Version 2026-10-21.

Practice KPIs keeps your patient data on your own PC. This notice says what Clinihealth LLC ("we") does collect, why, who helps us handle it, and what we never collect. It covers the app, our website, our sign-up, download and licence server, and our support.

What the app never sends us

The app never sends us patient data of its own accord: no patient names, dates of birth, visits, claims, payments, patient counts or rows from your reports, and no report files, file names, folder paths, error text or screenshots. The report files you import never leave your PC, and the app has no way to send them to us. An automated test plants made-up patient names in a practice and fails if any of them could reach a message the app sends.

Only if you choose

Some things reach us only when you choose. All of them are covered by our business associate agreement, which every practice accepts at sign-up.

Help on a shared screen. During setup or support, we may see patient data on your screen. We keep no copy.
Files you send us. If you send us a diagnostics file, a report file or a screenshot, we use it only to fix your problem and delete it within 30 days after. Please send patient information only when we ask for it.
A practice summary. If you choose to share one, we receive a file of totals: things like charges, payments, denials, visits and money owed, by day or month, provider, insurer, code, drug and location. It never holds patient names, birth dates, addresses, phone numbers, or account, claim or record numbers. We use it to review your practice with you, and, made anonymous, to compare practices. We never name your practice to anyone else without your permission. You can stop sharing at any time, and we delete your summaries when you ask or when you leave.
AI features. If you turn one on, what you type and the totals it is about go through our server to an AI provider that has signed a business associate agreement with us. Neither we nor the provider use it to train AI models.

What we collect, and when

When you sign up or download

your name, work email and, for the business associate agreement, your title
the practice's name, its number of providers, and monthly or yearly
that you agreed to the terms and the business associate agreement (and which versions), that you said you are authorized for your practice, and the time
a download code we make, so we can tell which download an install came from
a code we email you to confirm the address (it expires after 15 minutes)

What the app sends after you install it

The app sends one small message when it starts and about once a day while it is open. It contains exactly:

a random install number made on your PC
the app version
your download code
the terms version you accepted, and when
your licence number, if you have a licence
the names of the practices you set up in the app
the size of your data store in megabytes
which add-ons are switched on

With it, our server notes the time and the country the message came from (as our network provider reports it). Our database does not keep your IP address; our server and network providers may hold it briefly in ordinary logs, and we use it for a short time to limit repeated tries. The app also asks for its licence and update notices, and downloads updates. Its requests say "Practice KPIs", the app version and "Windows", nothing more.

Your account

your email, proven by a code or sign-in link we email you, and your name if you give it
the practices on your account and who manages it
the emails of the people you share with, and which practices they can open
your payments: who they are for, amounts, dates and whether each one is paid; card or bank details go only to our payment provider (we keep the card's brand and last four digits so you can see which card pays for which practice)

When you write to us

Your email and what you write.

How we use it

to give you the sign-up, download, licence, updates and support
to know which installs are in use, so we offer updates to the people who use the app and can see who has updated
to bill you, prevent misuse (such as repeated wrong codes) and keep our systems secure
to keep a record that you accepted the terms and the business associate agreement, and to meet tax and legal duties
to send you emails about the service: your codes, receipts, invoices, updates, changes to price or terms, and security notices
for a practice summary or an AI feature you turned on: only as "Only if you choose" says

We don't sell your information, use it for advertising, or put your email on marketing lists.

Who helps us

We use a few service providers, each only for its own job, and they may handle your information only for us:

Fly.io runs our licence and download server and its database, in the United States.
Cloudflare runs our domain and website and sits in front of our server; it sees ordinary web traffic, such as IP addresses, to deliver it and keep it safe.
Stripe takes card payments and sends our invoices. It holds your payment details under its own privacy policy, and may email you receipts.
Resend sends our emails, such as sign-in codes.
Google Workspace holds our support mailbox and any files you send us, under a business associate agreement with us.
An AI provider, under a business associate agreement with us, only if you turn on an AI feature. We name it on our website before any AI feature starts.

We may also share information if the law requires it, to protect our rights or others' safety, or with a business that takes over Practice KPIs (we would tell you first).

Who sees it

Only Clinihealth's owner has access to the admin where this information is shown, and to anything you send us. The admin is behind its own sign-in, and every admin action is recorded.

How long we keep it

We keep account and download records while you are a customer and for a reasonable time afterwards. We keep payment and tax records, and the record that you accepted the terms and the business associate agreement, for as long as the law requires, which is usually up to seven years. Files you send us are deleted within 30 days after your problem is closed; practice summaries when you stop sharing and ask, or within 30 days after you leave. Codes we email you expire within minutes. You can ask us to delete your records at any time; we will, except what we must keep by law.

Your choices

You can ask us what we hold about you, to correct it, or to delete it, by writing to [email protected]. You can stop sharing a practice summary and turn off AI features at any time. You can disconnect a PC from your account in the app. Uninstalling the app and deleting its folder in your Windows profile removes everything it stored on that PC.

Cookies

The public website sets no tracking or advertising cookies. The admin area, used only by us, sets a sign-in cookie.

Children

Practice KPIs is for businesses. We don't knowingly collect information from children.

Security

Our server is reached only over encrypted connections, the admin is behind its own sign-in, our accounts use two-step sign-in, our computers are encrypted, and updates are signed with a key that never leaves our own computer, so the app installs only what we published. If something goes wrong that affects your information, we will tell you without unreasonable delay, and within the time our business associate agreement sets for patient data.

Changes

If this notice changes, the version at the top changes with it. For a change that matters, we will email account holders before it takes effect.

Contact

Clinihealth LLC, a Georgia limited liability company. Email [email protected]. Mail: Clinihealth LLC, c/o Northwest Registered Agent Service, Inc., 8735 Dunwoody Pl Ste N, Atlanta, GA 30350.

Privacy notice.