Privacy Policy for CareSheet

Last Updated: July 2026

1. Introduction

Welcome to CareSheet ("we," "our," or "us"). We are committed to protecting the privacy and security of the personal and medical information of our users and their patients. This Privacy Policy explains how we collect, use, and share information when you use our clinical management system at caresheet.org.

2. Information We Collect

We may collect the following types of information:

• Account Information: Name, email address, role, and organization details when you register.
• Clinical Data: Patient records, medical history, appointment schedules, and consent forms entered into the system. All sensitive clinical data is encrypted at rest using field-level encryption.
• Google User Data: If you connect your Google Account to sync appointments, we receive a token to access your Google Calendar to create, update, and delete events created by CareSheet.

3. How We Use Google Calendar Data

CareSheet's use and transfer of information received from Google APIs to any other app will adhere to Google API Services User Data Policy, including the Limited Use requirements.

• We request access to `https://www.googleapis.com/auth/calendar.events` solely to schedule, update, and manage your clinical appointments directly on your calendar.
• We do not use Google Calendar data to serve advertisements.
• We do not allow humans to read this data unless you explicitly grant us permission for support purposes, it's required for security purposes, or it's necessary to comply with applicable law.

4. Data Security

We implement industry-standard security measures, including HTTPS encryption in transit and AES encryption at rest for sensitive clinical fields, to protect your data from unauthorized access.

5. Contact Us

If you have any questions about this Privacy Policy, please contact us at [email protected].