Privacy policy
Effective October 29, 2026
Chart is a personal health record operated by Chaleb Pommells at phr.iamcpdev.me. This policy explains what Chart stores, why, and who can see it.
What Chart stores
- Your name, email, date of birth, phone number and time zone.
- Entries you make, such as symptoms, vital signs, lab draws, wound care, medications given and notes, with any photos you attach.
- Readings sent from your own devices, such as Apple Health data from your iPhone.
- Copies of records from patient portals you connect, such as conditions, medications, allergies, lab results, immunizations, procedures, visits and vital signs.
- Documents you upload and faxes you send or receive through Chart.
- An activity log of sign-ins, views and changes, kept for your security.
How it is used
Your information is used only to show your records to you and to people you choose to share them with, and to send faxes you ask Chart to send. Chart does not sell, rent or trade your information, does not use it for advertising, and does not share it for anyone else's marketing or research.
Patient portal access
When you connect a portal, Chart receives read-only access to your own records from that portal. The access is stored encrypted and used only to copy your records into Chart, at most once a day. Chart never receives your portal password. Disconnecting a portal deletes the stored access; records already copied stay in your account until you delete them.
Who can see your information
- You, signed in with your passkey.
- Providers or caregivers you give access to, limited to what you choose to share and for as long as you allow.
- Service providers that run Chart on the operator's behalf, only as needed to provide the service: Vercel (hosting), Neon (database) and, when you send or receive a fax, the fax carrier.
- Anyone the law requires the operator to disclose information to.
Security
Chart uses passkeys instead of passwords and encrypts all connections. Photos, documents and portal access are additionally encrypted before they are stored. Every sign-in and view is logged.
Your choices
- Disconnect any portal or device at any time.
- Download or fax your own records.
- Ask for your account and all of its records to be deleted.
Changes
If this policy changes, the effective date above will change.