Privacy Policy

Kura Solution (“Kura,” “we,” “us,” or “our”) is committed to protecting the privacy of residents, referral partners, staff, and visitors. This Privacy Policy explains what information we collect, how we use and share it, and the choices you have. By using our website, portals, forms, or messaging, you agree to this Policy.

1. Information we collect

We collect information you provide directly and information generated automatically when you use our services:

• Identity & contact information — name, email address, mailing address, and mobile/phone number.
• Health and program information — information you submit on intake, consent, medical, recovery, incident, and related forms (which may include protected health information and substance use disorder records).
• Referral information — facility details and contact information provided by referring partners.
• Account & authentication data — one-time passcodes, session cookies, and login timestamps.
• Electronic signatures — signature image or typed name, plus an audit trail (IP address, browser/user agent, timestamp, and a cryptographic fingerprint).
• Device & usage data — IP address, browser type, time zone, and pages viewed.

2. How we use information

• To operate the referral, intake, admission, and ongoing case-management workflow.
• To authenticate sign-ins via one-time passcodes.
• To send service notifications about the status of referrals, applications, and submissions.
• To maintain records required for compliance, billing, safety, and audit purposes.
• To secure, maintain, and improve our services.

3. SMS / text messaging

If you provide your mobile number, you consent to receive SMS/text messages from Kura Solution for (a) account authentication (one-time sign-in passcodes) and (b) service notificationsabout the status of your referral, application, or submitted forms. These are transactional, account-related messages.

• Message frequency varies based on your activity (for example, when you sign in or when a submission changes status).
• Message and data rates may apply from your mobile carrier.
• Reply STOP to any message to unsubscribe and stop receiving texts; reply HELP for assistance, or contact us at privacy@kurasolution.org or [Phone Placeholder].
• Carriers are not liable for delayed or undelivered messages.
• Your consent to receive text messages is not a condition of receiving housing or any other service; you may instead use email.

We do not sell, rent, or share your mobile number or SMS opt-in information with third parties or affiliates for their marketing or promotional purposes. Mobile information is shared only with the messaging providers that help us deliver these texts, solely to send the messages you have requested or consented to receive.

4. How we share information

We do not sell your personal information. We share it only as needed to operate our services or as required by law:

• Service providers — for example, our SMS provider (Twilio), email provider (Resend), and database/hosting provider (Supabase / Vercel), each acting on our instructions under contract.
• Referring facilities — limited status information about a referral they submitted.
• Legal & safety — when required by law, subpoena, or to protect the safety of residents, staff, or the public, subject to the confidentiality protections below.

5. Confidentiality of substance use and health records

Records that identify an individual as having a substance use disorder are protected under 42 CFR Part 2, and protected health information is handled consistent with HIPAA where applicable. These records are not disclosed without proper authorization or a recognized legal exception. Where this Policy conflicts with those laws, the stricter protection controls.

6. Data retention

We retain information for as long as needed to provide services and to meet legal, regulatory, accreditation, billing, and audit obligations, after which it is securely deleted or de-identified.

7. Security

We use administrative, technical, and physical safeguards — including encrypted connections, access controls, and audit logging — to protect your information. No method of transmission or storage is perfectly secure, however, and we cannot guarantee absolute security.

8. Your choices and rights

• Opt out of SMS at any time by replying STOP.
• Request access to, correction of, or deletion of your information, subject to records we must legally retain.
• Decline cookies through your browser settings (some features may not function without them).

9. Children

Our services are intended for adults. We do not knowingly collect information from children under 13.

10. Changes to this Policy

We may update this Policy from time to time. Material changes will be posted here with a revised “Last updated” date.

11. Contact us

Questions about this Policy or your information? Contact us at privacy@kurasolution.org or [Phone Placeholder].

This page is provided for general information and does not constitute legal advice. See also our Terms & Conditions and Privacy Policy.