Legal
Privacy Policy
Last updated October 24, 2026
Risk Continuum CKM ("RCCKM", "we", "us") is a clinical decision-support tool for clinicians. This policy explains what information we handle when you visit this website or use the RCCKM app, and how we handle it. RCCKM is in early access and this policy may change as the product develops; we will update the date above when it does.
Do not enter identifiable patient information
RCCKM is designed for de-identified or synthetic data only. Do not enter patient names, dates of birth, medical record numbers, addresses, contact details or any other information that identifies a patient. RCCKM is not currently offered as a HIPAA-covered service, and we do not sign business associate agreements at this time.
Chart text and worksheet values
- When you paste chart text or enter values, they are sent to our server only to run the assessment and show you the results.
- We do not save chart text, worksheet values or reports to a database. They are held temporarily while you use the app and are cleared when your session ends or after a period of inactivity.
- We do not use chart text or worksheet values for advertising, and we do not sell them.
Optional AI features
Some features, such as the Clinical Pearl, use an outside AI provider. These features are optional and labeled in the app. When you use one, the de-identified assessment details it needs are sent to that provider to generate the response. Do not use AI features with identifiable information.
Accounts
If you create an account, we store the details you give us and basic account records: your name, email address, professional role and specialty, optional organization, country, sign-up and sign-in dates, account status, and when you accepted the clinical use notice. We use this to run your account, secure the service and contact you about it. Accounts never hold patient data or worksheet contents. Sign-in is handled by our authentication provider using secure cookies.
Usage analytics
We use PostHog to understand visits to our website, pages and sections viewed, buttons used, time spent, account registration and sign-in, feature use, performance and technical errors. Before sign-in, these events use a random browser identifier stored in a cookie. After you sign in, we link activity to your account ID and profile details (name, email, professional role, specialty, organization and country), including visits before sign-in when the same browser identifier is available. We also collect referring website domains, recognized campaign sources, browser/device categories and approximate city, region and country derived from your IP address when location collection is enabled. Technical error records include predefined categories and app build information. Analytics never include passwords, verification tokens, pasted chart text, patient identifiers, clinical values, assessment results, report contents, or full URLs and query strings. We do not use advertising trackers or record clinical screens.
Cookies
We use a small number of cookies that the service needs: to keep your worksheet session, to remember that you accepted the clinical use notice, to keep you signed in if you have an account, and the analytics identifiers described above. You can clear or block cookies in your browser; some features may then stop working.
Service providers
We use trusted providers to host the app, handle sign-in, measure usage and, when you choose AI features, generate AI responses. They process information only to provide those services to us.
Security
Connections to RCCKM are encrypted, account access is checked on the server, and we limit the information we collect to what the service needs. No system is perfectly secure, which is one more reason to enter de-identified data only.
Your choices
You can use the app without an account in early access. If you have an account, you can ask us to access, correct or delete your account information by emailing us.
Contact
Questions about privacy: shereef@riskcontinuum.health