Privacy Policy
FamilyCare Facility ("we", "us") is an operations and documentation platform for senior centers and residential group homes, operated by Smith App Studio. This policy explains what information we collect through familycarefacility.com and app.familycarefacility.com, how we use it, and the choices you have. Our customers are organizations (facilities); this policy covers both the facility staff who hold accounts and the resident and member information those facilities enter into the platform.
Information We Collect
- Account information — name, email, and role of facility staff who create or are invited to accounts.
- Facility information — organization name, facility type, and settings your organization configures (including white-label branding, if enabled).
- Resident and member care data — attendance, activities, meals, wellness observations, incident reports, documents, and similar records that facility staff choose to enter. We store what your facility enters; we do not import records from healthcare providers, insurers, or electronic health record systems.
- Billing data — subscription and payment information, processed securely by Stripe. We never see or store full card numbers.
- Usage and device data — log data such as IP address, browser type, and pages visited, used for security and to improve the service.
- Contact form submissions — name, email, phone, and message when you contact sales.
Resident Data Entered by Facilities
Care records about residents and members are entered and controlled by the facility that serves them. The facility decides what to record, who on its team can see it, and which family members get portal access. We process that data on the facility's behalf to provide the service — we never sell it or use it for advertising.
HIPAA Status
FamilyCare Facility is not a HIPAA Business Associate–backed system unless separately agreed in writing. The platform is designed for operational documentation, not clinical charting, and clinical/PHI features remain locked pending our formal HIPAA compliance work (including Business Associate Agreements). Facilities are responsible for ensuring their use of the platform complies with laws that apply to them.
How We Use Information
- Operate and provide the platform to your facility
- Authenticate users and enforce role-based access
- Process subscriptions and billing
- Provide support and respond to enquiries
- Maintain security, prevent abuse, and keep audit records
- Improve performance and reliability
How We Share Information
We share information only with the service providers needed to run the platform, and as required by law:
- Stripe — payment processing
- Supabase — database hosting, authentication, and file storage
- Infrastructure providers — web hosting and email delivery
- Legal authorities — when required by valid legal process
We do not sell personal information, and we do not share it for cross-context behavioral advertising.
Cookies
We use essential cookies to run the site and app (for example, keeping you signed in). Optional analytics cookies are used only with your consent, which you can give or withdraw at any time through the cookie preferences banner (powered by an open-source consent tool). See also our Terms of Service.
Data Retention
We retain account and facility data for as long as the facility's account is active. Care records are retained per the facility's use of the service — facilities can export their records at any time. After a subscription ends, data is retained for a reasonable wind-down period so the facility can export it, then deleted, unless we are legally required to keep it longer.
Security
- Encryption in transit and at rest
- Per-facility data isolation — one facility can never see another's data
- Role-based access controls (least privilege)
- An append-only, tamper-evident audit trail of administrative changes
- Managed cloud infrastructure with monitoring and automated backups
Your Rights (GDPR / CCPA)
Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information, to restrict or object to certain processing, and to non-discrimination for exercising these rights. Facility staff can manage most account data in Settings. For requests about resident or member records, we will direct the request to — or coordinate with — the facility that controls that data. To exercise any right, contact us at smithappsupport@gmail.com.
Children's Privacy
FamilyCare Facility is a business tool for adults; accounts are not available to anyone under 18, and the service is not directed at children. We do not knowingly collect personal information from children.
Changes to This Policy
We may update this policy from time to time. We will post the updated version here with a new effective date, and for material changes we will notify facility administrators.
Contact Us
Questions about this Privacy Policy? Contact us at smithappsupport@gmail.com.