Terms of Service

You must meet all of the following criteria to use the Service:

• Be at least 16 years of age, or have parental/guardian consent if younger
• Have the legal capacity to enter into a binding agreement
• Not be barred from receiving the Service under applicable law
• For clinical roles: hold valid professional credentials in your jurisdiction

You agree to provide accurate, current, and complete information during registration and to keep it updated. Providing false information — particularly regarding professional qualifications or role — is grounds for immediate termination and may have legal consequences in the healthcare context.

• You are responsible for maintaining the confidentiality of your credentials and for all activity under your account
• You must notify us immediately at [email protected] if you suspect unauthorised access
• You may not share credentials with other individuals; each user must have their own account
• You must not use another person's account without their explicit permission
• We are not liable for losses resulting from your failure to safeguard your credentials

Access to specific features is determined by your assigned role. Role assignments are the responsibility of your Organisation's administrator. If your role is incorrectly assigned, contact your administrator. CareUnity is not responsible for feature access resulting from incorrect role assignments by an Organisation administrator.

Subject to these Terms, you may use CareUnity solely to:

• Manage healthcare operations within your organisation in accordance with your assigned role
• Access and update your own health records and account information
• Communicate with your authorised care team
• Book, manage, and attend appointments
• Process legitimate pharmacy transactions
• Access educational health content for personal use

You must not use CareUnity for any of the following. Violations may result in immediate account termination and may be reported to applicable regulatory or law enforcement authorities:

• Accessing, modifying, or disclosing PHI or personal data of patients not under your care without authorisation
• Impersonating a licensed healthcare professional when you are not
• Entering false, fabricated, or misleading clinical data, prescriptions, diagnoses, or records
• Using the platform to facilitate insurance fraud, billing fraud, or prescription fraud
• Transmitting malware, viruses, ransomware, or any code designed to disrupt, damage, or gain unauthorised access
• Attempting to circumvent security measures, authentication, or access controls
• Harvesting, scraping, or bulk-exporting data (including PHI) without authorised API access
• Using automated bots, scripts, or crawlers to interact with the Service
• Selling, licensing, or commercially exploiting any feature of the Service without written permission
• Reverse-engineering, decompiling, or attempting to extract source code
• Using the Service in any manner that could harm, disable, overburden, or impair it
• Facilitating the access or use of the Service by excluded individuals (e.g., those barred from healthcare participation by regulatory bodies)
• Storing or transmitting sexually explicit content, hate speech, or any unlawful material
• Using the counseling or mental health features to provide clinical care without appropriate licensure

Covered entities using CareUnity for activities involving PHI must execute a Business Associate Agreement (BAA) with Buildasoft Ltd prior to processing PHI through the Service. Contact [email protected] to request a BAA. Use of the Service to process PHI without a signed BAA constitutes a breach of these Terms.

• You are responsible for all access to PHI under your credentials
• You must not access PHI beyond what is necessary for your legitimate clinical or operational role (minimum necessary standard)
• You must report any actual or suspected unauthorised disclosure of PHI to your organisation's privacy officer and to CareUnity at [email protected] immediately upon discovery
• Organisation administrators are responsible for promptly revoking access for departed staff or role changes
• You must not export PHI in bulk outside the platform without appropriate authorisation and safeguards

CareUnity will maintain the confidentiality, integrity, and availability of PHI processed through the Service; implement appropriate safeguards as described in our Privacy Policy; report security incidents involving PHI within the timeframes required by applicable law; and assist covered entities in meeting their HIPAA obligations as provided in the BAA.

You and your Organisation retain full ownership of all data, records, and content you enter into the Service ("User Content"), including patient records, clinical notes, pharmacy records, and communications.

By submitting User Content, you grant Buildasoft Ltd a limited, non-exclusive, worldwide, royalty-free licence to store, process, and transmit your User Content solely as necessary to provide and improve the Service, subject to the Privacy Policy. We will never use identifiable PHI for advertising, profiling, or purposes outside service delivery.

You may export your data at any time via the platform's export functions. Upon account termination, you have 30 days to export your data before it is archived or deleted per our retention schedule. We will provide reasonable assistance with bulk data export to another system upon written request.

