Privacy Policy

Greenlue Inc. ("Greenlue," "we," "us") makes an app that helps families coordinate an aging parent's health. This policy explains what information we collect through the Greenlue app for iPhone and Android (the "App") and through greenlue.com (the "Site"), how we use it, who can see it, and the choices you have.

• 1. Information we collect
• 2. Apple Health, Health Records, and Apple Watch
• 3. How we use information
• 4. Who can see it: your care circle
• 5. AI features
• 6. When we share information
• 7. How long we keep it
• 8. Security
• 9. Your choices and rights
• 10. HIPAA and health-privacy laws
• 11. Children
• 12. The website
• 13. Changes and contact

1. Information we collect

Information you give us

• Account information. Your name, email address, phone number (optional), and password. If you sign in with Apple or Google, we receive the name and email those services share with us.
• Care circle information. The name, date of birth, and other details you enter about the person receiving care, and the names and email addresses of family members you invite. If you enter information about someone else, you confirm that you are allowed to do so.
• Documents and content. Files, photos, pictures of medication labels, voice notes, notes, tasks, appointments, medication lists, and messages you add to a care circle. These often contain health information, including diagnoses, medications, lab results, and clinical notes.
• Messages to us. Whatever you include when you email support or reply to one of our emails.

Information from connected sources

• Apple Health and Health Records (iPhone), if you choose to connect them. See section 2.
• Apple Watch and other wearables, if the person receiving care chooses to connect them: measurements such as heart rate, steps, sleep, and health alerts the device records, plus whether the device has synced recently.
• Other health record connections we may offer, such as patient-portal or FHIR connections. We will ask before connecting any new source.

Information collected automatically

• Device and usage information. Device model, operating system version, app version, language, time zone, IP address, crash reports, and which features you use, so we can keep the App working and fix problems.
• Location. If you allow it, approximate location for the weather card on Home. We do not track your location in the background.
• Notifications. A push token so we can send reminders you turned on.

We do not use advertising trackers or third-party advertising SDKs in the App.

2. Apple Health, Health Records, and Apple Watch

On iPhone, Greenlue can read from Apple Health with your permission, including clinical records ("Health Records") that your hospital or clinic makes available in the Health app, and measurements from Apple Watch.

• Read-only. Greenlue reads the categories you approve. It never writes to Apple Health.
• What we read. For Health Records: allergies, conditions, immunizations, lab results, medications, procedures, and vital signs. For Apple Watch: the health measurements and alerts you approve, and sync timing so we can tell whether the Watch is being worn and charged.
• What we do with it. We store a copy on our servers so it can appear in Documents and Apple Watch Data, be shared with the care circle according to the data owner's choices, and be used to create plain-language summaries, suggested tasks, and answers to questions you ask in the App. That is all.
• What we never do with it. We do not use Apple Health data for advertising, marketing, or any purpose unrelated to the features described here. We do not sell it, disclose it to data brokers, or share it with third parties for their own purposes. We do not store it in iCloud.
• Your control. You can turn off Greenlue's access at any time in the iPhone Settings app under Privacy & Security → Health. Turning it off stops new data from flowing. Data already imported stays in Greenlue until you delete the document or your account.

Apple Health is a feature of Apple Inc. Apple's own handling of your data is governed by Apple's privacy policy, not ours.

3. How we use information

• To run Greenlue. Create your account and care circle, store and organize documents, sync connected sources, send reminders and notifications, and show the Home briefing.
• To power the features you use. Generate document titles, summaries, and categories; suggest tasks; answer questions in Ask; and flag when a wearable has stopped syncing.
• To support you. Respond when you contact us and send service messages such as invitations, security notices, and account changes.
• To keep Greenlue working and safe. Diagnose crashes, prevent abuse, and enforce our Terms.
• To improve Greenlue. Understand which features are used, in aggregate. We do not use the content of your documents or health records to train AI models. See section 5.
• To tell you about Greenlue. Occasional product updates by email. You can unsubscribe from these at any time; service messages continue while you have an account.

4. Who can see it: your care circle

Greenlue is built around a care circle: the person receiving care and the family members who help. Information in a care circle is shared with its members according to these rules.

