// GENERATED BY `npm run agreements` FROM THE SOURCE DOCUMENTS IN akashic-docs/legal/. // DO NOT EDIT BY HAND - `npm run agreements:check` fails if this file and those documents // disagree, and it runs in the ratchets, so a hand edit is reverted by the next generate and a // source edit that never reached here goes red. // // The parse that produced these blocks happened at BUILD time, not at display time. That is the // whole point: Spencer rejected a markdown renderer twice, because a parser between the // evidentiary record and the screen means a mis-parse silently changes what the document appears // to say. Here a mis-parse is a diff in this file, reviewed before it ships. // // Each version below is read from its source document's `version` frontmatter, so the version a // client resolves and the text it displays cannot come from different documents. import type { AgreementBlock } from './agreementCopy.ts'; // From legal/akashic-terms-of-service.md, version v0.1-placeholder. export const TERMS_OF_SERVICE_VERSION = 'v0.1-placeholder'; export const TERMS_OF_SERVICE_TITLE = `Akashic Health Records — Terms of Service`; export const TERMS_OF_SERVICE_BLOCKS: AgreementBlock[] = [ { type: 'title', text: `Terms of Service` }, { type: 'paragraph', text: `Effective date: [to be set on first real version] Version: v0.1-placeholder` }, { type: 'heading', text: `1. Acceptance` }, { type: 'paragraph', text: `By creating an account, signing in, or using Akashic Health Records ("Akashic", "we", "us"), you agree to these Terms. If you do not agree, do not use the service.` }, { type: 'paragraph', text: `If you are using Akashic on behalf of an organization, you represent that you are authorized to accept these Terms for that organization.` }, { type: 'heading', text: `2. What Akashic is — and is not` }, { type: 'paragraph', text: `Akashic is a health record and coordination platform. It stores health information, and lets you and the people and organizations you choose view and work with it together.` }, { type: 'paragraph', text: `Akashic is not a healthcare provider. We do not practice medicine, provide medical advice, diagnose, or treat. Nothing in the service is a substitute for professional medical judgment. Any clinical information in your record is authored by the clinicians and organizations who entered it, not by us.` }, { type: 'paragraph', text: `Akashic is not for medical emergencies. If you are experiencing a medical emergency, call your local emergency number or go to the nearest emergency department. Do not use Akashic to seek emergency care, and do not rely on it to deliver an urgent message to a clinician.` }, { type: 'heading', text: `3. Accounts and eligibility` }, { type: 'paragraph', text: `You must provide accurate information when creating an account and keep it current. You are responsible for activity under your account and for keeping your credentials secure. Tell us promptly if you believe your account has been accessed without your permission.` }, { type: 'paragraph', text: `Accounts for minors, and accounts accessed by a parent, guardian, or other authorized person on someone else's behalf, are governed by the proxy and guardianship rules described in the service and by applicable law.` }, { type: 'heading', text: `4. Your record, and your control over it` }, { type: 'paragraph', text: `Your health record in Akashic belongs to you. Organizations and practitioners participate in it; they do not own it.` }, { type: 'paragraph', text: `You control which organizations and individuals may access your clinical information, and you may change or withdraw that access. Withdrawing access is not retroactive: it does not erase what was previously and lawfully shared, and it does not remove records an organization is independently required to keep.` }, { type: 'heading', text: `5. Organizations, practitioners, and their own obligations` }, { type: 'paragraph', text: `Organizations using Akashic are separately responsible for their own legal obligations to you, including their own privacy practices and record-keeping duties. Where we handle protected health information on an organization's behalf, we do so under a Business Associate Agreement with that organization.` }, { type: 'paragraph', text: `Information an organization or practitioner enters is theirs; we do not verify its clinical accuracy.` }, { type: 'heading', text: `6. Acceptable use` }, { type: 'paragraph', text: `You agree not to:` }, { type: 'list', items: [ `access or attempt to access information you are not authorized to see;`, `misrepresent your identity, role, or authority;`, `interfere with, disrupt, probe, or attempt to circumvent the security of the service;`, `use the service to violate any law, or any other person's privacy or rights;`, `copy, scrape, resell, or redistribute the service or another person's information.`, ] }, { type: 'heading', text: `7. Fees` }, { type: 'paragraph', text: `Access for patients is free. Organizations pay for the service as described in their subscription. Fees, limits, and included capacity are set out at the time of purchase and may change on notice.` }, { type: 'heading', text: `8. Availability and disclaimers` }, { type: 'paragraph', text: `We work to keep the service available, but we do not guarantee uninterrupted or error-free operation. Except as required by law, the service is provided "as is" and without warranties of any kind, express or implied.` }, { type: 'heading', text: `9. Limitation of liability` }, { type: 'paragraph', text: `To the fullest extent permitted by law, Akashic is not liable for indirect, incidental, special, consequential, or punitive damages, or for lost profits or lost data. [Liability cap and carve-outs to be set by counsel.]` }, { type: 'heading', text: `10. Termination` }, { type: 'paragraph', text: `You may stop using Akashic at any time. We may suspend or terminate access for breach of these Terms, for suspected unauthorized access, or as required by law. Your health record and its history are retained and handled as described in the Privacy Notice; termination of access is not deletion of the record.` }, { type: 'heading', text: `11. Changes to these Terms` }, { type: 'paragraph', text: `We may update these Terms. When we do, the updated version is given a new version number and you will be asked to accept it at your next sign-in.