Privacy Policy

Your health data is personal. This policy explains exactly what Cara collects, how it's used, and how it's protected.

DRAFT — Not Yet Reviewed by Legal Counsel

This document is a working draft and does not constitute a binding legal agreement until reviewed and finalized by a licensed attorney.

1. What This Policy Covers

This Privacy Policy describes how Cara collects, uses, stores, and protects your personal and health information. It applies to all users of the Cara health information platform, including pilot program participants.

2. Information We Collect

Cara collects only the information necessary to provide and improve the service. This includes:

Account Information

Your name and passphrase (no email address is required for registration)

Health Data You Enter

Medications, supplements, and vitamins
Health conditions and diagnoses
Vitals (blood pressure, blood sugar, weight, etc.)
Symptoms and symptom logs
Family health history
Appointments and care team information

Wearable Device Data

If you connect an Omi pendant, Cara receives text from your conversations (a transcript or summary) from Omi

Screening Questionnaire Responses

Name, age, and optional email address provided during the pilot screening process

Usage Data

Login timestamps and feature usage patterns
We do not use tracking cookies or third-party analytics trackers

3. How We Use Your Information

We use your information for the following purposes:

To provide the Cara service — organizing your health data, running interaction checks, generating health summaries
To improve the service during the pilot program
To communicate with you about your account

What we do NOT do with your data:

We do not use your data for advertising.

We do not sell your data to third parties.

We do not share your data with insurers or employers.

We do not use your health data to train AI models.

4. Third-Party Services

Cara integrates with a limited number of third-party services to provide its features. In each case, your personal health information is protected:

openFDA API — Used to access public drug safety data. No personal information is sent to this service.
RxNorm API — Used for drug name normalization and identification. No personal information is sent to this service.
Anthropic Claude API — Receives your medication list (with doses and frequency), conditions, allergies (with severity), and your check-in messages, and for appointment prep your recent symptoms, vitals, check-in summaries, saved questions, and your doctor's name and appointment date. Cara does not send your name in your health profile. Governed by Anthropic's API data policy; your data is not used for AI training.
Omi — If you connect an Omi pendant, Omi sends Cara text from your conversations, and Cara can send short alert messages to your Omi app.
IONOS — Hosts the server where your data is stored.

Cara does not use analytics trackers or advertising networks. Your browser loads two page scripts from unpkg.com, which can see your browser's network address.

5. Data Storage & Security

We take the security of your health data seriously. The following measures are in place to protect your information:

Hosted server — Your data is stored on a virtual private server that we rent from IONOS. The same server hosts the operator's other projects, and all pilot participants' records are in one database
Encryption at rest — The database is designed to be encrypted using SQLCipher. Files you upload to Documents are stored on the server disk and are not separately encrypted
Encryption in transit — All data transmitted between your browser and Cara's server is encrypted using HTTPS/TLS
Access control — Passphrases are hashed using bcrypt; sessions are managed with secure cookies
Regular security reviews — We conduct periodic security assessments of the platform

6. Data Retention

Your data is retained for as long as you maintain an active Cara account. If you choose to delete your account, your records are removed from Cara's database. There is no recovery period — deletion is final. Files you uploaded to Documents are not yet removed automatically. The server also keeps a few recent backup copies of the database, and your records remain in those copies until newer copies replace them.

7. Your Rights

You have full control over your health data at all times. Specifically, you have the right to:

Access — View all your data at any time within the Cara application
Export — Download your main health records (JSON or PDF). The download does not yet include lab results, vaccinations, goals, uploaded documents, messages or reminders
Delete — Delete your account and your records in Cara's database (see Section 6)
Modify consent — Review your consent choices and record a change at any time

8. Children's Privacy

Cara is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children. If we become aware that a user is under 18, we will take steps to remove their data and close their account.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update this page.

Your continued use of Cara after changes to this policy constitutes your acceptance of the updated policy. If you do not agree with the changes, you should discontinue use of the service and may delete your account and data at any time.

10. Contact

If you have questions about this Privacy Policy or how your data is handled, please contact us at:

pilot@hippocrates.tech

Related Policies

Review our other policies to understand your rights and our commitments.