Do my clients need to download an app?

No. Clients can sign on their own phone or tablet by scanning a QR code or opening a link, or right on the practice's iPad or iPhone handed to them at the front desk. Only the practitioner needs the Consentify app.

No: Consentify runs on both iPad and iPhone (iOS 17+). iPad is recommended for the larger screen at the front desk, but the app is fully featured on iPhone too. Practitioners can also sign in from any web browser at app.getconsentify.com. Clients still sign on any phone via QR code or link.

Is Consentify HIPAA compliant?

Yes. Consentify is HIPAA compliant: AES-256 encryption at rest, TLS 1.2+ in transit, and a tamper-proof audit trail on every record. A Business Associate Agreement (BAA) is included on the Elite and Empire plans, signed electronically in the app.

Are digital signatures legally binding?

Yes: electronic signatures are legally valid across the US under the federal E-SIGN Act and state UETA laws. Every Consentify signature is timestamped and sealed in a tamper-proof audit trail, which typically makes it easier to defend than paper: you can prove exactly what was signed, when, and that it hasn't been altered since.

What if I lose internet during an appointment?

Full offline mode. Submissions, signatures, notes, and photos all queue locally and sync the moment you reconnect. Nothing is ever lost.

How long does setup take?

Under 5 minutes. Upload your existing paper or PDF forms, AI converts them into editable digital forms, and you're ready to send your first QR link.

Can I cancel anytime?

Yes. Subscribe on iPad or iPhone and it is managed through your Apple ID; subscribe on the web and it is managed in the web app's Plan settings. Either way it is one tap, and the free Essential plan never expires.

Privacy Policy: Your Data at Consentify

1. Introduction

Consentify LLC ("Consentify," "we," "us," or "our") operates the Consentify platform, including the website at getconsentify.com, the Consentify iOS application, and related services (collectively, the "Service"). This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you use our Service.

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use the Service.

2. Information We Collect

2.1 Information You Provide

Account Information: Name, email address, password, and business name when you create an account.
Form Data: Information submitted through consent forms created on the platform, including client names, contact details, medical history, signatures, and photographs.
Contact Information: Name, email, phone number, and message content when you contact us through our website.
Payment Information: Subscriptions are billed by Apple through In-App Purchase; affiliate payouts are processed by Stripe. We never receive or store credit card numbers on our servers.

2.2 Information Collected Automatically

Usage Data: IP address, browser type, pages visited, and timestamps.
Signature Audit Data: When a consent form is signed, we record the submission timestamp and the IP address of the device used to sign. This information is part of the form's tamper-evident audit record, is visible only to the practice that owns the form, and is never included in emails or client-facing documents.
Device Information: Device type, operating system, and unique device identifiers.
Cookies: Essential cookies for authentication and session management, plus analytics and advertising cookies on our marketing website as described in Section 8.

3. How We Use Your Information

We use collected information to:

Provide, maintain, and improve the Service.
Process form submissions, generate PDFs, and send email/SMS confirmations.
Manage your account and process subscription payments.
Respond to your inquiries and provide customer support.
Detect, prevent, and address security issues and fraud.
Measure how our website and advertising perform, as described in Section 8.
Comply with legal obligations and applicable privacy regulations.

4. Data Storage and Security

All data is stored on Amazon Web Services (AWS) infrastructure in the United States. We implement the following security measures:

Encryption: AES-256 encryption at rest and TLS 1.2+ encryption in transit.
Access Controls: Role-based access control (RBAC) with multi-factor authentication.
Backups: Automated backups every 4 hours with point-in-time recovery.
Audit Logs: Immutable logs of all data access and modifications.

5. Healthcare Data

Consentify is HIPAA compliant, featuring AES-256 encryption, immutable audit trails, role-based access controls, and hardware-backed security keys. A Business Associate Agreement (BAA) is included on the Elite and Empire plans and can be reviewed and signed electronically in the app (Settings > Legal). Questions: support@getconsentify.com.

6. Data Privacy Rights

We respect your data privacy rights. Users have the following rights:

Right to Access: Request a copy of personal data we hold about you.
Right to Correction: Request correction of inaccurate personal data.
Right to Deletion: Request permanent deletion of your personal data.
Right to Data Portability: Receive your data in a commonly used, machine-readable format.
Right to Opt Out: Opt out of the sale of personal data or targeted advertising.

To exercise these rights, contact us at support@getconsentify.com. We will respond within 45 days.

7. Data Sharing and Disclosure

We do not sell your personal data. We may share information with:

Service Providers: AWS (hosting), Stripe (payments), Amazon SES (email), Amazon SNS (SMS): bound by data processing agreements.
Advertising and Analytics Providers: Google and Meta receive a limited set of marketing events, as described in Section 8. They never receive form content.
Legal Requirements: When required by law, court order, or governmental regulation.
Business Transfers: In connection with a merger, acquisition, or sale of assets, with prior notice.

8. Cookies, Analytics and Advertising

We measure how our marketing website and our advertising perform. This applies to our public website and to creating and setting up a Consentify account. It is never applied to the pages where your clients read and fill in your forms.

8.1 What We Use

Google Analytics: website traffic and page performance.
HeyCatch: website product analytics.
Meta (Facebook and Instagram): measuring which adverts lead to a new account, using the Meta pixel on our website and the Meta Conversions API from our servers.

8.2 What Is Shared

When you create an account after arriving from one of our adverts, our servers tell Meta that a registration happened. That message contains the event name, the advertising click identifier from the link you followed, and your email address in an irreversible hashed form. It does not contain your name, your password, your business details, or anything your clients have submitted.

Information your clients submit in your forms is never used for advertising and is never shared with any advertising or analytics provider. That includes names, contact details, medical history, signatures and photographs. The Consentify apps for iPad, iPhone and Android contain no advertising, analytics or tracking software of any kind.

8.3 Your Choices

If you visit us from the European Economic Area, the United Kingdom or Switzerland, none of these cookies or tools load until you accept them, and you can decline without losing access to anything. Elsewhere you can block cookies through your browser settings, use the opt-out controls your browser or operating system provides, or contact us at privacy@getconsentify.com and we will exclude your account from advertising measurement.

9. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. Form submission data is retained according to your subscription plan settings. Upon account deletion, we permanently remove all associated data within 30 days, except where retention is required by law.

10. Children's Privacy

The Service is not directed to individuals under 13. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal data, please contact us.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at:

Consentify LLC
Email: support@getconsentify.com