Privacy Policy

---

Swirl Technologies, LLC ("Swirl Technologies," "we," "us," or "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy outlines how we collect, use, disclose, and safeguard your information when you use our software platform, which displays real-time and historical patient information through our web application and iOS application ("Services"). Please read this Privacy Policy carefully. If you do not agree with the terms of this policy, please do not use our Services.

When you use our Services, we may collect limited personal information that identifies you directly or indirectly, including but not limited to:

• Device Information: Information about the devices used to access our Services, including IP addresses, browser types, and device identifiers.
• Patient Data: Separate from your own use as a healthcare provider, we will collect medical records, diagnostic results, treatment information, and other healthcare-related information related to patients at your institution.  This will be stored in a way that is controlled by your institution's Information Services Department.
• User Information: Names, email addresses, and other credentials provided by authorized users of our Services.  No usernames or passwords will be saved.

We may collect information about how the Services are accessed and used ("Usage Data"). This Usage Data may include information such as the features you use, the time and duration of your visits, and other diagnostic data to improve our Services.

Swirl Technologies uses the information we collect for various purposes, including:

• Providing and Improving Services: To operate and maintain our Services, process transactions, manage accounts, and provide customer support.
• Compliance and Legal Obligations: To comply with legal obligations, including health privacy laws such as HIPAA, and to enforce our agreements and policies.
• Analytics and Research: To analyze usage patterns, improve the functionality of our Services, and develop new features.

We may share your information in the following circumstances:

• With Healthcare Providers: We may share patient data with authorized healthcare providers and hospital staff as required for the provision of medical care.
• With Third-Party Service Providers: We may share information with third-party service providers who perform services on our behalf, such as hosting, data analytics, and security.
• For Legal Purposes: We may disclose your information if required to do so by law or in response to valid requests by public authorities.

We implement a variety of security measures to protect your personal information from unauthorized access, use, or disclosure. These measures include encryption, access controls, and regular security assessments. However, no system can be completely secure, and we cannot guarantee the absolute security of your data.

We will retain your personal information only for as long as is necessary for the purposes set out in this Privacy Policy, or as required by law or your institution. Once the data is no longer needed, we will securely delete or anonymize it.

Depending on your location and applicable laws, you may have certain rights regarding your personal information, including the right to access, correct, or delete your data, and the right to object to or restrict certain processing activities. To exercise these rights, please contact us using the information provided below.

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on our website and updating the "Effective Date" at the top of this policy. You are advised to review this Privacy Policy periodically for any changes.

If you have any questions about this Privacy Policy or our privacy practices, please contact us at:

Swirl Technologies, LLC
300 Longwood Avenue

Boston, MA 02115

Email: john@swirltechnologies.com