1. Who we are
CareDenza, Inc. is a Delaware corporation with its principal office at 25 Rolfes Lane, Newbury, MA. You can reach us at info@caredenza.com. References to "CareDenza," "we," "us," and "our" mean CareDenza, Inc.
2. What this policy covers
This policy applies to the CareDenza app, including the iOS and Android apps and the web app at app.caredenza.com. It also covers the CareDenza marketing website at caredenza.com and any related services we operate. It does not apply to anything you do outside CareDenza, including how your hospital, pharmacy, or insurance company handles your information.
3. Information we collect
We only collect what the product needs to work for you.
From you, when you use the app
- Your contact information (such as email and phone number), used for sign-in and support
- Information you upload, sync, or otherwise send to the app, including health information
- Contact information you add for other people, such as caregivers or providers
When you connect a health record
If you choose to connect a health record from your provider (for example, Epic MyChart), CareDenza imports the clinical information you authorize. We use this information only to build and maintain your medication list and care record inside the app, the same way we use information from documents you photograph. You can disconnect at any time, and deleting your account removes imported health-record information along with the rest of your data.
When you connect Apple Health
If you choose to connect Apple Health on iOS, CareDenza reads the activity and vital readings you authorize (for example weight, steps, and heart rate) and stores them in Tracker. CareDenza does not write anything back to Apple Health. Caregivers you invite can see imported readings. You can disconnect on this device at any time, and deleting your account removes imported readings along with the rest of your data.
Automatically, when you use the app
- Basic device information (device model, operating system version) for compatibility and crash reporting
- App usage and diagnostic information, used to keep the app working, improve it, and help you when you contact support
- Time zone, so reminders fire at the right local time
Our app does not use third-party advertising SDKs. Our marketing website uses advertising measurement tools and shares visit information, such as IP address, browser type, and ad click identifiers, with advertising platforms to measure marketing performance.
4. How we use your information
- To run the app: manage your medications, send reminders, render your home hub
- To generate plain-language explanations of medications, on request
- To deliver caregiver views to people you've explicitly invited
- To respond to your support requests
- To investigate security incidents and prevent abuse
SMS sign-in codes
If you choose to sign in or create an account with your phone number, CareDenza will send you transactional SMS messages containing one-time sign-in verification codes. Message frequency varies and occurs only when you request a code to sign in. Message and data rates may apply. You can opt out at any time by replying STOP to any CareDenza text; reply HELP for help, or contact us at support@caredenza.com. We never use your phone number for marketing texts.
5. How we share your information
We share information we collect in the app in only three situations:
- With caregivers you invite. Caregivers can see or edit your information, depending on the permissions you grant.
- With service providers we use to run the app. We share information with third parties as necessary, for example, to fulfill device orders.
- When required by law. If we receive a valid legal process (subpoena, court order), we will comply, and we will tell you about it unless legally prohibited.
We do not sell information we collect in the app. We do not share it with advertisers, data brokers, or analytics companies.
6. Where your information is stored
CareDenza app data is stored primarily in Amazon Web Services data centers in the United States. Data is encrypted at rest using AWS-managed keys and encrypted in transit using TLS 1.2 or higher. Some information may also be stored by third parties as necessary, for example, to fulfill device orders.
7. How long we keep your information
- While your account is active, for as long as you are using CareDenza
- When you delete your account, we delete your information within 90 days, except operational logs, which we keep for up to one year, and security audit logs, which we keep for six years as required for compliance
- Aggregated, de-identified statistics, we may keep counts and metrics that cannot identify any individual
8. Your rights
You can ask us, at any time, to:
- Show you the information we have about you
- Correct anything that is wrong
- Delete your account and your data
- Stop using your information for a particular purpose
Most of these you can do directly inside the app. For anything else, write to info@caredenza.com.
9. HIPAA
HIPAA (the U.S. health-privacy law) applies to "covered entities" (hospitals, clinics, and health plans) and to "business associates" who handle health information on their behalf. When you use CareDenza directly as a consumer, we are not acting as a covered entity or a business associate, so HIPAA does not technically govern that use. We voluntarily apply protections that line up with HIPAA's Security Rule because it is the right way to handle health information. If a healthcare organization later offers CareDenza to its patients, we will sign a Business Associate Agreement with that organization for that program.
10. Children
CareDenza is intended for adults: typically adults managing their own care, and family members supporting them. The app is not directed to children under 13, and we do not knowingly collect information from anyone under 13. If you believe a child has provided information to CareDenza, please contact us.
11. Security
We protect your information with encryption in transit and at rest, access controls, and ongoing monitoring. Practices and how to reach us are on the Security page. No security is perfect, and no provider should claim otherwise; we work to make incidents unlikely and to respond quickly if one happens. We will notify affected users without undue delay if a breach materially affects their information.
12. Changes to this policy
We may update this policy from time to time. If we make material changes, we will notify you in the app and update the effective date at the top of this page. Continued use of CareDenza after the change means you accept the updated policy.
13. Contact
Questions, requests, and complaints all go to:
CareDenza, Inc.
25 Rolfes Lane, Newbury, MA, USA
info@caredenza.com