Privacy notice

1. Who we are

Carevo US is operated by Carevo Pty Ltd (ABN 69 696 950 919), a company registered in Australia, whose registered address is 6/11 York St, Sydney NSW 2000, Australia. We do not yet have a US entity. Carevo Pty Ltd decides how and why personal information collected through this website is used.

Because we are based in Australia, the information you give us is processed in Australia as well as in the United States. See section 7.

Carevo is not a covered entity or business associate under HIPAA, and we do not claim HIPAA compliance. What you tell us is protected by this notice and by the privacy laws that apply to us, not by HIPAA. A provider that receives your enquiry may be a HIPAA covered entity, and its own notice of privacy practices governs what it does with your information.

2. What we collect

When you submit an enquiry through the care questionnaire we collect:

• the kind of care you are looking for, who it is for, how soon you need it, and how it will be paid for (for example Medicare, Medicaid, VA benefits, long-term care insurance or private pay),
• your ZIP code or the place you need care in,
• your name, email address and phone number,
• anything else you choose to tell us about the care need, and
• the page you submitted the enquiry from.

Your answers about care needs can reveal health or disability information. You do not need to give diagnoses or medical record details. Give only what is needed to explain the care you are looking for.

When you use a calculator or checker, the answers stay in your browser. They are not sent to us and we never see them.

We also collect standard usage data: pages viewed, approximate location derived from your IP address, device type and referrer. Browsing data is not attached to a named person unless you enter your email address in the questionnaire.

3. Why we use it

• Responding to your enquiry and connecting you with providers.
• Passing your enquiry to matched providers listed on Carevo, so that they can contact you. You agree to this in the enquiry form before any contact details are recorded.
• Improving the site: understanding which pages and tools are useful.
• Publishing anonymous enquiry statistics, such as the number of enquiries for a type of care in a state. We publish only counts and percentages, and only when enough enquiries sit behind a figure that no one can be picked out.
• Meeting legal obligations, including responding to privacy requests.

4. Where enquiries are stored, and analytics

When you submit an enquiry it is sent to Carevo's application at app.carevo.us, which stores it and passes it to matched providers. A copy of the answers also goes to PostHog, our analytics provider, so that an enquiry is not lost if our application is unreachable. From the moment you enter your email address in the questionnaire, the details entered so far can be sent, so that we can still follow up if you do not finish. If you would rather we did not keep a partial enquiry, email us and we will delete it.

PostHog's automatic capture records interactions such as page views and clicks. It does not record what you type into a form field, because input values are masked before anything leaves your browser. The questionnaire is excluded from interaction capture, and we have turned off session recording.

5. Consumer health data

Information about the care you or someone you care for needs can be consumer health data under state laws such as Washington's My Health My Data Act and similar rules in Nevada and Connecticut. We collect it only when you give it to us in the questionnaire. We use it to respond to your enquiry and to connect you with providers, and we share it only with the matched providers and the service providers listed in section 6. You can withdraw your consent to our use or sharing of it at any time, and ask us to delete it, by emailing [email protected]. We do not sell consumer health data.

6. Who we share it with

• Matched providers. We share your enquiry details with providers listed on Carevo that fit what you told us, so they can contact you. Once a provider has your details, its own privacy practices apply to what it does with them.
• Service providers who host the site, send email and provide analytics, including PostHog. They process data for us under contract.
• Authorities where the law requires it.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

7. Where it is processed

Information is stored and processed in the United States and, because the site is currently run from Australia, may be accessed from Australia. We use contracts with our service providers to protect it wherever it is processed.

8. How long we keep it

We keep an enquiry for 24 months after your last contact with us, unless you ask us to delete it sooner. PostHog stores event-level analytics data under the retention setting for our project. You can ask us to delete information linked to you at any time.

9. Your privacy rights

Depending on the state where you live, you can have rights over your personal information. These include the right to know what we hold, to get a copy, to correct it, to delete it, to limit use of sensitive information, to opt out of sale and sharing, and not to be treated differently for using these rights. California residents have these rights under the CCPA and CPRA. Residents of other states have similar rights under their own laws.

To use a right, email [email protected]. We will confirm we have your request and reply within the time your state's law sets, usually 45 days. We may need to confirm who you are first. You can ask an authorized agent to make a request for you.

If you are not happy with our answer, you can appeal by replying to it, and you can report a concern to your state attorney general, the California Privacy Protection Agency, or the Federal Trade Commission.

10. Cookies and similar storage

This site does not set advertising cookies. PostHog analytics uses first-party browser storage to tell visits and sessions apart. Blocking this storage may make one person look like several anonymous visitors.

11. Children

This site is for adults. We do not knowingly collect personal information from children under 13.

12. Provider data on this site

Information about providers comes from public CMS Provider Data Catalog and NPI Registry records. It is organizational information about businesses, not personal information about you. We use organization records from the NPI Registry, not records for individual clinicians.

13. Changes

We will update this notice when our processing changes and change the date at the top.

14. Contact

Carevo Pty Ltd, 6/11 York St, Sydney NSW 2000, Australia. Email [email protected] for privacy requests or [email protected] for anything else.