Privacy Policy

We may collect:

Personal Information:

• Name
• Date of birth
• Address
• Phone number
• Email address
• Government-issued identification (for verification)

Health Information:

• Diagnoses
• Care needs
• Functional limitations
• Care preferences
• Uploaded medical documents

Clinician Information:

• Professional license details
• Certifications
• Background check status
• Insurance information
• Experience and specialties

Technical Data:

• Device information
• IP address
• Usage logs
• Encrypted session data

We use collected information to:

• Assess care needs using AI analysis
• Generate match recommendations
• Verify clinician credentials
• Facilitate telehealth and in-person visits
• Process payments
• Improve our algorithms and services
• Comply with legal requirements

CaraLoom is built to HIPAA standards. As we finalize Business Associate Agreements (BAAs) with our infrastructure and AI vendors, Protected Health Information (PHI) is handled so that it is:

• Encrypted at rest and in transit
• Access-controlled using role-based permissions
• Logged and monitored for audit purposes
• Shared only when necessary to provide services

When in-person visits are selected, clinicians must complete identity verification and background screening through approved third-party services.

We do not sell personal information.

We may share data:

• With matched clinicians (limited to necessary care details)
• With background check providers (when required)
• With payment processors (for billing)
• When required by law

We implement:

• End-to-end encryption (AES-256/TLS 1.2+)
• Multi-factor authentication
• Secure cloud hosting
• Continuous monitoring
• Restricted administrative access
• Periodic penetration testing
• Audit log tracking

Users may:

• Request access to their information
• Request corrections
• Request deletion (subject to legal obligations)
• Withdraw consent at any time

To submit a privacy request, contact: privacy@carematch.ai

CaraLoom utilizes artificial intelligence to:

• Assess patient care needs
• Generate match recommendations
• Assist in documentation summarization
• Identify potential care risks
• Improve matching accuracy

• Platform-generated documentation may be retained according to applicable federal and state laws
• Users may request record copies subject to identity verification
• Data retention timelines vary by state and service type
• Upon termination of an account, data may be archived as required by law

If a data breach occurs, affected users will be notified in accordance with applicable law. CaraLoom maintains continuous monitoring for breaches and has incident response protocols in place.