Privacy Policy

1. Introduction

JAM Dietary("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use JAM Dietary("the Service").

2. Information We Collect

Personal Information

• Name and email address
• Account credentials
• Billing information (processed securely through Stripe)
• Facility/organization information

Usage Information

• Log data (IP address, browser type, pages visited)
• Device information
• Usage patterns within the Service

Dietary Data

• Resident dietary information (diets, textures, allergies)
• Scheduling and staffing data
• Budget and inventory information
• Training and compliance records

3. How We Use Your Information

• To provide and maintain the Service
• To process transactions and send billing information
• To send important updates about your account or the Service
• To respond to customer support requests
• To improve and personalize the Service
• To detect and prevent fraud or abuse
• To comply with legal obligations

4. Data Security

We implement industry-standard security measures to protect your data:

• Encryption in transit (TLS/SSL) and at rest
• Secure authentication with password hashing
• Row-level security policies in our database
• Regular security audits and monitoring
• Access controls limiting employee access to data

5. HIPAA Compliance Notice

While JAM Dietary is designed with security best practices, the Service is primarily an administrative tool for dietary management. If you use the Service to store Protected Health Information (PHI) as defined by HIPAA, you are responsible for ensuring compliance with HIPAA requirements. We recommend consulting with your compliance officer before storing any PHI in the Service. Contact us if you require a Business Associate Agreement (BAA).

6. Data Sharing and Disclosure

We do not sell your personal information. We may share data with:

• Service Providers: Third parties that help us operate the Service (e.g., Stripe for payments, Supabase for database hosting, Vercel for web hosting)
• Legal Requirements: When required by law, court order, or government request
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you explicitly authorize sharing

7. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. After account deletion, we may retain certain data as required by law or for legitimate business purposes (e.g., resolving disputes, enforcing agreements). You may request deletion of your data by contacting us.

8. Your Rights

Depending on your location, you may have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your data
• Export your data
• Opt out of marketing communications
• Withdraw consent where processing is based on consent

To exercise these rights, contact us at support@jamdietary.com.

9. Cookies and Tracking

We use essential cookies to maintain your session and preferences. We do not use third-party tracking or advertising cookies. You can control cookies through your browser settings, but disabling essential cookies may affect Service functionality.

10. Children's Privacy

The Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If we learn we have collected data from a child, we will delete it promptly.

11. International Users

The Service is hosted in the United States. If you access the Service from outside the U.S., your data will be transferred to and processed in the U.S. By using the Service, you consent to this transfer.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service. Your continued use after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at: support@jamdietary.com