Our Commitment to Your Privacy
At MyCareHuddle, your privacy and trust are foundational to everything we do. We know that care coordination involves some of the most sensitive information in people's lives — health conditions, medications, daily routines, and the wellbeing of people you love. This policy explains clearly and honestly what data we collect, why we collect it, how we protect it, and the choices you have.
When we say "we," "us," or "our," we mean MyCareHuddle, LLC. When we say "you," we mean anyone using our mobile app, website, or related services.
MyCareHuddle is not a Covered Entity under HIPAA as defined by the U.S. Department of Health and Human Services. However, we voluntarily adopt HIPAA-aligned privacy and security practices because we believe your health-related information deserves the same level of protection. Our separate HIPAA Privacy and Security Policy describes these practices in detail.
What This Policy Covers
This policy applies to the MyCareHuddle app, website, and any related services we operate. It does not apply to third-party websites or apps you may visit through links from MyCareHuddle — those have their own privacy policies. If you are using MyCareHuddle through an employer, facility, or healthcare organization, their privacy policies may also apply.
The Information We Collect
Information You Choose to Share
You decide what personal and care-related details to enter in MyCareHuddle. This may include:
- Your name, email address, password, and account preferences
- Information about the person receiving care, such as health conditions, medications, appointments, daily notes, shift summaries, and care preferences
- Names and contact details of family members, friends, or professional caregivers you invite to a care team
- Communications you send through the in-app messaging feature
Sensitive Information
Some of the information you share is considered "sensitive" under New Jersey and other state privacy laws. This includes the health information you enter, such as conditions, diagnoses, treatment, medications, and appointments. We use sensitive information only to provide the services you request and only with your consent, not to infer characteristics about you or for any other purpose. Please do not enter Social Security numbers, full bank account or payment card numbers, or passwords.
Your Consent to Our Use of Health Information
We ask for your consent before we collect and use the health information you enter. We ask for it separately from your agreement to our Terms of Use, using its own checkbox when you first sign in. Accepting the Terms of Use or this Privacy Policy is not a substitute for that consent.
You can withdraw your consent at any time in Settings or by emailing support@MyCareHuddle.com. Withdrawing is as easy as giving consent. We will stop processing your health information no later than 15 days after we receive your withdrawal. Because MyCareHuddle cannot work without this information, withdrawing your consent may mean you can no longer use the app; you can export or delete your information first.
Please do not include health information when you send us suggestions or feedback. If health information reaches us in feedback, we will treat it as sensitive information.
Information About Other People
If you add information about another person, such as a family member you care for, you confirm that you have their permission or the legal authority to share it, such as a power of attorney or guardianship. We may ask you for documentation of that authority.
Information Collected Automatically
When you use MyCareHuddle, we may automatically collect:
- Device information: device type, operating system, and browser or app version
- Usage data: which screens you visit, features you use, and how long you use them
- Approximate location: city or region level only, based on your IP address — we do not collect precise GPS location
- Crash reports and performance data to help us diagnose and fix technical issues
We may use cookies or similar technologies to keep you logged in, remember your preferences, and understand how people use our services. You can control cookies through your browser settings, though some features may not work if cookies are disabled.
Analytics and Third-Party Tools
We may use third-party analytics services (such as Firebase or equivalent tools) to understand how the app is used in aggregate. These services may collect device identifiers and usage patterns. We configure these tools to minimize collection of personally identifiable information and to prohibit them from using your data for their own purposes.
We will update this section as we add or change analytics tools. We never allow third-party advertisers to access your data. We do not use advertising or tracking services that receive your health information.
Connected Accounts (Optional)
If you choose to connect an outside calendar, such as Google Calendar, we store a secure authorization token that allows MyCareHuddle to add appointment reminders to your calendar. We do not read, copy, or store the other events on your calendar. Connecting a calendar is always optional, and each user decides for themselves whether to connect. We explain what information is sent and ask for your permission when you connect. By default, reminders show only the date, time, and a general title (such as "Appointment"), not medical details. People who can view your calendar may also see those reminders.
MyCareHuddle's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
How We Use Your Information
We use the information we collect to:
- Provide, operate, and improve the MyCareHuddle platform and its features
- Keep your account secure and help troubleshoot technical issues
- Send care reminders, medication alerts, and shift notifications you have configured
- Communicate service updates, security notices, or support messages
- Create de-identified, aggregate statistics to understand usage trends and improve our product — these statistics cannot identify you or the person receiving care
- Comply with applicable laws and regulations
- Fulfill any purpose you specifically request or authorize
We will never sell your personal information or health data. We will never use your data to serve you third-party advertisements. We do not sell sensitive information, and we will ask for your consent before using your information for a new purpose that is unrelated to the purposes described in this policy.
How We Share Your Information
We share information only in the following limited circumstances:
- Care team members: information you enter is shared with the people you explicitly invite to a care team, according to the roles and permissions you set
- Service providers: we work with vendors (such as cloud hosting providers, communication services, and analytics tools) who help us operate the app — all vendors are contractually required to protect your data and use it only for the services they provide to us
- Alerts and reminders: text messages and emails we send you about concerns or medication alerts may include the care recipient's name and, for concern alerts, the concern level. Push notifications for appointment reminders may include the care recipient's name, the appointment time, and the type of appointment or provider. We do not put medication names, dosages, diagnoses, or notes in any text, email, or push notification. These messages travel through our service providers (such as Amazon Web Services and Google Firebase). You can change your notification settings in the app.
