Privacy Policy

1. Information We Collect

We collect only the minimum information necessary to help you find quality senior care:

• Account information: Email address and name when you create an account via Auth0 (our authentication provider).
• Search preferences: ZIP code, care type selections, and budget range you provide when searching for facilities.
• Tour requests: Name, email, and optional phone number you provide when requesting a tour of a facility.
• Waitlist entries: Email address and ZIP code when you join a coverage-area waitlist.
• Contact form submissions: Name, email, subject, and message content.
• Amica conversations: Messages you send to our AI care guide. All messages are sanitized to remove personally identifiable information before processing.
• Usage analytics: Anonymous, aggregated analytics via PostHog (page views, feature usage) to improve the Service. No individual tracking profiles are created.
• Payment information: For facility providers, payment details are processed directly by Stripe. We never store credit card numbers on our servers.

2. Information We Do NOT Collect

We believe in collecting less, not more:

• We do not track your phone number, GPS location, or browsing history across other websites.
• We do not use third-party advertising trackers, retargeting pixels, or behavioral profiling.
• We do not sell, rent, or share your personal information with data brokers, lead generators, or any third party for marketing purposes.
• We do not generate spam calls. Your contact information is shared only with the specific facility you request a tour from, and only when you explicitly submit a tour request.
• We do not store Social Security numbers, medical records, or health information.

3. How We Use Your Information

• Matching care: To help you find senior care facilities that match your needs, location, and budget.
• Tour coordination: To forward your tour request to the specific facility you selected.
• Operational emails: To send transactional emails such as tour request confirmations, account notifications, and subscription updates. Every email includes a one-click unsubscribe link.
• Service improvement: To analyze anonymous, aggregate usage patterns and improve our platform.
• Error monitoring: To detect and fix technical issues via Sentry (error tracking). No personal information is included in error reports.

4. Data Sharing & Third-Party Services

We share your information only with the following service providers, strictly for operating the Service:

• Auth0 — Authentication and account management
• Stripe — Payment processing for facility subscriptions
• Anthropic (Claude) — AI-powered care guidance (messages are sanitized of PII before processing)
• Algolia — Facility search indexing
• Resend — Transactional email delivery
• PostHog — Anonymous product analytics
• Sentry — Error monitoring

We do not sell your data to any third party. Period.

5. Data Retention

We retain your personal information only for as long as necessary to provide the Service. You may request deletion of your account and associated data at any time by contacting us at privacy@curacare.us. We will process deletion requests within 30 days.

6. Cookies

We use essential cookies for authentication and session management. We use optional analytics cookies (PostHog) only with your consent. You can manage your cookie preferences at any time using the "Cookie Settings" link in our footer.

7. Security

We implement industry-standard security measures including HTTPS encryption, secure authentication via Auth0, rate limiting, input sanitization, and security headers (HSTS, CSP, X-Frame-Options). Our database is hosted on Railway with daily automated backups.

8. Your Rights Under the California Consumer Privacy Act (CCPA)

If you are a California resident, you have the following rights under the CCPA:

• Right to Know: You may request a copy of the personal information we have collected about you in the past 12 months.
• Right to Delete: You may request that we delete your personal information, subject to certain exceptions.
• Right to Opt-Out of Sale: We do not sell personal information to third parties. There is nothing to opt out of.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

To exercise any of these rights, contact us at privacy@curacare.us. We will respond within 45 days.

9. Your Rights Under the General Data Protection Regulation (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have the following rights under the GDPR:

• Right of Access: You may request a copy of your personal data.
• Right to Rectification: You may request correction of inaccurate personal data.
• Right to Erasure: You may request deletion of your personal data ("right to be forgotten").
• Right to Restrict Processing: You may request that we limit how we use your data.
• Right to Data Portability: You may request your data in a structured, machine-readable format.
• Right to Object: You may object to processing of your personal data for certain purposes.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.

Our legal basis for processing is legitimate interest (providing the Service you requested) and consent (analytics cookies). To exercise your GDPR rights, contact privacy@curacare.us. We will respond within 30 days.

10. Children's Privacy

CuraCare is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us at privacy@curacare.us and we will promptly delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a new "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, contact us at: