Privacy Policy

Information We Collect

We collect information you provide directly to us, as well as certain information automatically when you use our platform.

Information you provide:

• Name, email address, and password when you create an account
• Phone number if provided for SMS notifications
• Information about the senior client in your care (name, address, health notes relevant to service delivery)
• Payment information processed securely through Stripe — we do not store full card numbers
• Messages sent through our platform between clients and staff
• Any information submitted through our contact form

Information collected automatically:

• Log data such as browser type, pages visited, and time of access
• Device information including operating system and screen size
• IP address and approximate location (city/region level)

How We Use Your Information

We use the information we collect solely to provide, maintain, and improve our services. Specifically, we use your information to:

• Create and manage your account
• Schedule, confirm, and deliver sessions
• Send session reports, invoices, and notifications
• Process payments through Stripe
• Respond to your questions and support requests
• Send SMS and email reminders (only if you have opted in)
• Improve the quality and reliability of our services
• Comply with legal obligations

How We Share Information

We share your information only in the following limited circumstances:

• Service providers: We use Firebase (Google) for authentication and data storage, and Stripe for payment processing. These providers have their own privacy policies and security standards.
• Within your care team: Information about a senior client may be shared between the client, their designated family contacts, and Active Aging Partners staff as necessary to deliver services.
• Legal requirements: We may disclose your information if required by law, court order, or government authority.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information is subject to a different privacy policy.

Data Storage & Security

Your data is stored securely using Google Firebase, which provides industry-standard encryption in transit and at rest. Payment data is handled exclusively by Stripe, a PCI-compliant payment processor — we never store full credit card numbers on our servers.

We take reasonable technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

We retain your personal information for as long as your account is active or as needed to provide services. You may request deletion of your account and associated data at any time by contacting us.

Cookies & Tracking

Our website uses cookies and similar technologies to maintain your login session and remember your preferences. We do not use third-party advertising cookies or behavioral tracking.

• Session cookies: Used to keep you logged in during your visit. These expire when you close your browser or log out.
• Preference cookies: Used to remember settings like notification preferences.

You can control cookies through your browser settings. Disabling cookies may affect your ability to log in and use certain features of the platform.

Your Rights & Choices

You have the following rights regarding your personal information:

• Access: You can view and update most of your account information directly in your client portal under My Profile.
• Correction: You can correct inaccurate information in your profile at any time.
• Deletion: You can request deletion of your account and all associated personal data by contacting us at cynthia@breakingin.org.
• Notification opt-out: You can manage SMS and email notification preferences from your portal's Notifications settings at any time.
• Data portability: You may request a copy of your personal data in a readable format.

To exercise any of these rights, please contact us using the information in Section 9 below. We will respond to all requests within 30 days.

Children's Privacy

Our services are designed for adults and are not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have inadvertently collected such information, we will take steps to delete it promptly. If you believe a minor has provided us with personal information, please contact us immediately.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. When we make material changes, we will notify you by email and update the "Last updated" date at the top of this page.

We encourage you to review this policy periodically. Your continued use of our services after any changes constitutes your acceptance of the updated policy.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please reach out to us.