Carekeeping Consumer Health Data Privacy Policy
Version 1.1
1. Overview
Carekeeping is a consumer care-coordination, scheduling, reminder, record-keeping, reporting, and authorized family/Care Team communication service provided by Bradshaw Logic.
This Consumer Health Data Privacy Policy describes how Carekeeping processes consumer health data where applicable law requires additional disclosures or rights concerning health-related information.
This policy supplements the general Carekeeping Privacy Policy. If this policy and the general Privacy Policy address the same information, both should be read together.
General privacy information is available at:
https://carekeeping.app/privacy
The Carekeeping Medical Disclaimer is available at:
https://carekeeping.app/medical-disclaimer
2. Consumer Health Data We May Process
Depending on the features you choose to use, Carekeeping may process consumer health data including:
- diagnoses, conditions, symptoms, and health history entered by users;
- medications, doses, routes, schedules, instructions, and medication administration records;
- allergies and adverse reactions;
- seizures, episodes, behaviors, symptoms, and related observations;
- glucose readings and related tracking information;
- therapies, treatments, and care activities;
- appointments and healthcare-related schedules;
- sleep, meals, hydration, bowel or bladder information, behaviors, and other user-configured activities;
- medical equipment, sensors, supplies, and related lifecycle information;
- emergency medical information;
- care notes and other health-related records entered by Authorized Users;
- reports, summaries, timelines, associations, and patterns generated from user-entered Care Information; and
- information that identifies or associates a Care Recipient with healthcare-related services, care activities, or health records.
You are not required to enter every category of consumer health data.
3. Sources of Consumer Health Data
Consumer health data may come from:
- the account holder;
- Household Owners and administrators;
- authorized family members;
- authorized caregivers or Care Team members;
- information entered for a Care Recipient by an Authorized User;
- records created when an Authorized User uses Carekeeping features; and
- summaries, reports, timelines, or other information generated by Carekeeping from user-entered records.
Carekeeping does not independently obtain a Care Recipient's medical records from a healthcare provider unless a future feature specifically supports that function and the required user authorization is obtained.
4. Why Carekeeping Processes Consumer Health Data
Carekeeping processes consumer health data to provide features selected or requested by users, including:
- maintaining a Care Recipient's care history;
- organizing medications and care schedules;
- recording medication administration and other care activities;
- tracking episodes, seizures, glucose readings, behaviors, activities, therapies, appointments, and other user-entered information;
- providing optional reminders and notifications;
- generating emergency summaries, doctor reports, timelines, and other user-requested reports;
- displaying historical information, patterns, and associations in recorded data;
- coordinating Authorized Users within a Household or Care Team;
- managing care supplies and equipment;
- synchronizing information among authorized devices and users;
- enforcing roles, permissions, and access controls;
- authenticating users and protecting account security;
- troubleshooting and maintaining the Service;
- responding to support, privacy, and deletion requests; and
- complying with applicable law and valid legal process.
Carekeeping does not use consumer health data for targeted advertising.
5. How Consumer Health Data Is Shared or Made Available
Carekeeping may make consumer health data available in the following circumstances.
Authorized Household and Care Team Users
Consumer health data may be available to Household members, caregivers, and Care Team members according to their assigned role, permissions, and Care Recipient access.
Household Owners and authorized administrators are responsible for granting access only to people who are authorized to view or manage the applicable Care Recipient's information.
Service Providers
Carekeeping may use service providers that process information on behalf of Bradshaw Logic when processing is necessary to operate the Service.
Depending on the production configuration and feature involved, these categories may include:
- database and hosting providers;
- authentication providers;
- file-storage providers;
- transactional email providers;
- push-notification infrastructure providers;
- application-hosting and content-delivery providers; and
- other technical processors necessary to provide user-requested functionality.
The production vendor/SDK inventory will be used to keep this section aligned with the released Service.
User-Directed Sharing
Authorized Users may export, print, download, or otherwise share Care Information with healthcare professionals, family members, caregivers, schools, therapists, or other people they choose.
Once information is exported or shared outside Carekeeping, the recipient's own privacy and security practices may apply.
Legal and Safety Disclosures
Carekeeping may disclose consumer health data when reasonably necessary to:
- comply with applicable law or valid legal process;
- protect the security or integrity of Carekeeping;
- investigate fraud, abuse, or unauthorized access;
- protect the rights or safety of users or others; or
- establish, exercise, or defend legal claims.
6. Sale, Advertising, and Data Brokerage
Carekeeping does not sell consumer health data.
Carekeeping does not share consumer health data for targeted advertising or data-broker purposes.
Bradshaw Logic does not intend to deploy advertising SDKs, retargeting pixels, behavioral advertising tools, or data-broker integrations inside authenticated Carekeeping care-management screens.
These commitments must remain consistent with the actual production SDK, analytics, logging, cookie, marketing, and integration configuration.
7. Consumer Health Data Rights
Depending on applicable law and your jurisdiction, you may have rights concerning consumer health data.
