Privacy Policy

Version 1.0 · Effective July 14, 2026 · MBN Care Solutions, LLC

This Privacy Policy explains how MBN Care Solutions, LLC ("MBN," "we") handles information in connection with the MBN Care App platform and website. Washington residents: our separate Consumer Health Data Privacy Policy describes your rights under the Washington My Health My Data Act and controls as to consumer health data.

A note on HIPAA: MBN acts as a business associate of the adult family homes that use the Service. Protected health information ("PHI") you enter is handled on your behalf under a signed Business Associate Agreement and applicable law. We do not claim any government certification of HIPAA compliance; instead, we describe below the specific safeguards we implement.

Information we collect

Account information: name, email, username, a hashed password, and your home's license number.
Facility information: home name, address, license number, and resident count.
Usage data: login times, pages and features used, IP address, browser, and device.
PHI processed on behalf of a covered entity: resident records, medications and MAR records, shift reports, incident and fall reports, care plans, and related documentation you enter.
Payment information: processed by our payment processor; we store only limited billing details (such as the last four digits of a card and billing address), not full card numbers.
Communications: support requests and feedback you send us.

How we use information

To provide, secure, support, and improve the Service.
To process PHI strictly as directed by the covered entity and permitted by the Business Associate Agreement.
To send account and billing communications, and product updates you can opt out of.
To detect and prevent fraud and security incidents, and to comply with legal obligations.
We never use your data for advertising, and we never sell it.

How we share information

Cloud hosting (Amazon Web Services) under a business associate agreement.
Payment processing under the processor's own compliance program.
Support tools accessible only to authorized employees under access controls.
Government authorities only when legally required.
We do not share your data with advertisers, data brokers, or marketing companies.

Your rights

Washington My Health My Data Act. If you are a Washington consumer, you have the right to know what health data we collect, to access it, to obtain a list of third parties with whom it was shared, to withdraw consent, to delete it, and to appeal a denial (with escalation to the Washington Attorney General). See our Consumer Health Data Privacy Policy and email [email protected]. We respond within 45 days.

HIPAA patient rights. Residents have the right to access and amend their PHI and to an accounting of disclosures. Because MBN is a business associate, residents exercise these rights through their adult family home (the covered entity), which we support.

Data retention

Account and audit-log data retained for up to 7 years after termination, consistent with HIPAA norms.
PHI retained as directed by the covered entity, then returned or deleted per the Business Associate Agreement (adult family home records generally must be kept 3 years after a resident leaves or dies under WAC 388-76-10315).
Encrypted backups rotate on a periodic cycle.

Security

We implement, among other safeguards: encryption of data in transit (TLS) and at rest; role-based access controls; multi-factor authentication (available for accounts); audit logging of access and changes; per-home data isolation; and encrypted backups. No system is perfectly secure, and we describe our safeguards honestly rather than promising absolute security.

Breach notification

If a breach affecting your information occurs, we will notify affected parties consistent with our Business Associate Agreement and applicable law. Washington law requires notice to affected consumers within 30 days (RCW 19.255.010(8)); HIPAA allows up to 60 days. We commit to the shorter Washington timeframe.

Cookies

The Service uses a secure session cookie required to keep you signed in; you cannot opt out of this cookie and still use the Service. We do not use advertising cookies or third-party tracking pixels. Any analytics are for product improvement only.

Changes & contact

We may update this Policy and will change the version and effective date above. Contact [email protected] with questions.