CarePlan Privacy Policy

Effective October 16, 2026

This policy explains what CarePlanUSA LLC collects when you use getcareplan.com or become a member, how we use it, who we share it with and how we protect it. Your health information is also covered by our HIPAA Notice of Privacy Practices, below.

1. 1. What we collect

   • Your name, date of birth and, if you choose, your gender
   • Your email address, phone numbers, preferred way to reach you and preferred language
   • Your mailing address and an emergency contact, so we can mail your membership card and reach someone if needed
   • The plan you choose, your signed agreement and your payment history
   • Health information that you or our providers record as part of your care
   • How you heard about us and any referring provider, if you tell us
   • Your IP address and browser details, used to keep the site secure and stop abuse

   Card details go directly to Stripe, our payment processor. CarePlan never sees or stores your full card number.

2. 2. How we use it

   • To create and run your membership and schedule your care
   • To charge your plan payments and send receipts
   • To send account emails: sign-in links, password resets, reminders and answers to your questions
   • To keep the site secure, prevent fraud and meet our legal duties

   We do not sell your information, and we do not use it for advertising.

3. 3. Who we share it with

   • Providers in the CarePlan network, to give you the care you scheduled
   • Stripe, to process payments
   • Supabase, which hosts our database
   • Vercel, which hosts the website
   • Amazon Web Services, which sends our emails
   • Cloudflare, which checks that sign-ups come from a real person
   • Government agencies, when the law requires it

   These companies may use your information only to provide their service to CarePlan.

4. 4. How we protect it

   The site uses encrypted connections (HTTPS). Your information is stored with providers that encrypt it at rest. Only CarePlan staff who need it can see member records, and staff sign in with two-step verification.

5. 5. Cookies

   We use cookies to keep you signed in and to remember your language. We do not use advertising cookies.

6. 6. Your choices

   You can see and update your details in your account. You can opt out of non-essential emails at any time. To ask for a copy of your information, a correction, or its deletion where the law allows, write to our Privacy Officer.

7. 7. HIPAA Notice of Privacy Practices

   CarePlan is committed to protecting your health information. This notice describes how medical information about you may be used and disclosed and how you can access this information. Please review it carefully.

   Your health information rights:

   • Right to inspect and obtain a copy of your health records
   • Right to request amendments to your health information
   • Right to receive an accounting of disclosures
   • Right to request restrictions on certain uses and disclosures
   • Right to receive confidential communications

   How we may use your information:

   • Treatment: To provide and coordinate your healthcare
   • Payment: To bill and collect payment for services
   • Healthcare Operations: To improve quality of care and train staff
   • As Required by Law: To comply with federal and state regulations

   Our responsibilities: We are required by law to maintain the privacy and security of your protected health information, provide you with this notice of our legal duties and privacy practices, follow the terms of the notice currently in effect, and notify you if there is a breach of your unsecured protected health information.

8. 8. Contact

   If you have questions or would like to file a complaint, please contact our Privacy Officer at privacy@getcareplan.com. You may also file a complaint with the U.S. Department of Health and Human Services.