Privacy, in plain words

What we collect

• What you and your care team put into Parea: your care plan, check-ins, medicines, tasks, documents, and messages to the team.
• Basic account details: your name, phone number and email, so we can send sign-in codes and reminders.

Who can see it

• Your care team, limited to what their role needs. Every time someone on staff opens or changes your health information, it's logged.
• People in your circle see only the categories you share with them: updates, appointments, medicines or check-ins. New supporters start with updates only.
• Your DDD Support Coordinator gets plan updates only if you turn that on.

What we never do

• We don't sell your data, to anyone, ever.
• We don't share your information with employers or insurers unless you explicitly agree.
• Helen, our AI assistant, doesn't learn from your data. The company that runs the AI model may not train on it either.

How it's protected

• Parea follows HIPAA. Every company that handles your health information for us signs a business associate agreement, including hosting, the database, the AI model, text messages and email, and file storage.
• Information is encrypted in transit (TLS 1.2 or newer) and at rest (AES-256). Diagnoses and documents get an extra layer of encryption.
• Staff sign in with a password and a code, and are signed out automatically after a period of inactivity.

Your choices

• You can download a copy of your information or ask us to delete it.
• You can stop sharing with anyone in your circle, or withdraw your consents, at any time.
• If a guardian or health care proxy consents for you, you can still see your own record and what has been shared.

If something goes wrong

• If your information is ever exposed, we'll tell you in writing, without unreasonable delay and within the time the law requires.

Questions

Members can ask their navigator. Anyone else can write to [privacy contact pending].