WoundGraft Pro — Privacy Policy

Effective date: June 1, 2026   Last updated: June 22, 2026

 

This Privacy Policy describes how the WoundGraft Pro mobile application (“WoundGraft Pro,” “the App”) handles information. WoundGraft Pro is published by Clear Health Pass Holdings, LLC (“Clear Health Pass,” “CHP,” “we,” “us,” or “our”).

 

This policy applies only to the WoundGraft Pro iOS application. It does not apply to the consumer-facing Clear Health Pass websites or products, which are governed by their own separate privacy policy.

 

1. Who the App is for

WoundGraft Pro is a professional clinical tool intended solely for use by licensed healthcare providers and their authorized staff at practices that have contracted with Clear Health Pass. It is not intended for, or directed to, the general public, patients, or children. The App is used by clinicians to document wound-care treatments and skin-graft applications.

 

2. The short version

WoundGraft Pro is built to be offline-first and privacy-preserving. The App:

 

• Processes clinical and patient information locally on the clinician’s device only. Does not transmit, share, or sell that information to CHP or any third party except through the user-initiated export described in Section 5.
• Contains no analytics, advertising, tracking, or crash-reporting software, and no third-party SDKs.
• Stores all information locally on the clinician’s device, encrypted at rest.
• Transmits nothing automatically. Clinical data leaves the device only when the clinician deliberately exports an encrypted bundle and chooses to share it with the Clear Health Pass Woundcare Portal.

 

3. Information processed by the App

To perform its function, WoundGraft Pro processes information that the clinician enters or captures on the device, which may include protected health information (PHI):

 

• Patient identifiers — name, date of birth, gender, medical record number (MRN), address, and insurance details, as entered by the clinician.
• Clinical content — wound photographs, LiDAR-based wound measurements, body-location selections, graft product details (lot/serial number, size, manufacturer, expiration), clinical notes, and the clinician’s signature.
• Clinician and facility details — provider name, credentials (e.g., NPI), and facility information, as configured by the user.

 

All of this information is entered by, and remains under the control of, the clinician and their practice. Clear Health Pass does not receive this information through the App itself.

 

4. How information is used

Information processed by the App is used only on the device to:

 

• Guide the clinician through the wound-care documentation workflow.
• Generate clinical measurements, photographs, and documentation.
• Assemble an export bundle for the clinician’s practice.

 

We do not use this information for advertising, profiling, analytics, or any secondary purpose.

 

5. Information sharing

WoundGraft Pro does not share information with third parties. There is no automatic transmission of data to Clear Health Pass or anyone else.

 

The only way clinical data leaves the device is when the clinician manually initiates an export. The App assembles an encrypted export bundle and presents the standard iOS share option, allowing the clinician to send the bundle to the Clear Health Pass Woundcare Portal operated by their practice. This action is always user-initiated and deliberate. Once a bundle is submitted to the Portal, it is handled under the practice’s and CHP’s applicable agreements and security controls, separate from the App.

 

CHP handles information submitted to the Portal in accordance with CHP’s Woundcare Portal data use and security policies and the applicable Business Associate Agreement between CHP and the contracting practice. For information about Portal data handling, contact support@clearhealthpass.com.

 

6. Data security

WoundGraft Pro applies the following safeguards on the device:

 

• Encryption at rest — all patient data, photographs, and export bundles are protected using the device’s hardware-backed file encryption (Apple Data Protection / NSFileProtectionComplete).
• Authentication lock — the App locks after a period of inactivity and requires Face ID, Touch ID, or device passcode to resume.
• Screen privacy — patient content is hidden when the App is moved to the background or shown in the app switcher.
• No cloud sync — the App does not use iCloud, CloudKit, or any cloud database. Data stays on the device.
• Location stripped — GPS metadata is removed from all photographs.
• No clipboard exposure — patient data is protected from persisting in the system clipboard.

 

No method of electronic storage is perfectly secure, and security on the device also depends on the practice’s own device-management and access policies.

 

7. Data retention and deletion

All information remains local to the device and under the clinician’s control. The clinician or practice can delete sessions and exported bundles within the App or by removing the App, which deletes its local data. Clear Health Pass does not retain a copy of this information through the App.

 

8. Children’s privacy

WoundGraft Pro is a professional tool and is not directed to children. We do not knowingly collect information from children through the App.

 

9. HIPAA

 

WoundGraft Pro processes all clinical information entirely on the provider’s device. CHP does not receive protected health information through the App.

When a provider submits an export bundle to the CHP Woundcare Portal, that submission is governed by the Business Associate Agreement between CHP and the contracting practice. CHP acts as a Business Associate with respect to PHI received through the Portal.

Responsibility for device-level HIPAA safeguards — including appropriate access controls, encryption policies, workforce training, and audit controls — rests with the contracting practice in its capacity as a HIPAA-covered entity. This Privacy Policy is not a substitute for the Business Associate Agreement or the practice’s own HIPAA policies.

 

10. Changes to this policy

We may update this Privacy Policy from time to time.  We will notify contracted practices of material changes by email to the designated practice administrator on record with CHP at least 30 days before the change takes effect. The updated policy will be available at the URL above. Continued use of the App after the effective date of a material change constitutes acceptance of the revised policy.

 

11. Contact

Questions about this Privacy Policy or WoundGraft Pro can be directed to:

 

Clear Health Pass Holdings, LLC

support@clearhealthpass.com

https://clearhealthpass.com