Privacy Policy

1. What we collect

Information you give us

• Account. Your email address and password (stored hashed by our authentication provider), or the name and email Apple shares when you use Sign in with Apple. Your account role (for example injured worker, attorney, paralegal, physical therapist, or firm member) and an optional profile photo.
• Recovery log. Daily check-ins: pain levels and descriptions, movement, strength, daily-life and work limits, work status, treatment, medications, triggers, progress, and your free-text notes. Body-map pain markers. Photos you attach to an entry.
• Claim information. Your name, date of birth, date and place of injury, injured body part, employer, claim number, insurance carrier, claim status, physical-therapy clinic address, and any cases you create.
• Documents. Medical, discharge, and claim paperwork you scan or upload, text extracted from them, and summaries generated from them. Professionals connected to your claim can also add documents to it.
• Claim contacts and email history. Names, roles, and email addresses of people on your claim that you save (for example your adjuster or nurse case manager), and a record (recipient, subject, body, attachment names) of emails you send from the app. The emails themselves are sent by your own mail account, not by us.
• Messages. Messages between you and the professionals on your claim, and between colleagues in a firm, are end-to-end encrypted on your device. Our servers store only the encrypted text, public encryption keys, and who sent what to whom and when; we cannot read the content.
• Professional records. If you use WorkComp+ as a professional: private notes, document requests, calendar events, client labels, firm membership and case assignments, and firm income/expense entries you record.
• Purchases. Subscriptions bought in the app are processed by Apple; we receive and store the signed transaction details (product, transaction IDs, purchase and expiry dates) so we can unlock features. Professionals who buy sponsored client seats outside the App Store pay through Stripe; we store the Stripe customer and subscription IDs, seat count, and status. We never receive your card number.
• Waitlist. If you join the waitlist on workcompapp.com, we store the email you enter, which form you used, and when.

Information collected automatically

• Push notification token. If you allow notifications, the device token Apple issues so we can alert you to new messages.
• Technical and security records. Our hosting providers keep standard request logs (such as IP address, device/browser type, and time). We keep counters used for rate limiting and AI-feature quotas, a log of when a shared claim link is opened, and an audit trail of access grants and firm membership changes.
• On your device only. App preferences (such as reminder time and collapsed sections) are saved in the app's local settings; your sign-in session and message encryption key are kept in the iOS Keychain. Report PDFs you export are written to temporary storage and cleared when you sign out.

We do not use advertising identifiers, analytics or crash-reporting SDKs, or third-party tracking, and we do not collect your precise location. The web dashboard uses only the sign-in cookies it needs to keep you logged in.

2. How we use it

• To run the app: store and sync your log, build weekly and monthly reports and PDFs, and show your record to the people you share it with.
• To provide optional AI features (see AI processing below).
• To deliver messages and push notifications, send sign-in and invitation emails, and process subscriptions.
• To keep the service secure: authentication, rate limits, fraud and abuse prevention, and audit trails.
• To email waitlist members when the app is available. We do not send marketing email to app users.

We do not sell personal information, share it for cross-context behavioral advertising, or use it to train AI models.

Legal bases (EU/UK users). We process your data to perform our contract with you (running the service you signed up for); with your explicit consent for health information, which you choose to enter and can delete at any time; and for our legitimate interests in keeping the service secure.

3. Who can see your claim

Your recovery log is private to your account by default. Database rules restrict every record and file to its owner unless you grant access. You can give access in these ways:

• Connecting with a professional. When you accept a connection request or share your claim by email with an attorney, paralegal, physical therapist, or other professional who has a WorkComp+ account, they can see the case you shared: your claim profile, daily entries, body map, photos, documents, and AI summaries. They can add notes, document requests, calendar events, and documents to your claim. If they belong to a law firm, colleagues the firm assigns to your case can see it too.
• Sponsored seats. A professional can pay for your WorkComp+ Plus by assigning a sponsored seat to your email address and inviting you. While that sponsorship is active, the sponsoring professional can see your claim and message you.
• Share links. You can create a link that shows a read-only web view of your claim, including photos, to anyone who has it. You can protect a link with a PIN, set it to expire, and revoke it at any time; the app shows you when a link was opened.
• Exports. PDFs and emails you send from the app leave WorkComp+ and are handled by whoever receives them.

