Privacy Policy

Effective 2026-04-20

The Lucas Baby Pediatrician Portal ("the Portal") is a monitoring aid for pediatricians whose patients use the Lucas Baby iOS app. This policy explains what data we handle, why, and what rights you and the families you care for have.

1. Scope and legal status

Important: The Portal is not currently operated under a Business Associate Agreement (BAA) with any HIPAA-covered entity, and it is not a certified electronic health record. Do not enter Protected Health Information (PHI) unless the baby’s parent or legal guardian has given explicit, documented consent. When in doubt, use pseudonyms or patient identifiers rather than directly identifying clinical details.

The Portal is a clinical monitoring aid, not a medical device. It does not replace professional clinical judgement. Dosing suggestions, growth percentiles, and jaundice thresholds are decision support — you remain the responsible clinician.

2. Data we collect about you (the doctor)

• Identity and profile: your name, email address, hashed password, and (optional) clinic name, specialization, NPI number, and license state. You supply all of this on registration.
• A system-generated doctor code (LUC-PED-…) that parents enter to connect their baby.
• Activity metadata: notes, visit entries, immunization records, medication entries, and document metadata you author — always written into the family’s baby record with your name attached.
• Technical data: IP address, browser user agent, and timestamps, used for security logging and rate limiting.

3. Data you see about patients

For each baby a parent connects to you, you may see (only the modules the parent shared):

• Growth measurements (weight, length, head circumference) and percentiles.
• Feeding, sleep, diaper, pumping, activity, and mood logs.
• Health symptoms, temperature, medications, immunizations, prior doctor visits, and parent-uploaded documents (lab reports, photos).
• Baby profile: name, date of birth, sex, optional parent/guardian names, optional gestational age.

A parent can revoke your access at any time from their iOS app. When revoked, the Portal immediately stops showing you any of that family’s data.

4. Why we process this data

• To let you monitor patients between in-person visits and annotate their records.
• To authenticate you, prevent abuse, and investigate suspicious activity.
• To fix bugs and improve reliability — we look at aggregated, non-identifying telemetry (error rates, latencies). We do not read the content of patient records for analytics.

5. Security

• All traffic between your browser and our servers is encrypted with TLS 1.2 or higher.
• Data at rest is stored in Microsoft Azure services (Cosmos DB, Blob Storage) with encryption enabled by default.
• Passwords are stored as bcrypt hashes. Session tokens are short-lived and rotated on password change.
• Only a small number of named operators have administrative access to the backend, and access is audited.
• If we become aware of a security incident that may have exposed your or a family’s data, we will notify affected accounts by email within 72 hours of confirming the incident.

6. Who processes your data

We use the following subprocessors. They process data on our behalf and are bound by their own security commitments:

• Microsoft Azure (Ireland / US regions) — hosting, database, file storage, and monitoring.
• Apple Push Notification service — delivers silent and alert push notifications to parents’ devices.
• Transactional email provider — sends account verification, password reset, and invitation emails.

7. Your rights

• Access: you can see everything stored about you in your account settings.
• Correction: you can edit your profile at any time.
• Deletion: you can delete your account from Settings → Account. This removes your profile and your doctor-portal session history. Clinical notes you authored in a family’s record remain in that family’s file (attributed to you) so that their medical history stays intact, unless the parent also deletes them.
• Export: parents can export their baby’s full record as PDF/CSV from the iOS app. Doctor-authored notes are included.
• Parents retain all rights over their baby’s records. You are a guest on their data, not the system of record.

8. Retention

Doctor account data is retained for as long as your account is active. On account deletion, your profile is removed within 30 days and your access to all connected babies is revoked immediately. Parent-authored records are retained by the parent account; deletion follows the iOS app’s policy. Backups that may briefly contain deleted data are purged within 35 days of deletion.

9. Children’s data

The records you view concern infants and young children. Parents or legal guardians are the account holders and provide consent on behalf of their children. The Portal is not directed at children and is not accessible to them.

10. Changes to this policy

We may update this policy as the Portal evolves. We will post the updated effective date at the top, and for material changes, notify you by email at least 14 days before they take effect.

11. Contact

Questions, requests, or complaints: privacidad@lucasbaby.co

This policy is operator-authored and describes actual system behavior. It is pending review by licensed counsel and may be updated before general availability. It is not legal advice.