ChartSafe ‹ Legal

ChartSafe — Privacy Notice

Provider: SafeFlash LLC ("SafeFlash," "we," "us") Product: ChartSafe Effective date: June 19, 2026 Version: 1.0


1. About this notice

This Privacy Notice explains how SafeFlash handles information in connection with the ChartSafe application. ChartSafe is a tool that dental and medical practices ("Customers") use to document anesthesia and sedation care.

Important boundary — PHI vs. this notice. Patient health information that a Customer enters into ChartSafe ("Protected Health Information" or "PHI") is handled under HIPAA and a separate Business Associate Agreement between SafeFlash and the Customer — not under this Privacy Notice. For questions about how their own patient data is handled, patients should contact their healthcare provider (the practice). This notice covers the non-PHI information SafeFlash handles to run the Service.

2. Information we handle

Account and practice information: practice name, license code, authorized-user names and roles, and contact details used to set up and support an account.

Device and technical information: a per-device identifier (UUID), app version, browser/OS type, and basic diagnostic or error information used to operate, secure, and troubleshoot the Service.

Customer Data (including PHI): the clinical and patient records a Customer enters. SafeFlash stores and processes this on the Customer's behalf as a Business Associate. We do not use it for our own purposes.

We do not sell personal information, and we do not use patient data for advertising.

3. How we use information

4. Where data is stored and who processes it

ChartSafe uses third-party infrastructure providers ("subprocessors") to run the Service:

Where a subprocessor handles PHI, SafeFlash maintains a Business Associate Agreement with that subprocessor as HIPAA requires. A current subprocessor list is available on request.

5. Local storage on your device

ChartSafe is a Progressive Web App. To work offline and load quickly, it stores data locally on your device using browser storage (IndexedDB and localStorage) and a service-worker cache. This local data stays on your device and is managed by the App; clearing your browser/app storage removes it.

6. How we protect information

SafeFlash uses administrative, physical, and technical safeguards intended to protect information, including encryption in transit, encrypted storage, access controls, session limits, and account lockout. No method of transmission or storage is perfectly secure, but we work to protect information consistent with our obligations as a Business Associate.

7. Data retention

SafeFlash retains Customer Data for as long as an account is active and as directed by the Customer, then as required by the Business Associate Agreement and applicable law. Account and technical information is kept as needed to operate the Service and meet legal obligations.

8. Your choices and rights

Because most data in ChartSafe is controlled by the Customer (the practice), individuals seeking access to, correction of, or deletion of their patient information should contact the practice that provides their care. Customers can contact SafeFlash about their account information using the details below.

9. Children's data

ChartSafe is a business tool for healthcare practices and is not directed to children. Patient records may relate to minors; that information is PHI handled by the practice under HIPAA, not under this notice.

10. Changes to this notice

We may update this notice. For material changes we will provide notice (in-app or by email) and update the effective date above.

11. Contact

SafeFlash LLC 1209 Mountain Road Pl NE, Ste N, Albuquerque, NM 87110, USA Bryan@chartsafe.app