You can revoke a professional's access or a share link in the app at any time. Revoking stops future access; it cannot recall copies a recipient already downloaded or exported.

We do not share your information with your employer or insurer unless you send it to them. We may disclose information if required by law or to protect the rights and safety of users.

4. Service providers

These companies process data on our behalf only to provide the service:

• Supabase — database, sign-in, file storage, server functions, and sign-in/invitation emails. Data is stored in the United States (AWS us-east-1).
• Anthropic (Claude) — AI processing. When you or a professional with access to your claim taps an AI feature, the relevant part of your record is sent to Anthropic's API to produce the result: weekly and monthly summaries, rewriting your weekly notes, talking points for your doctor, a summary of a document you uploaded (the document itself is sent), and, for professionals, claim summaries and draft demand letters (which include the professional's notes). AI features run only when someone taps them. Anthropic's commercial terms do not allow it to train its models on this data.
• Apple — Sign in with Apple, in-app purchases, push notifications (Apple Push Notification service), address suggestions (MapKit), and speech-to-text for dictation.
• Stripe — payment processing for professionals who buy sponsored seats outside the App Store.
• DigitalOcean — hosting for workcompapp.com and the web dashboard.

5. Phone permissions

The app asks for each permission only when you use the feature that needs it, and works without it.

• Camera and photo library — to attach photos and scan documents you choose.
• Location (while using the app) — to suggest nearby addresses as you type, such as your therapy clinic. Your location is used on your device and by Apple's address search; we do not receive or store it. Only the address you pick is saved.
• Microphone and speech recognition — to dictate notes. Audio is processed by Apple's speech recognition; we receive only the resulting text you save, never the audio.
• Notifications — for optional daily reminders (scheduled on your device) and new-message alerts. Message alerts show the sender's name, never the message content.

6. Retention and deletion

• We keep your account data until you delete it or your account.
• Delete in the app: Profile → Delete account permanently deletes your account, all your records, messages, and every file you stored (photos, documents, profile photo). You can also delete individual entries, photos, and documents at any time.
• Or email divinejdavis@gmail.com and we will delete your account within 30 days.
• Routine database backups kept by our hosting provider may hold deleted data for up to 7 days until they expire.
• After deletion, records a professional keeps in their own account (such as a calendar event or billing entry) may keep your name or email but are no longer linked to your account, and copies anyone already exported are outside our control. The security audit trail keeps account IDs (not your health data) so misuse can be investigated.
• Waitlist emails are kept until the app launches and we notify you, or until you ask us to remove yours.

7. Security

Data is encrypted in transit (HTTPS) and access is enforced by row-level database rules. Messages are end-to-end encrypted. Share-link PINs are stored only as salted hashes, and repeated wrong PINs are locked out. No system is perfectly secure; if we learn of a breach affecting your data we will notify you as the law requires. WorkComp+ is not a healthcare provider or insurer, and this policy is not a HIPAA notice.

8. Your rights

Wherever you live, you can ask us to:

• Access or export the personal information we hold about you (you can also export reports from the app);
• Correct it (most of it you can edit in the app);
• Delete it (in the app, or by email);
• Withdraw consent or stop sharing, by revoking access or deleting data.

California (CCPA/CPRA). You have the right to know what personal information we collect, use, and disclose; to delete and correct it; and not to be discriminated against for exercising these rights. We do not sell or share personal information and do not use sensitive personal information for anything beyond providing the service.

EU/UK (GDPR). You also have the rights to data portability, to restrict or object to processing, and to complain to your local data protection authority. Your data is stored in the United States.

Email divinejdavis@gmail.com to make a request. We will verify it comes from the account holder and respond within 30 days.

9. Children

WorkComp+ is not directed to children under 13, and we do not knowingly collect their information. If you believe a child has given us information, contact us and we will delete it.

10. Changes

If we change this policy we will update the date above and post the new version at this address.

11. Contact

Divine Davis, WorkComp+ — divinejdavis@gmail.com