Privacy Policy

Effective Date: July 1, 2025

Cara AI Inc. ("Cara," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our website, products, and services, including our mobile and web applications (collectively, the "Services").

By using our Services, you agree to the terms of this Privacy Policy and our Terms of Service.

1. Information We Collect

We collect the following types of information to deliver and improve our Services:

1.1 Information You Provide

• Account Information: When you create an account, we collect your name, contact information, and credentials.
• Health and Assessment Data: When you use Cara to complete health, environmental, or social assessments, we collect information you provide about your health, environment, and care needs.
• Caregiver or Member Input: If you assist someone else, we may collect information you submit on their behalf.
• Communications: We collect information when you contact us, including messages, support requests, or feedback.

1.2 Information Collected Automatically

• Usage Information: Details about how you interact with the Services, including access times, device type, IP address, browser type, and pages viewed.
• Cookies and Tracking Technologies: We use cookies and similar technologies to analyze trends, manage the site, and improve user experience.

1.3 Information from Third Parties

We may receive information from health plans, providers, or other organizations when authorized by you or required for providing the Services.

2. How We Use Information

We use your information to:

• Deliver, maintain, and improve our Services;
• Complete and manage health or social assessments;
• Facilitate communication between members, caregivers, and care teams;
• Generate, store, and transmit completed forms and documentation;
• Analyze and enhance functionality and security;
• Comply with legal, regulatory, and reporting obligations.

We do not sell personal information.

3. How We Share Information

We may share your information:

• With Authorized Parties: Such as health plans, care coordinators, and providers when necessary to deliver Services.
• With Service Providers: For hosting, analytics, and technical support under strict confidentiality agreements.
• For Legal Reasons: If required by law, regulation, or subpoena.
• During a Business Transfer: Such as a merger, acquisition, or sale of assets.

We do not share personal health information (PHI) for marketing or advertising purposes.

4. HIPAA and Health Information

When Cara provides services to or on behalf of a covered entity (such as a health plan or provider), Cara acts as a Business Associate under the Health Insurance Portability and Accountability Act ("HIPAA"). In these cases, Cara only uses or discloses Protected Health Information as permitted by law or by its Business Associate Agreement.

5. Data Security

We use administrative, technical, and physical safeguards to protect your data, including:

• Encryption of data in transit and at rest;
• Role-based access controls;
• Secure audit logs and monitoring;
• HIPAA-compliant infrastructure and cloud storage.

Despite these measures, no system is completely secure, and we cannot guarantee absolute protection.

6. Data Retention

We retain information as long as needed to provide the Services, comply with legal obligations, or resolve disputes. When no longer required, data is securely deleted or anonymized.

7. Your Rights and Choices

Depending on your jurisdiction, you may have the right to:

• Access and obtain a copy of your data;
• Request correction or deletion;
• Opt out of certain data uses or disclosures;
• Withdraw consent at any time.

To exercise your rights, contact us at support@askcara.ai.

8. Children's Privacy

Cara does not knowingly collect or maintain information from children under 13 years of age. If we become aware that a child's information has been collected without parental consent, we will delete it promptly.

9. International Users

Cara's Services are hosted in the United States. If you use the Services from outside the U.S., you consent to the transfer and processing of your information in the United States.

10. Changes to This Policy

We may update this Privacy Policy periodically. The "Last Updated" date at the top reflects the latest version. Continued use of our Services constitutes acceptance of any updates.