Privacy Policy

Last updated: March 17, 2026

CareLookout ("we," "our," or "the App") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use the CareLookout mobile application and website at carelookout.com.

1. Information We Collect

Account Information. When you create an account, we collect your email address, display name, and authentication credentials. If you sign in with Google, we receive your name, email address, and profile photo from Google.

User-Generated Content. We store content you create within the App, including:

• Facility notes, pros/cons lists, and general observations
• Visit checklists, ratings, and observations
• Reviews and ratings of facilities
• Favorite facility selections
• Care quiz responses and results

Location Data. With your explicit permission, we collect your approximate location to find nearby facilities and to verify proximity for the review check-in feature. Location data is used only for real-time search queries and check-in verification. We do not store your location history on our servers or share location data with third parties.

Usage Data. We collect anonymous usage analytics through Google Firebase Analytics, including screens viewed, features used, search queries (without identifying information), and app performance data. This data is used solely to improve the App.

Device Information. We may collect device type, operating system version, and a unique device identifier for push notification delivery and app compatibility purposes.

2. How We Use Your Information

• To provide and maintain the App's core functionality (facility search, map, favorites, notes, reviews, visit checklists)
• To authenticate your account and sync your data across devices
• To verify physical proximity for review check-in
• To deliver push notifications you have opted into
• To display AI-generated inspection analysis to authenticated users
• To enforce usage limits (e.g., daily view counts for AI analysis)
• To improve the App based on aggregated, anonymized usage patterns
• To moderate user-submitted reviews and enforce content policies

3. Data Storage and Security

Your data is stored securely using Google Firebase (Firestore and Firebase Authentication), hosted in the United States. We employ industry-standard security practices including:

• Encrypted data transmission (TLS/SSL)
• Firebase Security Rules restricting unauthorized data access
• Secure authentication protocols (email/password, Google OAuth)
• Role-based access controls for administrative functions

Notes and visit checklists are stored locally on your device by default using on-device storage. Cloud backup and sync is optional and requires authentication. Locally stored data is not accessible to us.

4. Data Sharing

We do not sell, rent, or trade your personal information to third parties. We will never sell your data.

We may share data only in the following limited circumstances:

• Reviews: Reviews you submit are visible to all App users, along with your display name. Do not include personal information in reviews.
• Service Providers: We use Google Firebase for hosting, authentication, analytics, and data storage. Google's privacy policy governs their infrastructure services. We use Anthropic's Claude AI for inspection analysis processing (no personal user data is sent to this service).
• Legal Requirements: We may disclose information if required by law, regulation, subpoena, or legal process.

5. Third-Party Data Sources

Facility information displayed in the App is sourced from publicly available government databases, including:

• Centers for Medicare & Medicaid Services (CMS) Provider Data
• California Department of Social Services (CCLD)
• New York State Department of Health
• State licensing agencies across all 50 states

AI-generated summaries, safety analysis, severity ratings, and trend indicators are produced using artificial intelligence and are provided for informational purposes only. They do not constitute medical, legal, or professional advice.

6. Cookies and Tracking

The CareLookout mobile app does not use cookies. The carelookout.com website may use essential cookies for basic functionality and Firebase Analytics for anonymous usage tracking. We do not use third-party advertising cookies or cross-site tracking.

7. Your Rights and Choices

• Access and Export: You can view all your data (notes, favorites, checklists, reviews) within the App at any time.
• Deletion: You may delete your account and all associated data through the App's profile settings or by contacting us. We will process deletion requests within 30 days.
• Location: You can revoke location permissions at any time through your device settings. The App will continue to function using manual search (review check-in will require location permission).
• Notifications: You can manage push notification preferences in the App's profile settings or through your device settings.
• Data Portability: You may request a copy of your personal data by contacting us at the email below.

8. Children's Privacy (COPPA)

The App is not intended for use by children under 13 years of age, in compliance with the Children's Online Privacy Protection Act (COPPA). We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately and we will promptly delete it.

9. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law. Anonymized, aggregated data (e.g., review counts, average ratings) may be retained indefinitely as it cannot be linked back to you.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy in the App and updating the "Last updated" date above. Your continued use of the App after changes constitutes acceptance of the updated policy.

11. California Residents (CCPA/CPRA)

If you are a California resident, you have the right to:

• Request disclosure of the categories and specific pieces of personal information we have collected
• Request deletion of your personal information
• Opt out of the sale or sharing of personal information
• Not be discriminated against for exercising your privacy rights

We do not sell or share personal information as defined by the CCPA/CPRA. To exercise your rights, contact us at the email below.

12. Related Services

CareLookout operates a related website, careslist.com, which is a public directory of senior care facilities. Careslist does not require accounts or collect personal information beyond standard analytics. Careslist has its own Privacy Policy.