Privacy Policy

1. Introduction & Scope

Welcome to GiveCare ("we," "our," or "us"). We are committed to protecting your privacy and being transparent about how we collect, use, and share your information. This Privacy Policy explains our data practices for the GiveCare AI-powered SMS caregiving support platform (the "Service").

By using GiveCare, you consent to the data practices described in this policy. If you do not agree, please do not use our Service.

2. Information We Collect

2.1 Information You Provide

• Account Information: Full name, email address, phone number when you sign up
• SMS Conversations: All text messages you send to and receive from our AI agent, including full conversation history
• Assessment Responses: Your answers to caregiver support assessments (e.g., GC-SDOH-6, EMA-3, CWBS-14, and GC-SDOH-30 when applicable)
• Wellness Data: Check-in responses, assessment scores, and caregiver-load signals
• Benefits Pre-Screening Data: Information you share during benefits discovery and pre-screening, including household size, income range, geographic location (zip code), and caregiving situation — used solely to identify relevant public benefit programs

2.2 Information Collected Automatically

• Usage Data: Login times, feature usage patterns, session durations
• Device Information: Device type, operating system, browser type, IP address
• SMS Metadata: Message timestamps, delivery status

3. How We Use Your Information

3.1 Provide Core Services

• Deliver AI-powered conversational support via SMS through our Mira agent
• Process your messages using AI (Google Gemini) to generate personalized responses
• Administer and score caregiver support assessments
• Screen for and surface relevant public benefits programs based on your situation
• Suggest relevant caregiver support resources
• Detect crisis situations and provide immediate resources
• Send proactive wellness check-ins

3.2 Improve & Personalize

• Personalize your experience based on assessment results
• Evaluate and improve service quality using aggregated or de-identified data
• Conduct research on caregiver support workflows

4. How We Share Your Information

We do not sell your personal information to anyone.

We share your information only with the following service providers:

• Convex (Backend Platform): Hosts our database and serverless functions. Your data is stored in Convex's managed infrastructure.
• Google Gemini (AI Processing): Powers our Mira AI agent. Your SMS messages are processed by Gemini to generate responses. Google's enterprise data handling applies; your data is not used to train Google's public models.
• Twilio (SMS Delivery): Delivers and receives text messages. Twilio processes your phone number and message content to route SMS communications.
• Resend (Email Delivery): Sends account, assessment, newsletter, and operational emails when you provide an email address or subscribe to email updates.

Benefits pre-screening data is used only to suggest potentially relevant public government and nonprofit programs. It is not an eligibility determination. We do not share your benefits pre-screening information with those programs or any third party without your explicit consent.

5. SMS Messaging & AI Conversations

GiveCare operates as an AI-powered SMS service. When you enroll, you are consenting to receive text messages from GiveCare via Twilio. Here is what you should know:

• SMS via Twilio: All text messages between you and GiveCare are routed through Twilio's messaging platform. Twilio processes your phone number and message content to deliver messages.
• AI Processing via Gemini: Your messages are processed by Google Gemini to generate personalized responses from Mira, our AI caregiving agent. This means your message content is transmitted to Google's API for inference.
• Conversation Storage: All SMS conversations are stored in our database to provide continuity, safety review, and personalized support while your support relationship is active.
• Opt Out: You can stop receiving SMS messages at any time by texting STOP to our number. You will receive a final confirmation message, and no further messages will be sent. To re-enable, text START.
• Message Frequency: Message frequency varies based on your engagement. Standard message and data rates may apply.

6. Data Retention

We retain your data as follows:

• Caregiver account and conversation data: Retained while your support relationship is active unless you request deletion
• Assessment results: Retained for support continuity unless you request deletion
• Benefits screening responses: Retained for support continuity unless you request deletion
• System and audit events: Retained under our backend retention policy for operations, safety, and security review
• Email preferences and suppressions: Retained as needed to honor your email choices and legal unsubscribe requirements

You may request deletion at any time (see Section 7). Deletion removes rows linked to your caregiver record, including conversations, assessments, facts, memory records, and benefits pre-screening data, except where limited operational records must be retained for security, legal, or abuse-prevention reasons.

7. Your Privacy Rights & Data Controls

Regardless of where you live, you have the following rights over your data:

7.1 What You Can Do

• Access: Request a copy of all personal information we have about you, including conversation history, assessment results, and benefits pre-screening data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and all associated data. We will process deletion within 30 days.
• Data Portability: Receive your data in a structured, machine-readable format (JSON or CSV)
• Opt Out of SMS: Text STOP at any time to immediately stop all text messages
• Withdraw Consent: You may withdraw consent to AI processing at any time by deleting your account

7.2 What We Collect & Why (Summary)

7.3 How to Exercise Your Rights

To access, correct, export, or delete your data, contact us at: privacy@givecareapp.com

Include your name and the phone number associated with your GiveCare account. We will respond within 30 days.

8. Security Measures

• Transport safeguards: Public and API traffic uses provider-managed HTTPS endpoints; target partner deployment transport and origin posture are validated during deployment readiness.
• Storage safeguards: Runtime data is stored in provider-managed systems; deployment-specific storage, encryption, and residency claims are verified before partner launch.
• Access Controls: Role-based access limits who can view your information
• Provider review: Provider dashboards, credentials, and shared security evidence are reviewed before each partner deployment.

9. Important Medical Disclaimers

GiveCare is a technology platform for caregiver support, not a healthcare provider, medical device, or emergency service. The current public support flow is designed for controlled non-HIPAA caregiver-support contexts.

• We are a technology platform providing caregiving support and wellness tracking
• We do not provide medical diagnosis, treatment, or professional healthcare services
• HIPAA applicability depends on partner role, data source, and data flow; any health-plan, provider, covered-entity, or BAA-backed workflow requires separate legal, security, and deployment review before launch
• Mira is not a licensed healthcare professional

10. Contact Us