Privacy Policy for IHC Portal

Last Updated: June 12, 2026

IHC Portal is operated by Integrative Health Carolinas (“we,” “us,” or “our”). This Privacy Policy explains how we collect, use, disclose, and protect information when patients, guardians, and providers use the IHC Portal mobile application.

IHC Portal is intended to support secure access to patient portal features, appointment information, secure messages, lab information, image uploads, and provider portal workflows.

1. Information We Collect

We may collect or process the following types of information through the app:

• Account information, such as name, email address, authentication identifiers, and account access information.
• Patient profile information linked to your account, such as patient ID, patient name, appointment information, lab or order information, messages, and portal-related records.
• Health-related information you access, submit, or upload through the app, including secure messages, images, SCORAD or other patient-entered values, and appointment-related information.
• Provider account information, such as provider ID, provider name, provider email, portal queue information, notification preferences, and linked Cerbo provider account status.
• Device and app information, such as device type, operating system, app version, Firebase Cloud Messaging token, and notification settings.
• Usage and diagnostic information needed to maintain app functionality, troubleshoot errors, protect security, and improve reliability.

We do not intentionally collect information for advertising or tracking purposes.

2. How We Use Information

We use information to:

• Authenticate users and protect account access.
• Display patient profiles, appointments, messages, labs, documents, and portal-related information.
• Allow patients or guardians to upload images to the clinic.
• Allow providers to view portal queue items and read secure messages.
• Send push notifications for permitted reminders or provider/patient alerts.
• Save notification preferences, time zone settings, and app mode preferences.
• Maintain security, prevent unauthorized access, troubleshoot errors, and operate the app.

3. Protected Health Information

Some information available through IHC Portal may be protected health information (“PHI”). PHI is handled in accordance with applicable healthcare privacy laws, including HIPAA where applicable, and the clinic’s Notice of Privacy Practices.

This Privacy Policy describes app-related privacy practices. It does not replace the clinic’s HIPAA Notice of Privacy Practices.

4. Push Notifications

The app may use push notifications for appointment reminders, message alerts, provider portal alerts, or similar app functionality.

Push notifications are designed to avoid unnecessary sensitive details, but notifications may still reveal that you use the app or have activity related to the clinic. You can control notification permissions through your device settings and, where available, through app notification settings.

5. Image Uploads

If you choose to upload an image, the app may access your camera or photo library only after you grant permission. Uploaded images may become part of the information reviewed by the clinic. Do not upload images you do not want shared with the clinic.

6. How Information Is Shared

We may share information only as needed to operate the app and provide healthcare-related services, including with:

• Integrative Health Carolinas care team members and authorized staff.
• Technology vendors that help operate secure authentication, hosting, messaging, notifications, storage, or app infrastructure.
• Cerbo or related electronic medical record and portal systems used by the clinic.
• Amazon Web Services, which may be used for backend hosting, authentication-related workflows, storage, logs, and app infrastructure.
• Firebase/Google services, which may be used for push notification functionality, device tokens, and related app infrastructure.
• Apple services, which may be used for iOS app distribution, device-level permissions, and push notification delivery.
• Parties required by law, regulation, legal process, or healthcare compliance obligations.

We do not sell personal information or health information.

7. Third-Party Services

The app may use third-party services or infrastructure, including Cerbo, Amazon Web Services, Firebase/Google services, and Apple services for authentication, cloud hosting, secure messaging, notifications, app distribution, and device-level push notification delivery.

These services may process limited technical information necessary to provide app functionality, such as authentication tokens, device identifiers, push notification tokens, or diagnostic information.

8. Data Security

We use reasonable administrative, technical, and physical safeguards designed to protect information. These may include secure authentication, encrypted communications, access controls, and limited use of stored local data.

No system can guarantee absolute security. You are responsible for protecting your device, passcode, email account, and login credentials.

9. Data Retention

We retain information for as long as needed to provide app functionality, support healthcare operations, comply with legal obligations, maintain medical records where applicable, resolve disputes, and enforce agreements.

Some information may be retained in the clinic’s electronic medical record or backend systems even if the app is removed from your device.

10. Your Choices

You may:

• Disable push notifications through your device settings.
• Control camera and photo library permissions through your device settings.
• Sign out of the app.
• Contact the clinic to ask about access, correction, or other rights related to your health information.
• Request information about applicable privacy rights under the clinic’s Notice of Privacy Practices.

11. Children and Guardian Access

The app may allow guardians to access linked patient profiles, including pediatric patient profiles, where permitted. The app is not intended for independent use by children without appropriate parent, guardian, or authorized account access.

12. Emergency Use

IHC Portal is not for emergencies. Do not use the app for urgent or emergency medical needs. Call 911 or seek immediate medical care in an emergency.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted with a new “Last Updated” date. Continued use of the app after an update means you accept the revised policy.

14. Contact Us

If you have questions about this Privacy Policy or your health information, contact:

Integrative Health Carolinas
2132 Lombardy Circle
Charlotte, NC 28203
Email: info@ihcclt.com
Phone: 704-553-1203

For HIPAA-related rights and requests, please refer to Integrative Health Carolinas’ Notice of Privacy Practices.