GoodStanding Privacy Policy

GoodStanding ("we," "us," or "the app") is a credential management application for healthcare providers, operated by Apex Clinical Group LLC. This Privacy Policy explains what information we collect, how we use it, and the choices you have. By creating an account and using GoodStanding, you agree to the practices described here.

Information We Collect

We collect only the information needed to provide the app's core functionality — helping you store, track, and share your professional credentials. Specifically:

• Account information: your email address, and optionally your name and phone number, used to create and manage your account and to appear on credential documents you choose to generate.
• Credential information: the details you enter or that are extracted from documents you upload — such as credential names, issuing organizations, credential numbers, and issue/expiration dates. Some of this may constitute health-related information (for example, immunization records).
• Document images: photos or PDF files of credentials you choose to upload.
• Professional summary: any professional statement you choose to add to your profile.
• Account identifier: a unique user ID associated with your account.

How We Use Your Information

We use your information solely to operate and provide the app's functionality, including:

• Creating and securing your account;
• Storing and organizing your credentials;
• Sending you expiration reminders (including through a calendar feed you may choose to subscribe to);
• Generating credential summaries and documents that you choose to share.

We do not use your information for advertising, and we do not track you across other apps or websites.

How Your Information Is Shared

We do not sell your personal information. We do not share your information with third parties for their own marketing purposes. Your information is disclosed only in these limited circumstances:

• At your direction: when you generate and share a credential document or subscribe to a calendar feed, that information goes where you send it.
• Service providers: we use trusted infrastructure providers to host data and process documents, including Supabase (secure database and storage) and Anthropic (AI-based document reading). These providers process data on our behalf and are not permitted to use it for their own purposes.
• Legal requirements: if required by law, regulation, or valid legal process.

Document Scanning

When you scan a credential, the document image is sent securely to an AI service to extract the credential details. The app is designed to avoid extracting sensitive personal identifiers such as Social Security numbers.

Data Storage and Security

Your data is stored using industry-standard secure infrastructure. Access to your credentials is restricted to your account through authentication and row-level security controls, and stored document images are kept in private storage accessible only through temporary, authenticated links. While we take reasonable measures to protect your information, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Your Choices

• You may edit or delete any credential at any time within the app.
• You may update your profile information at any time.
• You may request deletion of your account and associated data by contacting us at the email below.

Children's Privacy

GoodStanding is intended for use by professional healthcare providers and is not directed to children under 13. We do not knowingly collect information from children.

Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

Contact Us

If you have questions about this Privacy Policy or your data, contact us at:
info@apexclinicalgroup.com