- Services you choose to connect: if you connect an outside calendar (such as Google Calendar), we send that service only what is needed to create appointment reminders: the date and time, a generic title ("MyCareHuddle: Appointment"), and a secure link back to the app. We do not send names, medications, providers, diagnoses, or other health details. Once a reminder is in your calendar, that provider's privacy policy applies to it. You can disconnect at any time in the app; disconnecting stops new reminders, and you can choose to remove reminders already added. People who can view your calendar may also see these reminders
- Legal requirements: we may disclose information when required by law, court order, or to protect the safety of any person
- Business transfers: if MyCareHuddle is acquired or merges with another company, your information may be transferred — we will notify you in advance and you will have choices about your data
We will never sell, rent, or trade your personal or health information to third parties for their own use.
How We Protect Your Information
We use industry-standard security measures to protect your information, including:
- Encryption in transit: all data transmitted between your device and our servers is protected using TLS encryption
- Encryption at rest: data stored in our databases and backups is encrypted
- Access controls: only authorized personnel with a business need can access user data, and all access is logged and audited
- Regular security assessments: we conduct periodic security reviews and vulnerability testing
While no system is entirely risk-free, we work hard to keep your data safe. If we experience a data breach that affects your information, we will notify you promptly in accordance with applicable law.
Where your data lives: MyCareHuddle is operated from the United States. Your information is stored and processed on secure servers located in the United States.
Data Retention
We retain your information for as long as your account is active and for a reasonable period afterward to allow you to reactivate or resolve any disputes. Specifically:
- Active account data: retained for the duration of your account
- After account deletion: personal information is deleted or anonymized within 90 days, except where we are required by law to retain it longer
- Backup copies: may persist for up to 180 days in encrypted backup systems before being permanently deleted
You can delete your account and associated data at any time from your account settings in the app. You may also request deletion by contacting us at support@MyCareHuddle.com, and we will confirm deletion within 30 days.
Deceased users and care recipients. If a user or care recipient has died, the personal representative of the estate (for example, an executor) may contact us to request access to, a copy of, or deletion of information. We will require documentation of their authority before acting on the request.
Your Choices and Rights
You have the following rights with respect to your information:
- Access: view the personal information we hold about you through your account settings or by contacting us
- Correction: update or correct inaccurate information at any time through your account
- Deletion: delete your account and associated data from your account settings, or request deletion by contacting us
- Portability: request a copy of your data in a machine-readable format
- Connected calendars: connect or disconnect an outside calendar at any time
- Withdraw consent: withdraw your consent to our use of your health information at any time in Settings or by contacting us (see Your Consent to Our Use of Health Information)
- Communication preferences: choose whether to receive email or in-app communications from us
To exercise any of these rights, contact us at support@MyCareHuddle.com. We will respond within 30 days.
California Residents — Additional Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect and how it is used, the right to request deletion, the right to opt out of the sale of personal information (we do not sell personal information), and the right not to be discriminated against for exercising your privacy rights.
Sensitive personal information. We use sensitive personal information (such as health information) only to provide the services you request, which is a permitted purpose under California law. We do not use or disclose it for any other purpose.
To submit a CCPA request, contact us at support@MyCareHuddle.com. We will verify your identity before processing your request.
Children's Privacy
MyCareHuddle is intended for users 18 years of age and older. You confirm that you are at least 18 when you accept our Terms of Use. We do not knowingly collect personal information from children under 13. If a care recipient in our system is a minor, the admin user who created their profile is responsible for ensuring appropriate consent has been obtained. If you believe we have inadvertently collected information about a child under 13 without consent, please contact us immediately at support@MyCareHuddle.com and we will delete that information.
Do Not Track
Some browsers include a "Do Not Track" (DNT) setting that signals your preference not to be tracked across websites. Because there is currently no universally accepted standard for responding to DNT signals, MyCareHuddle does not currently respond to DNT browser signals. We do not track users across third-party websites for advertising purposes.
Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through an in-app notification at least 30 days before the changes take effect. Minor changes will be reflected by updating the "Last Updated" date at the top of this page. Your continued use of MyCareHuddle after changes take effect constitutes your acceptance of the updated policy. A change is material if it significantly affects how we collect, use, or share your information or your rights under this policy. If we want to use your information for a new purpose that is unrelated to the purposes described in this policy, we will ask for your consent first; continued use of MyCareHuddle is not consent to that new use.
Contact Us
If you have questions about this Privacy Policy, wish to exercise your rights, or have concerns about how we handle your information, please contact us:
- Email: support@MyCareHuddle.com
- Mail: MyCareHuddle, LLC, 56 Walsingham Rd, Mendham, NJ 07945
- Privacy Officer: Cathy Ackerman, Founder
We take privacy concerns seriously and will respond to all inquiries within 30 days.