Scope of this privacy policy
This policy explains how Pluginfinity LLC handles information for the ICD Code Hub website and its iPhone, iPad and Mac apps, connected accounts, email updates and support. It describes the current service, including the Mac edition while it is being prepared for release. The Apps page identifies which editions are available; a store listing does not change the data practices described here. Apple, Google and other independent services also have their own notices for information they collect directly.
Publisher and contact
ICD Code Hub is operated by Pluginfinity LLC, 16192 Coastal Highway, Lewes, Delaware 19958, United States. Contact support@icd10codehub.com for support, corrections or privacy requests. The site is independent of CDC, CMS and WHO and is not endorsed by those organizations.
Account information
Email sign-in stores your email and a salted password hash, not a readable password. If you use Apple or Google sign-in, we receive the provider’s account identifier, name, email and verification status; Google may also provide a profile-photo URL. We do not request inbox access. The iPhone and iPad app currently requires an account. Mac sign-in is optional: local saved and recent codes work without an account, and choosing sign-in imports them into the account workspace. Saved codes, up to 50 recently viewed codes and language preferences can synchronize across signed-in editions. Email registration also collects the name you provide.
Service activity and technical information
For signed-in users, the service records registration and sign-in dates, platform, last activity and session counts. These account-activity records do not contain search text, IP addresses, fingerprints or advertising identifiers. Hosting, security and delivery providers may process IP addresses, requested URLs and technical request information to deliver and protect the service. Search terms placed in a URL may appear in browser history or infrastructure logs; never include patient information.
Information you send to support
Emailing us shares your address, message and any attachments with our support mailbox and email providers. We use them to investigate, respond and keep a record of the outcome. Send only what is needed: a page URL, app or browser version, and a description. Remove personal details from screenshots. We never need your password, one-time sign-in code, full payment-card details or a patient record.
Why we use information
We use account information to authenticate you, recover access and synchronize your workspace; activity records to operate and protect accounts; email details to deliver requested messages; and support correspondence to answer requests and fix problems. Where data-protection law requires a legal basis, these purposes rely on providing the requested service, proportionate legitimate interests in reliability and security, legal obligations, or your consent for optional marketing. We do not make automated decisions with legal or similarly significant effects about you.
Health information and sensitive data
This is a classification reference, not a patient-record system. The website and iPhone, iPad and Mac apps do not connect to HealthKit, Health Connect, clinical records or wearable devices and do not request diagnoses about you. Saved or recently viewed codes may nevertheless suggest a health interest; they are used for your workspace, not advertising profiles. Do not enter identifiable patient information in searches, saved content or email. If you send it accidentally, contact us for removal.
Device permissions and optional features
The website does not request your camera, microphone, contacts, photos, precise location or health permissions. A signed-in user in the iPhone, iPad or Mac app may optionally choose one image through Apple’s system picker as a profile photo. The app reads and uploads only the file you select; our service optimizes it and stores it for profile display. The image is served from a randomized media URL, so do not use this feature for confidential photos. This choice does not grant access to your camera, contacts, precise location, HealthKit data, clinical records or other photos. Refusing to select a photo does not disable unrelated features.
Essential cookies and browser storage
An essential session cookie maintains web sign-in, and a short-lived cookie protects external sign-in. A language preference cookie remembers your interface choice. Browser storage holds guest saved and recent codes; session storage can hold a temporary visit identifier. The Mac app stores local saved and recent codes, plus the reference details needed to reopen them, in app preferences until they are replaced or the app data is cleared. If you sign in on Mac, those items are imported into your account and later workspace changes synchronize. Saved and recent codes in the iPhone and iPad app use signed-in account sync; its private search, view, save and active-day counters stay on the device. Account sessions expire after seven days. Clearing local data or removing an app does not delete a server account.
Google Analytics 4
With your permission, Google Analytics measures traffic sources, approximate country, device type and general page groups. We exclude searches, specific codes and account details. Optional analytics cookies last up to 90 days. You can change your choice at any time. Google uses a pseudonymous browser identifier and connection data to provide this service. Event-level data is kept for two months; aggregated reports may remain longer. Your choice is saved on this device for up to 180 days. Declining in Analytics choices stops future collection and removes this site's analytics cookies; it does not automatically erase previously processed information. Advertising signals, ad personalization and automatic interaction tracking are disabled. Google privacy policy: https://policies.google.com/privacy. We also measure page loading, responsiveness and visual stability without sending page content.
