Privacy Policy

Jordy Care is operated by Jordy Care, LLC (“Jordy Care,” “we,” “us,” or “our”). This Privacy Policy explains what information we collect, how we use and protect it, and the choices you have. It applies to the Jordy Care website at jordycare.com and to the Jordy Care application (together, the “Service”).

Jordy Care exists to help a family preserve everything a future caregiver would need to care for a loved one with a lifelong disability. Because that work involves sensitive personal and health information, we hold ourselves to a high standard, and we have written this policy to be read and understood, not just to satisfy a lawyer.

Who this covers

There are two parts to the Service, and they collect different things:

• The public website. Anyone can visit jordycare.com to learn about Jordy Care, see our plans, and ask us about a scholarship.
• The private application. Anyone can create an account and start a care record for someone they look after. The care record lives behind a sign-in. Each record is private to its own care circle: only the people the account owner invites can see it, and the owner chooses what each of them can see.

Some information in a care record is about someone other than the account holder, often an adult who is cared for by the family and who may be under a guardianship or similar arrangement. If you add information about another person, you confirm that you have the authority or consent to do so. See our Terms of Service for more.

Information we collect

Information you give us

• Scholarship requests. When you ask about a scholarship, we collect your name, email address, and anything you choose to tell us about who you care for.
• Account information. When you create an account, or accept an invitation to someone else’s care circle, we collect your email address and authentication details needed to sign you in securely.
• Your own details in a care circle. You can add your name, city and state, phone number, and a photograph of yourself to your card in a care circle, so the others know who is who. All of it is optional. Only you can set your own, including the photograph: nobody else in the circle can add or change a picture of you, and neither can the account owner.
• Billing information. When you choose a plan, our payment processor, Stripe, collects your payment details. We never see or store your full card number. We keep which plan you are on, whether it is active, and the reference numbers Stripe gives us.
• The care record. Inside the application, you create the record. It can include health history, medications, care team contacts, daily routines, uploaded documents, photos and videos, and information about benefits and legal arrangements. This information is sensitive, and some of it is health information.
• Messages to us. If you email us or contact support, we keep that correspondence.

Information collected automatically

• Essential cookies and similar technologies. We use cookies that are necessary to keep you signed in and to keep the Service secure. These are required for the Service to work.
• Plan usage. How much storage your care home uses, and how much of its monthly Jordy AI allowance it has used, so we can apply your plan’s limits. We count amounts, not what was asked.
• Basic technical logs. Our hosting and security providers record limited technical information, such as IP address, browser type, and the time of a request, to keep the Service running and to detect abuse.
• Optional analytics and marketing cookies. These are turned off by default. They load only if you allow them through the cookie banner shown on your first visit, and you can change your choice at any time using the Cookie Preferences link in the footer. Analytics cookies help us understand how the site is used; marketing cookies help us measure our outreach. We will name the specific tools here as we adopt them. See Your Privacy Choices.

We do not put health information or other sensitive details in web addresses, error messages, logs, or notifications.

How we use information

We use information to:

• Provide, maintain, and secure the Service, and sign you in.
• Respond to scholarship requests.
• Answer your questions and provide support.
• Operate the features you use, including the AI features described below, which work only on the information in your own record and only to help you.
• Protect the Service and the people in it from fraud, abuse, and security threats.
• Meet legal obligations.

We do not sell your personal information. We do not use your private care record for advertising, and we do not use it to train public or third-party artificial intelligence models. On our public website, optional analytics and marketing cookies run only if you allow them through the cookie banner, and you can withdraw that permission at any time.

How we use AI

Some features of Jordy Care use artificial intelligence to help you, for example to answer questions about the record or to turn something you say into a suggested entry that you review before it is saved. When you use these features, the relevant content is sent to our AI provider, Anthropic, through a secure connection so it can generate a response for you.

Under our agreement with Anthropic, your content is used only to provide the response and is not used to train their models. The AI proposes; a person decides. Jordy Care does not act on medical information on its own. See our Terms of Service for the limits of these features.