` }, { type: 'paragraph', text: `A version you accepted is never revoked — it is superseded. Every version you accepted, and when you accepted it, is retained as part of the record.` }, { type: 'heading', text: `12. Governing law` }, { type: 'paragraph', text: `[To be set by counsel.]` }, { type: 'heading', text: `13. Contact` }, { type: 'paragraph', text: `[Contact address, support email, and notice address to be set.]` }, ]; // From legal/akashic-privacy-notice.md, version v0.1-placeholder. export const PRIVACY_CONSENT_VERSION = 'v0.1-placeholder'; export const PRIVACY_CONSENT_TITLE = `Akashic Health Records — Privacy Notice & Consent`; export const PRIVACY_CONSENT_BLOCKS: AgreementBlock[] = [ { type: 'title', text: `Part 1 — Privacy Notice` }, { type: 'paragraph', text: `Version: v0.1-placeholder · Effective: [to be set]` }, { type: 'heading', text: `What this covers` }, { type: 'paragraph', text: `This explains how Akashic Health Records handles your health information, what you control, and what rights you have.` }, { type: 'heading', text: `What we collect` }, { type: 'list', items: [ `Information you give us: name, date of birth, contact details, and anything you enter or upload.`, `Information organizations give us: clinical information entered by practitioners and staff at the organizations participating in your care.`, `Information about your use of the service: sign-ins, actions taken on your record, and who accessed it — kept as an audit record.`, ] }, { type: 'heading', text: `How we use it` }, { type: 'paragraph', text: `To operate the service: to store your record, show it to you and to the people you have authorized, support scheduling and communication with your collaboration team, and meet our legal and security obligations.` }, { type: 'paragraph', text: `We do not sell your health information. We do not use it for advertising.` }, { type: 'heading', text: `Who we share it with` }, { type: 'list', items: [ `Organizations and individuals you authorize — and only those. You choose them, and you can change your mind.`, `Service providers who help us run the platform, under contracts that require them to protect it.`, `When the law requires it, or to prevent a serious and imminent threat to health or safety.`, ] }, { type: 'paragraph', text: `Where we handle information on an organization's behalf, we do so under a Business Associate Agreement with that organization.` }, { type: 'heading', text: `Your rights` }, { type: 'list', items: [ `See and get a copy of your information.`, `Ask us to correct information you believe is wrong.`, `See who has accessed or changed your record.`, `Choose and change who may access it.`, `Withdraw an authorization you previously gave.`, `Ask for restrictions on how your information is used or shared.`, `Be told if there is a breach affecting your information.`, ] }, { type: 'paragraph', text: `To exercise any of these, use the controls in the service or contact us at [address to be set].` }, { type: 'heading', text: `How withdrawal works` }, { type: 'paragraph', text: `Withdrawing access stops future access. It is not retroactive — it does not un-share what was already lawfully shared, and it does not remove records an organization is independently required to keep. Your record and its history remain intact; what changes is who may reach it going forward.` }, { type: 'heading', text: `Retention` }, { type: 'paragraph', text: `We retain your record and its history for as long as your account is active and afterwards as required by law and by our agreements with participating organizations. History is retained deliberately — the ability to show what your record said at a point in time, and who changed it, is part of protecting you.` }, { type: 'heading', text: `Security` }, { type: 'paragraph', text: `We protect your information with technical, administrative, and physical safeguards, including encryption and access controls. No system is perfectly secure, and we will notify you as required by law if a breach affects your information.` }, { type: 'heading', text: `Changes to this notice` }, { type: 'paragraph', text: `We may update this notice. Updated versions get a new version number, and you will be asked to review at your next sign-in. A version you accepted is superseded, never revoked, and every version is retained.` }, { type: 'heading', text: `Questions or complaints` }, { type: 'paragraph', text: `Contact us at [to be set]. You may also complain to the U.S. Department of Health and Human Services. We will not retaliate against you for filing a complaint.` }, { type: 'title', text: `Part 2 — Consent` }, { type: 'paragraph', text: `Version: v0.1-placeholder` }, { type: 'paragraph', text: `By accepting, I consent to Akashic Health Records:` }, { type: 'paragraph', text: `1. Creating and maintaining a health record for me, including information I provide and information entered by organizations and practitioners participating in my care. 2. Storing and processing that information in order to operate the service described above. 3. Making it available to the organizations and individuals I choose, for as long as I choose, and stopping when I withdraw that choice.` }, { type: 'paragraph', text: `I understand that:` }, { type: 'list', items: [ `This consent is separate from any authorization I give an individual organization. Consenting to Akashic does not give any organization access to my clinical information — I choose those separately.`, `I may withdraw this consent at any time. Withdrawal applies going forward and does not undo sharing that already occurred.`, `Akashic is not my healthcare provider and does not give medical advice.`, `My record and its history are retained as described in the Privacy Notice.`, ] }, { type: 'paragraph', text: `Accepted by: [patient] · [date] · version v0.0-placeholder` }, { type: 'heading', text: `There is no in-person capture of this document` }, { type: 'paragraph', text: `This is not captured in the office. A patient who never signs in never enters a direct relationship with Akashic at all. For that patient Akashic is simply the practice's software — a business associate, covered by the BAA and the practice's own privacy paperwork, exactly like any other EHR vendor. This document is owed only by patients who actually log in, and is accepted at first sign-in.` }, ];