Privacy Policy

1. Who We Are

Lugicus (“Lugicus”, “we”, “us”) operates a platform that connects families with verified Applied Behavior Analysis (ABA) therapy providers — including Board Certified Behavior Analysts (BCBAs) and Registered Behavior Technicians (RBTs) — and helps ABA clinics manage scheduling, session documentation, communication, and insurance workflows.

This Privacy Policy applies to the Lugicus website, web application, and mobile applications (together, the “Services”).

2. Information We Collect

Information you provide

• Account information — name, email address, phone number, password, and role (for example parent/guardian, clinic administrator, or therapy provider).
• Child and client information — provided by a parent, guardian, or treating clinic: the child’s name, date of birth, diagnosis and related health information, therapy preferences, and session records such as schedules, session notes, and progress documentation.
• Provider and clinic information — professional credentials, certifications, licenses, National Provider Identifier (NPI), staff profiles, and clinic details.
• Insurance and billing information — insurance payer, member ID, coverage and eligibility details, authorizations, and claims information needed to support insurance billing.
• Payment information — processed by our payment processor (Stripe). We do not store full payment card numbers on our systems.
• Communications — messages, and audio/video session content transmitted through the platform’s secure chat and telehealth features.

Information collected automatically

• Usage and device data — log data, device type, operating system, app version, identifiers needed to deliver push notifications, and interactions with the Services.
• Location information — with your permission, the mobile app may record the service location when a therapy session is started (for example home, clinic, or school), as required for visit verification and insurance billing.
• Cookies and similar technologies — used to keep you signed in and to operate the Services. We do not use cookies for third-party advertising.

3. How We Use Information

• Provide, operate, and secure the Services;
• Connect families with appropriate ABA providers and manage therapy scheduling;
• Support clinical documentation, session sign-off, and supervision workflows;
• Verify insurance eligibility, obtain authorizations, submit claims, and process payments on behalf of participating clinics;
• Send service notifications (for example appointment reminders and messages);
• Maintain safety, prevent fraud and abuse, and comply with legal obligations;
• Improve the reliability and quality of the Services.

We do not sell personal information, and we do not use health information for advertising.

4. Health Information and HIPAA

Some information handled by the Services is protected health information (“PHI”) under the U.S. Health Insurance Portability and Accountability Act (HIPAA). When Lugicus processes PHI on behalf of a participating clinic or provider (each a HIPAA covered entity), it does so as a service provider under written agreements, and that clinic’s own privacy practices also apply to your care relationship. PHI is used and disclosed only as permitted by applicable law and by our agreements with the treating clinic — primarily for treatment, payment, and health-care operations purposes.

5. How We Share Information

We share information only as needed to run the Services:

We may also disclose information when required by law, to protect the rights and safety of users, or as part of a corporate transaction (in which case this policy will continue to apply to previously collected information).

6. Data Security

We use administrative, technical, and physical safeguards designed to protect your information, including encryption in transit and at rest, key-management-based encryption for sensitive records, role-based access controls, and audit logging of access to health information. No method of transmission or storage is completely secure, but we work to protect your information against unauthorized access, alteration, and loss.

7. Data Retention

We retain information for as long as needed to provide the Services and to meet legal, regulatory, and clinical-record retention requirements that apply to ABA therapy and insurance billing. When information is no longer required, we delete or de-identify it.

8. Children’s Privacy

The Services support therapy for children, and information about children is provided to us by their parents or legal guardians and by their treating clinics — not collected directly from children. The Services are not directed at children, and children are not permitted to create accounts. If you believe a child has provided us information directly, please contact us and we will delete it.

9. Your Choices and Rights

• Access and correction — you can review and update account and profile information in the app, or contact us for help.
• Deletion — you may request deletion of your account and associated personal information, subject to record-keeping obligations that apply to clinical and billing records.
• Push notifications — you can turn off push notifications in your device settings.
• Location — you can control the app’s location permission in your device settings; some session-verification features may not work without it.
• Health records — requests about therapy records may be fulfilled with or by your treating clinic, consistent with HIPAA.

10. Changes to This Policy

We may update this policy as the platform develops — including before wider public launch. We will post the updated policy on this page with a new effective date, and, for material changes, provide additional notice through the Services.

11. Contact Us