Content you post to public areas of the platform (community forum, health education comments) is visible to other users. Do not post PHI in public areas. You are solely responsible for the accuracy and legality of public content you post. We reserve the right to remove content that violates these Terms or applicable law.

Access to CareUnity may be subject to subscription or transaction fees as set out in your Organisation's subscription agreement or the current pricing schedule published on the platform. All fees are quoted exclusive of applicable taxes unless stated otherwise.

Payments are processed by Stripe. By providing payment details, you authoriseBuildasoft Ltd to charge your nominated payment method for all applicable fees. Payment information is handled directly by Stripe under their own terms and PCI DSS compliance programme; CareUnity does not store card numbers.

For patient-facing billing, co-payment amounts and insurer breakdowns are calculated based on insurance policy data entered into the platform. CareUnity provides billing tools; it does not guarantee that claims will be accepted or paid by insurers. Billing accuracy is the responsibility of the healthcare organisation.

Subscription fees are non-refundable except as required by applicable consumer protection law or as expressly agreed in your subscription agreement. Transaction fees for individual services are subject to the refund policy applicable to that service.

Outstanding balances unpaid for more than 30 days after the due date may result in temporary suspension of access until payment is received. We will provide at least 7 days' written notice before suspension.

These Terms commence on the date you first access the Service and remain in effect until terminated by either party in accordance with this section.

You may terminate your account at any time through the account settings or by contacting [email protected]. Termination does not entitle you to a refund of prepaid fees.

We may suspend or terminate your account immediately and without notice if you:

• Violate any provision of these Terms
• Engage in fraudulent, illegal, or harmful conduct
• Fail to pay applicable fees after a 30-day cure period
• Misrepresent your professional credentials or role
• Cause reputational, legal, or financial harm to CareUnity or other users

For less serious violations, we will provide 14 days' written notice and an opportunity to cure before termination.

Upon termination:

• Your right to access the Service immediately ceases
• You have 30 days to export your data
• We will delete or anonymise your personal data per our retention schedule
• Healthcare records will be retained for the legally required minimum period
• All accrued rights and obligations survive termination, including Sections 7, 8, 12, 13, 14, and 16

These Terms are governed by and construed in accordance with the laws of the Republic of Rwanda, without regard to its conflict of law provisions.

Before commencing formal proceedings, you agree to contact us at [email protected] and attempt to resolve the dispute in good faith through informal negotiation for a period of at least 30 days.

If informal resolution fails, disputes shall be submitted to binding arbitration administered under the rules of the Kigali International Arbitration Centre (KIAC), conducted in English in Kigali, Rwanda. The arbitral award shall be final and binding on the parties.

Notwithstanding the foregoing, either party may seek urgent interim or injunctive relief from a court of competent jurisdiction to prevent irreparable harm, particularly in cases involving unauthorised access to PHI or intellectual property infringement.

To the extent permitted by applicable law, you waive any right to bring or participate in a class action, collective, or consolidated arbitration or lawsuit against CareUnity.

These Terms, together with the Privacy Policy and any BAA or subscription agreement, constitute the entire agreement between you and Buildasoft Ltdwith respect to the Service, and supersede all prior agreements, representations, and understandings.

If any provision of these Terms is found invalid, illegal, or unenforceable, that provision will be limited or eliminated to the minimum extent necessary, and the remaining provisions will continue in full force and effect.

Our failure to enforce any provision of these Terms shall not constitute a waiver of our right to enforce that provision in the future.

You may not assign these Terms or any rights hereunder without our prior written consent. We may assign these Terms in connection with a merger, acquisition, or sale of assets, provided the successor honours these Terms.

Neither party will be liable for any failure or delay in performance due to circumstances beyond their reasonable control, including natural disasters, war, government actions, pandemic, or internet infrastructure failures, provided they notify the other party promptly and use reasonable efforts to resume performance.

Notices to CareUnity must be sent to [email protected]. Notices to you will be sent to the email address registered on your account. Notices are effective upon confirmed delivery.

These Terms are drafted in English. In the event of a conflict between an English version and a translation, the English version prevails.