These rights may include the right to:
- confirm whether Carekeeping is collecting, using, sharing, or selling consumer health data concerning you;
- access consumer health data concerning you;
- obtain information about certain categories of consumer health data and certain entities with whom applicable data has been shared;
- request correction of inaccurate information;
- request deletion of consumer health data;
- withdraw consent to future collection or sharing where processing depends on consent;
- obtain a copy of certain consumer health data; and
- appeal certain decisions concerning a consumer health data request.
These rights may be subject to legal exceptions and may vary by jurisdiction.
8. Exercising Consumer Health Data Rights
To submit a consumer health data request, you may:
- use available Carekeeping privacy or account controls;
- review the current browser-based request options at https://carekeeping.app/delete-account; or
- email info@carekeeping.app.
Carekeeping may take reasonable steps to verify your identity, confirm the account involved, or confirm that you are authorized to act for the applicable Care Recipient.
Do not send unnecessary medication details, diagnoses, Care Recipient medical details, or other sensitive Care Information by ordinary email unless specifically requested through an appropriate secure process.
9. Authorized Representatives
Where applicable law permits another person to submit a request on your behalf, Carekeeping may require reasonable documentation or verification showing that the requester is authorized to act for you or for the applicable Care Recipient.
Carekeeping may also require direct confirmation from the account holder or other verification where permitted by law.
10. Consent and Withdrawal
Use of Carekeeping is voluntary.
Users choose whether to enter optional consumer health data and which features to use.
Where applicable law requires consent for a specific collection or sharing activity, Carekeeping will use the consent process applicable to that activity before the processing occurs.
Where applicable law gives you the right to withdraw consent, you may submit a request using the methods described in Section 8.
Withdrawal of consent may affect Carekeeping's ability to provide features that require the applicable information.
Withdrawal does not necessarily require deletion of information that Carekeeping is legally permitted or required to retain or that must remain as part of an authorized shared Care Recipient record.
11. Deletion of Consumer Health Data
You can initiate deletion of your Carekeeping account from:
Care Profile → Settings → Account & privacy → Delete my account
Information about browser-based deletion requests is available at:
https://carekeeping.app/delete-account
Carekeeping may verify your identity or authority before completing a request.
When a verified deletion request is processed, Carekeeping may delete or de-identify personal information associated with the account, subject to applicable law and the shared-record rules described below.
If you contributed information to a shared Household or Care Recipient record, deleting your account may remove your access and active account relationship while some shared historical records remain available to other Authorized Users where necessary to preserve the Care Recipient's care history.
If you are the sole member of a Household you own and choose the Household-deletion option, deletion may permanently remove the Household, Care Recipients, and Household-scoped care records.
Some limited information may be retained where necessary for:
- security;
- fraud prevention;
- legal compliance;
- dispute resolution;
- enforcement of applicable agreements;
- preservation of authorized shared records; or
- backup processing.
Specific deletion-completion and backup-retention periods will not be published until they are verified against the actual production systems and providers.
12. Appeals
If Carekeeping denies a consumer health data request and applicable law provides a right to appeal, you may email:
Use the subject line:
Consumer Health Data Appeal
Include any request reference number that was provided and explain why you believe the decision should be reconsidered.
Carekeeping may verify the person submitting the appeal before acting on it.
13. Security
Carekeeping uses administrative, technical, and organizational safeguards designed to protect consumer health data.
These safeguards include authentication, access controls, role-based permissions, and other measures implemented in the Service and supporting infrastructure.
No information system can guarantee absolute security.
Where applicable law requires notification of a qualifying privacy or security incident, Bradshaw Logic will provide notices in accordance with those legal requirements.
14. Retention
Consumer health data is retained only for as long as reasonably necessary for legitimate purposes such as:
- providing the Service;
- maintaining shared Care Recipient history;
- processing privacy or deletion requests;
- preserving security and fraud-prevention records;
- complying with legal obligations;
- resolving disputes; and
- enforcing applicable agreements.
Different categories of consumer health data may have different retention periods.
Carekeeping will not publish fixed retention or backup periods until those periods have been verified against the production database, authentication, hosting, storage, logging, support, email, notification, and backup configurations.
15. Children and Dependents
Carekeeping may be used by parents, guardians, caregivers, and other Authorized Users to maintain consumer health data concerning children or dependents.
The person creating or managing information for a child, dependent, or other Care Recipient is responsible for having appropriate authority or permission to do so.
Where applicable law requires a parent, guardian, or other legally authorized adult to manage an account or exercise rights concerning a minor's information, that requirement applies.
16. Changes to This Policy
Bradshaw Logic may update this Consumer Health Data Privacy Policy as Carekeeping, applicable law, platform requirements, or data practices change.
The current version and effective date will be published at:
https://carekeeping.app/consumer-health-privacy
If a change is material, Carekeeping may require users to review or acknowledge the updated policy before continuing to use the Service.
17. Contact
Consumer health data questions, requests, and appeals may be sent to:
Carekeeping
Bradshaw Logic