📜 Terms of Service & Clinical Software Disclaimer

Terms of Service

Last updated: August 2026

1. Professional Clinical Software Disclaimer

phiReports.health is a specialized document formatting and compilation tool intended solely for use by licensed medical practitioners, audiologists, otolaryngologists, and healthcare professionals. phiReports.health does not provide medical advice, diagnosis, or clinical treatment recommendations. All clinical interpretations, diagnostic impressions, and treatment plans remain the sole responsibility of the licensed practitioner.

2. Pay-As-You-Go Credits & Voucher Policy

Report credits purchased on phiReports.health are non-expiring prepaid vouchers redeemable for high-resolution vector PDF document generation. One credit is deducted per finalized official document download. Live drafting, client-side math calculations, and in-memory preview rendering are provided without credit deduction.

3. Payment Processing via Stripe

Payment processing services for phiReports.health credit bundles are provided by Stripe, Inc. and are subject to the Stripe Services Agreement. By purchasing credit bundles on phiReports.health, you agree to be bound by Stripe’s terms and authorize phiReports.health to charge your designated payment method.

Decoupled PHI Separation: Stripe collects and processes payment card information exclusively for billing verification. Stripe does not have access to, nor does it process or store, any Protected Health Information (PHI), patient names, diagnostic measurements, or medical notes generated on phiReports.health.

4. Refund Policy

If you are unsatisfied with your purchased credit bundle, you may request a full refund within 30 days of purchase for any unused, unredeemed report credits. Once a credit is consumed to generate an official finalized clinical PDF, that individual credit is considered fully redeemed and non-refundable. Refund requests can be initiated via your clinic passkey receipt email.

5. Cloud Infrastructure & Service Availability

phiReports.health operates across globally redundant enterprise cloud infrastructure powered by Tier-1 cloud providers (Serverless Containers) and Global Edge Networks (DNS & WAF). While we target 99.9% uptime, services are provided on an "as is" and "as available" basis.

6. Zero-Retention Data Architecture & Document Integrity

Users acknowledge that because phiReports.health operates on a zero-data-retention architecture, phiReports.health does not maintain cloud backups or persistent copies of generated patient documents. Clinicians are responsible for saving and archiving exported PDF documents into their primary electronic medical record (EMR) or local clinic storage.

SHA-256 Cryptographic Verification: Each compiled PDF is cryptographically fingerprinted with a deterministic SHA-256 checksum at the moment of creation. Practice administrators may utilize the compliance audit ledger and 1-click CSV export to verify the authenticity and unaltered status of any exported clinical report.

7. Cookie & Local Storage Consent

By using phiReports.health, you acknowledge and consent to our use of functional cookies and local browser storage as detailed in our Privacy Policy. These are strictly necessary mechanisms used to operate the platform securely, remember your interface preferences, and persist your authenticated passkey session without requiring centralized tracking databases.

8. Dual-Engine Deployment Terms (Web & Desktop Workstation)

Users may access phiReports.health via web browsers or the native Desktop application. The Desktop application operates with 100% local on-device vector rendering and offline store-and-forward audit queues. Prepaid report credits apply equally across cloud serverless and desktop local exports.

9. Security Auditing & Workforce Accountability (HIPAA § 164.312(b))

Clinic administrators are provided real-time and historical audit logs (including authentication attempts, document timestamps, geographic edge regions, and client device platforms) to satisfy federal HIPAA workforce oversight mandates. Organizations are responsible for maintaining internal authorization policies regarding practitioner access and export destinations.