Last updated: July 14, 2026
Scope
This Privacy Policy explains how CareReady collects, uses, discloses, and protects information when you visit our websites, create an account, use the CareReady platform, communicate with support, or interact with billing and authentication workflows.
Information you provide
We may collect information submitted by owners, caregivers, administrators, and support users, including names, email addresses, passwords or authentication credentials, home details, license or capacity information, resident profiles, resident photos, emergency contacts, medications, care tasks, notes, activity logs, report parameters, support notes, and communications with us.
Usage, device, and technical information
We may collect technical information such as IP address, browser type, device type, pages visited, session activity, authentication events, error logs, audit events, security events, and approximate location derived from technical signals. This information helps us operate, secure, troubleshoot, and improve the service.
Billing information
Payments, subscriptions, checkout, invoices, and billing portal workflows are handled through Stripe or another designated payment provider. CareReady may receive billing metadata such as customer IDs, subscription IDs, plan tier, renewal dates, payment status, billing email, and limited transaction status. We do not intend to store full payment card numbers on CareReady servers.
How we use information
We use information to provide the platform, authenticate users, create and manage accounts, assign roles and home access, process owner and caregiver workflows, generate reports, enforce subscription limits, support customers, send transactional emails, maintain audit trails, detect abuse or security issues, debug errors, improve reliability, and comply with legal or contractual obligations.
Care documentation and resident information
CareReady processes resident and care-related information only as directed by authorized users and as needed to provide the service. Customers are responsible for determining what information may be entered, ensuring they have appropriate authority or consent, and complying with licensing, privacy, employment, health, and care documentation obligations that apply to their organization.
HIPAA and sensitive health information
CareReady is preparing for stricter compliance needs, but the current beta should not be treated as a final HIPAA production environment unless CareReady has separately confirmed that status in writing. If your use requires a Business Associate Agreement, do not enter protected health information unless CareReady has confirmed that a valid BAA is in place. HHS states that HIPAA obligations apply to covered entities and business associates, and customers are responsible for determining whether those rules apply to their organization and use case.
How we share information
We may share information with service providers that help us operate CareReady, including hosting, database, storage, authentication, email, analytics, monitoring, payment processing, customer support, and security providers. We may also share information when required by law, to protect rights and safety, to prevent misuse, in connection with a business transfer, or with your direction or consent.
Authorized users and administrators
Owners and administrators may be able to view, edit, export, invite, deactivate, or manage information associated with their homes and users. Global admin/support users may access account, home, billing, audit, and support information when needed to provide support, troubleshoot issues, maintain the platform, or enforce these policies.
Cookies and similar technologies
CareReady may use cookies, local storage, and similar technologies for authentication, session management, security, user preferences, product functionality, and analytics. Some features may not work correctly if cookies or local storage are disabled.
Security safeguards
We use administrative, technical, and organizational safeguards designed for responsible beta operations, such as managed authentication, role-based access, audit trails, secure infrastructure providers, and operational monitoring. The FTC recommends that businesses protect personal information using reasonable safeguards, but no method of transmission or storage can be guaranteed completely secure.
Data retention
We retain information for as long as needed to provide CareReady, maintain accounts, support customers, comply with legal obligations, resolve disputes, enforce agreements, maintain backups, and preserve audit or security records. Customers are responsible for exporting and retaining records required for licensing, employment, clinical, operational, or legal purposes.
Your choices and requests
Depending on your role and applicable law, you may request access, correction, export, deletion, or restriction of certain information. Some requests may need to be handled by the care home or organization that controls the account. We may need to verify your identity and may retain certain information where required or permitted by law, contract, security, billing, backup, or audit obligations.
Children and residents
CareReady is intended for use by care organizations and their authorized staff, not for direct use by children. If resident information about minors or dependent adults is entered by an authorized care organization, that organization is responsible for having appropriate authority and safeguards.
International access
CareReady is built for U.S. residential care operators. If you access the service from outside the United States, you understand that information may be processed in the United States or other locations where our providers operate.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time. Updated versions will be posted on this page with a revised date. Continued use of CareReady after an update means the updated policy applies to future use.
Contact
For privacy questions, email support@careready.io.