Consumer Health Data Privacy Policy

1. What consumer health data we collect

• What you add about a family member: medications (name, strength, directions as written), allergies and reactions, conditions as written on documents, doctors and pharmacies, insurance details, emergency contacts, where documents such as a DNR, POLST or healthcare power of attorney are kept, follow-up appointments, and optional dose-log entries.
• Photos you take of pill bottles, insurance cards, discharge papers and similar documents, and anything we read from them.
• The readiness-check score, only if you ask us to email your results. Your individual answers stay in your browser and are never sent to us.

2. Where it comes from

From you, and from photos you choose to take. We don't buy health data or collect it from anyone else.

3. Why we collect and use it

Only to provide what you asked for: to build and keep current a medication list, ER sheet and wallet card; to share it with the people you choose; to send you the emails you asked for (for example a reminder to check the list). We never use it for advertising, never use it to make inferences about you, and never use it to train AI models.

4. Who we share it with

• People you send a share link to, limited to the sections you turn on.
• Our service providers, who process it only on our instructions: Supabase (database and file storage), Vercel (hosting), Anthropic (reading the text in photos you submit) and Resend (sending emails you asked for; emails never include medication details).
• We never sell consumer health data and never share it with advertising platforms. Our advertising cookie, if you allow it, receives no health data (see Cookies).
• We have no affiliates that receive it.

5. Consent

We collect consumer health data when you add it, after you confirm that the person agreed or that you're authorized to act for them. You can withdraw consent at any time by deleting the information or your account.

6. Your rights

• Know and access what we hold, and the list of third parties it went to: download everything from your account page, or email us.
• Delete it: delete a parent's file or your whole account in the app (it happens immediately), or email us.
• Withdraw consent at any time, the same way.

Email support@getparentfile.com with the subject “Health data request” from the address you use with ParentFile. We confirm your identity by email and respond within 45 days. If we decline a request, you can appeal by replying with the word “Appeal”; we answer appeals within 45 days and tell you how to contact your state Attorney General if you disagree.

7. Contact

Lina Maria Garcia Ltd, 5 Hayam St., Bat Yam 46322, Israel. support@getparentfile.com.