Privacy Policy

Carelynk, Inc. (“Carelynk,” “we,” “us,” or “our”) operates the Carelynk platform, accessible at carelynk.io. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

• Account information (name, email, role, facility)
• Usage data (pages visited, features used, timestamps)
• Care data entered by facility staff (resident information, medication records, incident reports, vitals)
• Device and browser information

• To provide and maintain the Carelynk platform
• To send transactional emails (alerts, notifications)
• To improve our services
• To comply with legal obligations
• We do not sell your personal information to third parties

Carelynk operates as a Business Associate under HIPAA when processing Protected Health Information (PHI) on behalf of covered entities (RCFE operators). We maintain appropriate administrative, physical, and technical safeguards to protect PHI.

• Data stored on Supabase (PostgreSQL) with encryption at rest
• All data transmitted over HTTPS/TLS
• Access controls enforced by role-based permissions
• Regular security reviews

• Active account data retained while subscription is active
• Upon cancellation, data retained for 90 days then deleted
• Backup data purged within 30 days of deletion

• Access your personal data
• Correct inaccurate information
• Request deletion (subject to legal retention requirements)
• Data portability upon request

• Session cookies for authentication only
• No advertising or tracking cookies
• No third-party analytics cookies

For privacy inquiries: hello@carelynk.io