Advertising and third-party data
Advertising is not active in this version. If activated later, Google and other advertising partners may place or read cookies, use web beacons and process IP addresses or device information to serve and measure ads. We must first update this notice and provide the required consent and privacy choices. Search terms, saved codes and account data must not be sent as advertising targeting parameters. Health interests must not be used to build personalized advertising audiences.
Service providers and location
Sign-in providers process information under their own privacy policies. Email delivery uses Hostinger. Reference media and custom profile photos selected in the apps are stored in AWS S3 in US East (Northern Virginia) and delivered through Cloudflare. Pluginfinity LLC configures the application and database infrastructure. Providers may process information outside your country. Their privacy policies explain their respective processing.
International processing
Pluginfinity LLC is based in the United States, and the providers described above may process information in other countries. Those countries may have different data-protection rules. Where applicable law requires safeguards for a transfer, the transfer must use an appropriate legal mechanism, such as approved contractual protections, or a permitted exception. Contact us for information about the safeguards relevant to your data; this notice is not a request to waive your privacy rights.
How we protect information
The application uses salted password hashes, expiring authentication tokens, protected session cookies and access checks for account data. Access to operational credentials is restricted. These measures reduce risk but cannot guarantee that every transmission or storage system is secure. Use a unique password, protect your email account and sign out on shared devices. Report a suspected security issue privately to support@icd10codehub.com; do not include live credentials or exploit another person’s account. Abuse-prevention controls temporarily process connection IP addresses and email-based attempt counters to limit sign-in and subscription requests.
Retention
Email confirmation links expire after 24 hours, password-reset links after 30 minutes, and authentication email bodies are redacted after 24 hours. Temporary account-visit records expire after seven days. Account, subscription and delivery records are retained until removed or no longer needed. Retention can differ for security records, unsubscribe suppression and backup copies; deletion from backups may take additional time.
Request account deletion
You can delete your account while signed in from Profile in the iPhone or iPad app or from the account panel in the Mac app. You can also request deletion without installing an app or signing in: email support@icd10codehub.com and identify the account email, including an Apple relay address where relevant. If you have lost access, explain that; never send a password or identity document with the initial request. Email requests require manual verification; we confirm the scope and expected completion time and explain any delay or exception within the period required by applicable law.
What account deletion covers
A completed deletion removes the account profile and sign-in association, password credentials where held, active sessions and recovery tokens, custom profile photos, synchronized saved codes, recent-code history and account activity from active account systems. This includes associated personal data in newsletter and support records, subject only to the limited exceptions below. Signing out, removing an app or clearing browser cookies does not delete the server account. Account deletion cannot be undone; clear guest data separately on each device. Where a provider processes associated data on our behalf, deletion also requires instructing that provider to remove it, subject to the same lawful exceptions.
Limited retention after a request
We may retain the minimum information necessary to document the request, honor an email opt-out, prevent fraud or meet a legal obligation. Where an exception applies, we explain the data, reason and applicable retention period or criteria in our response. Restricted backup copies may persist until rotation and must not be reused to reactivate a deleted account. The service has no universal published backup-erasure deadline; ask support for the schedule relevant to your request. We do not treat indefinite account suspension as deletion.
Privacy rights and withdrawal of consent
Depending on your location, you may request access, a copy, correction, erasure, restriction or portability of your information, object to certain uses, or appeal a decision on your request. You may withdraw optional consent at any time without changing the lawfulness of earlier processing. Use the marketing unsubscribe link, clear guest site data, or email support@icd10codehub.com with the request you want to make. We may verify account control proportionately and explain any lawful exception. You may also complain to your local data-protection authority. We do not penalize people for exercising applicable privacy rights.
Children and account eligibility
ICD Code Hub is intended for adult professional and educational reference use, not for children. Do not create an account or subscribe if you are under 18. We do not knowingly seek personal information from children or use their information for advertising. If a parent, guardian or other person believes a child has provided information, email support@icd10codehub.com so we can investigate and arrange appropriate removal.
Changes to these notices
We update these pages when the service, data practices or terms materially change and display the revision date. Review the current notice when using a newly introduced feature. Contact us if a translated passage is unclear; official classification wording remains authoritative for the classification itself.