CAREY

HEALTH

Privacy Policy

Effective Date: June 4, 2025
Last Updated: August 26, 2025

Carey (“Carey,” “we,” “our,” or “us”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you access or use our caregiving and healthcare assistant services (the “Service”).

By using the Service, you consent to the practices described in this Privacy Policy.

1. Scope

This Privacy Policy applies to all users of New Innovation Services d.b.a. “Carey” located in the United States. Carey is operated by a corporation headquartered in California, USA.

Carey is not a “covered entity” or “business associate” under HIPAA, but we are committed to protecting your information using industry-standard privacy and security safeguards. Carey may enter into Business Associate Agreements (BAAs) with third parties when required.

2. Information We Collect

2.1 Information You Provide

We collect information you voluntarily provide, such as:

  • Personal Information (i.e. Name, email address, phone number, Date of Birth, Address)
  • User account credentials
  • Information from Google Sign-In (if you choose to sign in with Google, we collect your email address and name)
  • Health-related inputs or caregiving preferences you provide or grant access to (e.g., symptoms, medications, schedules, care tasks)
  • Messages or support inquiries

2.2 Automatically Collected Information

We may automatically collect:

  • IP address, device type, browser
  • Usage logs (interactions with Carey, timestamps)
  • Cookie or session data
  • Error or crash diagnostics

2.3 Information from Third-Party Services

If and when you connect third-party services to Carey:

  • Google Calendar availability data - if you connect your Google Calendar, we read your calendar to determine your free/busy times in real-time, in order to help schedule appointments — see Section 10.1 for details.

3. How We Use Your Information

We use the information we collect to:

  • Deliver, personalize, and improve the Service
  • Understand user behavior and usage patterns
  • Monitor system health and prevent abuse
  • Develop new features and insights
  • Comply with legal obligations

4. Anonymized and Aggregated Data

We may anonymize and aggregate data to:

  • Improve AI training and system performance
  • Conduct analytics and research
  • Share with vendors, research institutions, or commercial partners

This data cannot reasonably be used to identify you, and we do not combine it with identifiable information.

5. Sharing Your Information

We may share your deidentified information:

  • With vendors and service providers who help us operate (e.g., cloud hosting, analytics, support tools)
  • As required by law, subpoena, or legal process
  • In connection with a merger, acquisition, or asset sale
  • In connection with a partnership

All third-party vendors are contractually bound to use data only as necessary to provide their services and to protect it appropriately.

Important: We do NOT sell or transfer your personal information, including any data received from Google APIs, to:

  • Third-party advertising platforms
  • Data brokers or information resellers
  • Any entity for the purpose of serving advertisements, retargeting, or personalized/interest-based advertising

Data received from Google APIs (such as your Google Sign-In information or Google Calendar availability) is used solely for the purposes disclosed in this Privacy Policy and is never shared with third parties except as necessary to provide you with the Service, or as required by law.

6. Data Retention

We retain personal data only as long as necessary for the purposes described in this policy or as required by law. We may retain anonymized data indefinitely.

You may request deletion of your account and associated data by emailing privacy@hicarey.com. You may also delete your data by texting RESET (all caps) to Carey.

7. Your Rights (CCPA/CPRA)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA/CPRA), including:

  • Right to Know what categories and specific pieces of personal information we collect
  • Right to Delete personal information we have collected about you
  • Right to Opt Out of the sale or sharing of personal information (note: we do not sell your data)
  • Right to Non-Discrimination for exercising your privacy rights

You can exercise your rights by emailing privacy@hicarey.com with the subject line “CCPA Request.” We will verify your identity before processing requests and respond within the timelines required by law.

You may also delete your data by texting RESET (all caps) to Carey. This will delete your data immediately.

8. Security

We implement reasonable administrative, technical, and physical safeguards to protect your information, including:

  • Encrypted data in transit and at rest
  • Access controls and authentication
  • Regular audits and monitoring

However, no method of transmission or storage is 100% secure. You use the Service at your own risk.

9. Children’s Privacy

Carey is not intended for use by individuals under the age of 18. Children added to the platform must be under the care of a parent or guardian that approves such access, and the usage of the platform will be by the parent or guardian - children are not allowed to interact with our services directly.

10. Third-Party Tools and Services

We may use third-party tools for analytics, messaging, and infrastructure. These tools may collect device and usage information subject to their own privacy policies.

We recommend reviewing those third-party privacy policies directly. For any questions, please email privacy@hicarey.com.

10.1 Google API Services

Carey integrates with Google services to enhance your experience. This section explains how we use information received from Google APIs.

Limited Use Compliance

Carey's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Google Sign-In

When you choose to sign in with Google, we collect:

  • Your email address
  • Your name

This information is used solely for user authentication and account creation. This data is stored as part of your user profile and is retained until you delete your account.

Google Calendar Integration

When you choose to connect your Google Calendar to Carey, we read:

  • Your calendar free/busy availability times only

We do NOT access event titles, descriptions, attendees, or other event details.

This availability information is used in real-time to help Carey schedule your healthcare appointments without conflicts. We do not store your Google Calendar data in our database — we only access it when needed to check your availability.

You can disconnect your Google Calendar at any time through Carey's app, or via your Google Account Permissions page.

How We Use Google API Data

Google user data received through these integrations is:

  • Used ONLY for the purposes disclosed above (authentication and scheduling)
  • NOT sold or transferred to third parties, including advertising platforms, data brokers, or information resellers
  • NOT used for serving advertisements, retargeting, or personalized/interest-based advertising
  • NOT used to train AI or machine learning models
  • NOT shared with any third parties except as required to provide the Service to you

Revoking Access

You have full control over your Google data:

  • To revoke Google Calendar access: disconnect it through Carey's app or via your Google Account Permissions
  • To revoke Google Sign-In: you will need to remove Carey from your Google Account permissions

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be announced through the Service or via email. Continued use of the Service after changes means you accept the updated Policy.

12. Contact Us

If you have questions, requests, or concerns, contact us: privacy@hicarey.com