Privacy Policy

Privacy Policy for Nurasight, Co. DBA MediCipher

Last Updated: October 12, 2026

1. Introduction

This Privacy Notice describes how Nurasight, Co. (doing business as MediCipher) ("we," "us," or "our") collects, stores, uses, and shares your personal information when you use our services. This includes visiting our website (https://www.medicipher.com), downloading our mobile application, or engaging with our specialized PDPM reimbursement platform.

2. Information We Collect

Contact & Account Data

  • Names
  • Phone numbers
  • Email addresses
  • Mailing addresses
  • Job titles
  • Passwords
  • Billing information

Application Data

With your permission, our mobile applications may collect:

  • Geolocation data
  • Device data (OS, device ID, IP address)
  • Push notification access

Automated Information

We automatically collect:

  • Log and usage data
  • Device characteristics
  • Browsing information
  • Cookies and tracking data

Third-Party Data

We may obtain limited data from:

  • Public databases
  • Marketing partners
  • Google APIs (in compliance with the Google API Services User Data Policy)

3. How We Process Your Information

We process your personal information to:

  • Facilitate account creation and authentication
  • Deliver targeted services and customer support
  • Protect our Services against fraud
  • Power our AI and ML features
  • Comply with legal and regulatory obligations

4. How We Share Your Information

We do not sell your personal information. We may share your information only in specific situations:

Business Transfers

During negotiations of a merger, sale of assets, or acquisition.

Service Providers & Partners

With affiliates, business partners, or integrated tools (e.g., Google Maps Platform APIs) strictly to deliver our Services.

5. Data Retention & Security

We retain personal information only as long as necessary for the purposes outlined in this policy or as required by law. When no longer needed, data is securely deleted or anonymized.

We implement appropriate technical and organizational security measures, but no electronic transmission or storage is 100% secure. Use of our Services is at your own risk.

6. Children's Privacy

We do not knowingly collect data from or market to children under 18. If such data is discovered, we will deactivate the account and delete the information.

7. Your Privacy Rights & Data Deletion Requests

Depending on your location (EEA, UK, Canada, and certain US states), you may have rights to:

  • Access
  • Correct
  • Restrict
  • Request deletion of your personal information

How to Request Data Deletion

You may request deletion at any time. Upon receiving a verifiable request, we will delete your personal information unless legal or operational exceptions apply.

Contact our Data Protection Officer (DPO):

  • Email: cameron@medicipher.com
  • Phone: 510-648-8271

8. MediCipher PCC Sync Browser Extension

The MediCipher PCC Sync extension for Google Chrome lets an authorized MediCipher user upload MDS submission batches from PointClickCare to MediCipher.

What the extension collects. When you click "Upload to MediCipher" on the PointClickCare MDS portal, the extension retrieves the selected MDS submission batch from PointClickCare using your existing PointClickCare session and transmits it to MediCipher. Submission batches contain resident assessment data (protected health information). The extension also uses your existing MediCipher sign-in to identify you, and records the batch and facility identifiers of uploads you request so it can show their status.

What the extension does not collect. It does not read the content of any PointClickCare page other than the MDS portal. On other PointClickCare pages it notes only that you clicked, and when, so that an upload you started can continue while you are working. It does not run uploads without your click, does not collect browsing history, and does not store passwords, session tokens, batch files, or resident data in your browser.

How the data is used. Uploaded batches are processed for the facility you selected, on behalf of your organization, exactly as if you had uploaded the file on the MediCipher website. MediCipher acts as your organization's business associate under HIPAA and does not sell or share this data with third parties or use it for advertising.

Where the data goes and how long it is kept. Data is transmitted over HTTPS to MediCipher's servers, hosted on Google Cloud and Supabase under business associate agreements. Nothing is retained in the browser beyond the PHI-free upload record, which is removed when the upload completes or you dismiss it. Server-side retention follows your organization's agreement with MediCipher.

Your controls. You can remove the extension from Chrome at any time, which deletes its local data. Questions or requests: contact our Data Protection Officer (Section 7).

9. Contact Us

Nurasight, Co. DBA MediCipher
Attn: Cameron Erickson, DPO
1455 W Cerritos Ave. Unit 27
Anaheim, CA 92802
United States