• You choose when you add something. When you add a document, photo, voice note, or similar item, you choose whole care circle or only me. Items marked only me are not visible to other members and do not appear in their lists, counts, search, Home briefing, or Chat.
• The data owner controls connected data. When the person receiving care connects Apple Health or a wearable, they choose whether readings and alerts stay private or are shared with the circle. If a family member connects a source on the parent's behalf, that member is responsible for having the parent's permission.
• Members can be removed. The circle's owner can remove a member at any time. Removed members lose access going forward.
• Greenlue staff. Access to production data is limited to a small number of engineers, granted by role, logged, and used only to operate the service, investigate a problem you reported, or as required by law. We do not browse customer data.

5. AI features

Several Greenlue features use large language models: document titles and summaries, categorization, suggested tasks, the Home briefing, task suggestions in Chat, and Ask.

• These features run on your care circle's own documents and records. Answers are grounded in that content, not the open internet.
• Our AI provider processes your content on our behalf, under a written agreement that prohibits using it for any purpose other than generating the response and prohibits training models on it.
• AI output can be wrong or incomplete. It is labeled in the App and is not medical advice. Check with the care team before acting on it.

6. When we share information

We share personal information only in these situations:

• With your care circle, as described in section 4.
• With service providers that help us run Greenlue: cloud hosting and storage, AI model hosting, transactional email and push notifications, crash reporting, and customer support tools. They may process your information only on our instructions and only to provide their service to us.
• With an advertising-attribution service, to measure which ads bring people to Greenlue. It receives a device advertising identifier and basic install and sign-up events, never health information, and only if you allow tracking when the app asks.
• When you direct us to, for example if you export a document or share it outside the App.
• For legal reasons, if required by law, subpoena, or court order, or to protect the rights, safety, or property of Greenlue, our users, or others. Where allowed, we will tell you first.
• In a business transfer, such as a merger or acquisition. This policy would continue to apply, and we would notify you of any change.

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We have not sold or shared personal information in the preceding 12 months.

7. How long we keep it

• Account and care circle content is kept while your account is active.
• Wearable measurements are kept at full resolution for a limited period and then summarized into hourly and daily aggregates so trends remain visible without keeping every reading.
• When you delete your account, we delete your account and the content you own within 30 days, except where we must keep it to comply with law or resolve disputes, and except in encrypted backups, which expire on a rolling schedule. Content you added to someone else's care circle and marked for the whole circle may remain visible to that circle unless you delete it first.
• Support emails and server logs are kept for a limited period in the normal course of running the service.

8. Security

We protect information with encryption in transit and at rest, role-based access controls, audit logging, multi-factor authentication for staff, and infrastructure hosted with providers that support health-data workloads. We review our security program regularly. No system is perfectly secure; if we learn of a breach affecting your information, we will notify you as the law requires.

9. Your choices and rights

• Access, correct, download. You can view and edit most information in the App. Email us for anything else.
• Delete. In the App, go to Profile → Delete account. You can also request deletion at greenlue.com/delete-account or by emailing support@greenlue.com.
• Permissions. Turn Health, Camera, Photos, Microphone, Location, and Notifications on or off in your phone's settings at any time.
• Email. Every product update email has an unsubscribe link.
• Regional rights. Depending on where you live (including California, Washington, and other US states, the EU/EEA, and the UK), you may have the right to know what we hold, to correct or delete it, to receive a copy, to object to or restrict certain processing, to opt out of sale or sharing (we do neither), and to complain to a regulator. We will not treat you differently for exercising these rights. Email us and we will act on your request within the time the law allows; we may ask you to verify your identity first. An authorized agent may make a request on your behalf with proof of authorization.

10. HIPAA and health-privacy laws

Greenlue is a consumer app used by families. In most cases Greenlue is not a "covered entity" under HIPAA, and the information you and your family add to Greenlue is not protected health information under HIPAA once it leaves your provider. We limit use of that information to what this policy describes. Where a state consumer-health-privacy law applies (for example, Washington's My Health My Data Act), this policy also serves as the notice that law requires, and the rights in section 9 apply.

11. Children

Greenlue is for adults. It is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us information, contact us and we will delete it.

12. The website

The Site is a marketing site with care guides and an access-request form. The only personal information it asks for is your email address. Our hosting provider records standard technical information (IP address, browser, pages viewed, time of visit) to serve and protect the Site. We do not run advertising trackers on the Site. We use your email address to tell you about Greenlue and for nothing unrelated.

13. Changes and contact

We may update this policy as Greenlue changes. When we make material changes, we will update the date above and notify you in the App or by email before the changes take effect.

Questions or requests:
Greenlue Inc.
support@greenlue.com