Who Holds The Data
TK Hub LLC operates APEX. Your practice is the controller of charts. Members, managers, and any trust holding Company interests are not the data controller.
APEX
peak of care.
Legal
Privacy Policy
Issued by TK Hub LLC. Short version below.
September 14, 2026 · v1.9.5
What We Keep
Account: name, email, role, practice, sign-in method. Clinical records belong to the practice. Face and fingerprint stay on the device. We do not sell charts or train public AI on them. No real PHI until a BAA is signed.
Share And Delete
Tap-share tokens expire in 15 minutes. Codes go to email, not the public page. CSV takeout of this chair is $0. Patients ask their practice, not us. support.apex@tkhub.app
Legal basis, time, and rights
TK Hub LLC, a Delaware limited liability company based in Texas, runs APEX from Texas. Texas law and venue stay. We process account data to perform the contract with the practice, and clinical data only on the practice's instructions. Health data is special-category data. It is collected only for care. No real patient data is accepted until a Business Associate Agreement is signed.
Account records are kept while the chair is open and for up to seven years after it closes, unless a longer legal hold applies to a chart. Charts follow the practice's record hold, not a marketing clock. Sign-in tokens expire with the session.
Processors: the database host, the website host, Stripe for card checkout when it is turned on, and Google, Apple, and Microsoft for sign-in. They process only what that step needs. If data leaves the United States, the transfer uses Standard Contractual Clauses.
You can ask to access, correct, delete, or export your login, to object, to restrict processing, and to withdraw consent where consent was the basis. Patients ask their practice. Staff and owners email support.apex@tkhub.app. You may complain to a data-protection authority. How to delete a login or close a chair is on the delete-account page.