, app stores, or clearinghouses). Information you provide directly to a third party is governed by that third party’s privacy practices, not this Policy. We are not responsible for the practices of third parties and encourage you to review their policies.

10. U.S. Hosting and International Users

The Service is hosted in the United States and intended for use within the United States. If you access the Service from outside the United States, you understand that your information will be transferred to, stored, and processed in the United States, where data-protection laws may differ from those in your location.

11. Your U.S. State Privacy Rights

Depending on where you live, you may have rights under state privacy laws — such as the right to know what personal information we collect, to request access or deletion, and to be free from discrimination for exercising those rights. Note that information governed by HIPAA is generally exempt from these state privacy laws. We do not sell personal information or share it for cross-context behavioral advertising. To exercise any available rights, contact us using the details below; we may need to verify your identity or route your request to the relevant agency.

12. Changes to This Policy

We may update this Policy from time to time. When we do, we will revise the “Last Updated” date above and make the updated Policy available through the Service. If changes materially affect your rights, we will take reasonable steps to notify you, such as by email or an in-app notice. Your continued use of the Service after the updated Policy takes effect indicates your acceptance of the changes.

13. How to Contact Us

If you have questions or requests regarding this Policy or our privacy practices, please contact us at:

If you are a client or patient, you may also contact the home health agency that provides your care regarding your health information.