Health information

Jordy Care is a consumer tool that families use directly. We are not a covered entity or a business associate under HIPAA, so HIPAA does not govern the record you keep here. That does not lower our standard. We treat health information with heightened care, and we are subject to consumer health-privacy laws, including the Federal Trade Commission’s Health Breach Notification Rule and state laws such as Washington’s My Health My Data Act.

In practice, this means we collect health information only to provide the Service, we do not sell it, we do not use it for advertising, and we ask for your consent to collect and process it when the law requires. You can withdraw that consent and ask us to delete health information at any time. See Your Privacy Choices.

Our Consumer Health Data Privacy Policy sets out exactly which health information we collect, why, and which companies receive it.

How we share information

We share information only in these limited ways:

• People you choose. The whole point of Jordy Care is that you can share the record with the caregivers and family members you decide should have access. You control that.
• Service providers. We use a small number of trusted companies to run the Service. They may process your information only on our instructions and only to provide their service to us. They are our website and app host, which also handles our scholarship request form (Netlify), our database, sign-in, and file storage provider (Supabase), our AI provider (Anthropic), our email delivery provider (Resend), and our payment processor (Stripe). Stripe receives billing details only, nothing from the care record. We work toward putting appropriate data-protection agreements in place with the providers that handle sensitive information.
• Legal reasons. We may disclose information if the law requires it, or to protect the rights, safety, and security of the people who use the Service.
• A business change. If Jordy Care is ever involved in a merger, acquisition, or transfer, we will require that your information stay protected under this policy, and we will tell you before your information becomes subject to a different policy.

We do not sell your personal information. We never share the information in your private care record for advertising. On our public website, we share information with an advertising provider only if you turn on marketing cookies through the cookie banner, and you can turn them off again at any time.

How we protect information

We build security into the Service. Access to the care record requires a verified sign-in, and the record is protected so that one family cannot see another family’s information. Uploaded documents and videos are kept in private storage and are opened through short-lived links, not public web addresses. Information is encrypted while it travels over the internet. We limit who can access information and design the system so sensitive details are not exposed in logs or links.

No online service can promise perfect security. We work continuously to protect your information, and we ask you to help by keeping your password private and telling us right away if you think your account has been used without your permission.

How long we keep it

We keep your information for as long as your account is active or as needed to provide the Service. If you ask us to delete your information, or you close your account, we delete it, except for the limited records we must keep to meet a legal obligation or to resolve a dispute. When we delete information, it leaves the Service straight away. Deleted files are gone at once. Deleted entries can remain in our database backups for up to 7 days, until those backups expire. We do not keep any other copy of deleted content.

Your rights and choices

You can ask us to:

• Show you the information we hold about you.
• Correct information that is wrong.
• Delete your information.
• Provide a copy of your information in a portable form.
• Withdraw a consent you previously gave, including for health information.
• Opt out of any sale or sharing of personal information. We do not sell or share it, so there is nothing to opt out of today, but the right is yours if that ever changes.

Depending on where you live, including California, Washington, and a growing number of other states, you may have additional rights, and you may have the right to appeal if we decline a request. We will not treat you differently for exercising any of these rights. To make a request, or to learn exactly how we handle it, see Your Privacy Choices or email us at info@jordycare.com. We may need to verify your identity before we act, so that no one else can request your information.

Children

The Service is intended for adults. It is not directed to children under 13, and we do not knowingly collect personal information from children under 13. A care record may describe an adult who is cared for by the family, including an adult with a developmental disability. If you believe a child under 13 has given us information, please contact us and we will delete it.

If there is a data breach

If a breach of security affects your information, we will notify you and the appropriate authorities as required by law, including the Federal Trade Commission’s Health Breach Notification Rule and applicable state laws. We will tell you what happened, what information was involved, and what you can do.

Changes to this policy

We may update this policy as the Service grows or the law changes. If we make a significant change, we will update the date at the top and, where appropriate, let you know directly. The current version always lives at this page.