CareLead, Inc.
Effective Date: September 8, 2026 | Last Updated: September 8, 2026
This policy is provided under the Washington My Health My Data Act (RCW 19.373) and Nevada SB 370. It describes how CareLead, Inc. collects, uses, and shares consumer health data, and how you exercise your rights over it. It applies to Washington and Nevada consumers, and CareLead applies the same practices to everyone who uses the Services.
This document covers consumer health data only. Our general practices are described in our Privacy Policy (https://carelead.app/privacy).
CareLead is a personal health record. The health data it holds is the data you choose to put into it, or that we extract from documents you upload. Depending on which features you use, this includes:
• Health conditions, diagnoses, and surgical history
• Allergies and adverse reactions
• Medications, dosages, schedules, and whether a dose was taken or missed
• Immunization records
• Laboratory and imaging results
• Appointments, visit notes, and follow-up tasks
• Hospital admissions, emergency department visits, and discharge information
• Preventive care and screening status
• Bills, Explanations of Benefits, insurance details, and pharmacy details
• Family health history
• Self-recorded measurements such as blood pressure, glucose, or weight
• Care team members and emergency contacts
• Bodily functions, vital signs, and symptoms you record
• Precise health-related information derived from any of the above, including information inferred by our document-reading features and presented to you for confirmation
We do not collect biometric identifiers, precise location data, or information about your attempt to acquire health services other than what you record yourself.
We collect consumer health data from the following sources:
• Directly from you. Information you type, speak, or select in the application.
• From documents and photographs you upload. We read lab reports, after-visit summaries, discharge papers, prescription labels, bills, and Explanations of Benefits that you provide, and extract structured information from them.
• From authorized caregivers and household members. A person you have granted access to may add information to a profile you manage, and you may add information to a profile you have been granted access to.
We do not purchase consumer health data, and we do not obtain it from data brokers, advertising networks, or any other third-party source.
We use consumer health data only to provide the Services you have asked for:
• To store, organize, and display your health record back to you
• To read documents you upload and turn them into structured entries you review and confirm
• To answer questions you ask about your own record
• To generate reminders, tasks, and preparation material for your appointments
• To produce summaries, packets, and exports at your request
• To share information with caregivers you have authorized, within the permissions you set
• To secure your account and detect misuse
• To comply with legal obligations
We do not use consumer health data for advertising, marketing, profiling, or any form of behavioral targeting. We do not use it to train artificial intelligence models.
We share consumer health data only in the following circumstances.
With people you authorize. When you invite a caregiver and grant them access to a profile, they can see the categories of data your chosen permission template allows. You can revoke this at any time and revocation takes effect immediately.
With our service providers, to operate the Services. These are the only third parties that process consumer health data on our behalf, and each is bound by a Business Associate Agreement:
• Supabase, Inc. (Cloud database and storage): All health data you store, held encrypted on our behalf
• Anthropic, PBC (Artificial intelligence provider): The document text or question needed to perform the task you requested
• Google LLC (Google Cloud) (Speech-to-text provider): Voice audio, for the duration of conversion to text only. The audio is not retained
With entities you direct. If you send an export, summary, or packet to a clinician, pharmacy, or insurer, that data leaves CareLead at your instruction.
When legally required. We may disclose data where required by law or legal process, and we will challenge requests we believe to be overbroad or unlawful.
In a business transfer. If CareLead is acquired or merged, data may transfer as part of that transaction, subject to this policy or to notice and an opportunity to delete.
We do not sell consumer health data. We have never sold consumer health data and we will not do so. Selling consumer health data would require your valid written authorization, which we do not seek.
We do not share consumer health data with any affiliate, because CareLead, Inc. has no affiliates or subsidiaries.
You have the right to:
Confirm whether we are collecting, sharing, or selling your consumer health data, and to access that data. You can see everything CareLead holds inside the application at any time, and you can generate a complete export of your household's data from Settings.
Obtain a list of all third parties with whom we have shared your consumer health data, along with contact information for each. Section 4 above is that list.
Withdraw your consent to our collection and sharing of your consumer health data.
Delete your consumer health data. You may delete individual items, whole profiles, or your entire account from within the application. On request, we will delete your consumer health data from our records, including from our backups and from our service providers, and we will notify those providers of your request.
Not be discriminated against for exercising any of these rights.
Inside the application: Settings → Export My Data, and Settings → Delete Account.
By email: support@carelead.app
We will respond within 45 days of receiving your request. We may extend this by a further 45 days where reasonably necessary, and we will tell you before we do. We may need to verify your identity before we act on a request, and we may decline a request where acting on it would compromise the privacy or security of another person.
You may appeal by replying to our response, or by writing to support@carelead.app with "Appeal" in the subject line. We will respond to an appeal within 45 days with a written explanation of our decision.
If your appeal is denied, you may submit a complaint to:
Washington State Attorney General — https://www.atg.wa.gov/file-complaint
Nevada Attorney General — https://ag.nv.gov/Complaints/File_Complaint/
Attn: Privacy
406 E Tuscaloosa St., Unit 01
Florence, AL 35630
Email: support@carelead.app
We will not collect, use, or share consumer health data for any purpose not described in this policy without first obtaining your affirmative consent. If we make material changes to this policy, we will notify you before those changes take effect.
© 2026 CareLead, Inc.