How we handle your data
This page is maintained by Universal Business Development Systems to answer common security and privacy questions about AR PRO. It describes current practices and is not an independent certification or audit report.
What we commit to
The practices below reflect how AR PRO is built and operated today.
HIPAA-conscious by design
The AR Health Check analyzer runs entirely in your browser. Any files you upload for assessment are processed client-side — they are not transmitted to our servers, and no protected health information (PHI) is stored by AR PRO.
Minimal data collection
When you submit the assessment lead form, we collect only your name, email, and the high-level outcomes of your assessment (scores and summary metrics). We do not collect patient names, account numbers, or claim-level detail.
Hosted on Lovable Cloud
AR PRO runs on Lovable Cloud, which uses Supabase for database and authentication and Cloudflare's global edge network for delivery. Data in transit is encrypted using TLS, and data at rest is encrypted by the underlying platform.
Access controls
Database access is gated by row-level security policies. Administrative access to backend systems is limited to the AR PRO team and protected by authenticated sessions.
What data we collect
- Assessment lead form: your name, email, and the summary outcomes of the AR Health Check (scores, category totals).
- Uploaded AR data: processed in your browser. Not uploaded, not stored, not visible to AR PRO.
- Standard request logs: IP address and user agent are observed by our hosting platform for security and abuse prevention.
Retention
Lead submissions (name, email, and assessment outcomes) are retained for up to one year from the date of submission, after which they are deleted. You can request earlier deletion at any time by contacting us.
Your rights
You may request access to, correction of, or deletion of the personal information AR PRO holds about you. Send privacy requests to the contact below and we will respond within a reasonable timeframe.
Shared responsibility
AR PRO is responsible for the security of the application and the data we directly collect. Our hosting platform (Lovable Cloud, built on Supabase and Cloudflare) is responsible for the underlying infrastructure. Customers are responsible for keeping their own credentials safe and for ensuring any data they choose to analyze with AR PRO is shared in accordance with their own policies and any applicable agreements (for example, BAAs with their payers or partners).
Contact
For security questions, privacy requests, or to report a suspected vulnerability, email hello@arpro.health.
Last updated: June 2026. This page reflects current practices and may be updated as the product evolves.