Privacy Policy

ElderNex ("we," "us," or "our") provides a care coordination platform designed to help families organize and manage care for aging parents. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and application (collectively, the "Service").

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

Information you provide directly:

• Account information — your name, email address, and password when you create an account.
• Care recipient information — names, dates of birth, medical conditions, allergies, medications, doctor contacts, insurance details, and emergency contacts for the individuals you are coordinating care for.
• Care activity data — tasks, appointments, care notes, symptom logs, care handoffs, expenses, and documents you create within the Service.
• Household and team data — information about family members or caregivers you invite to collaborate, including their email addresses and roles.
• Communications — messages you send to us through support channels or the contact form.

Information collected automatically:

• Usage data — pages visited, features used, time spent, device type, browser type, and operating system.
• Log data — IP address, access timestamps, and referring URLs.
• Cookies and local storage — session tokens for authentication, user preferences, and chat history stored locally on your device. See our Cookie Policy for details.

We use your information to:

• Provide, maintain, and improve the Service.
• Enable care coordination features, including shared household access.
• Power AI-assisted features such as care insights, task suggestions, and appointment preparation (see Section 4).
• Send transactional emails (account verification, password resets, invitation links).
• Respond to your support requests and communications.
• Detect, prevent, and address security incidents and abuse.
• Comply with legal obligations.

We do not sell your personal information to third parties. We do not use your care data for advertising purposes.

When you use AI-powered features (such as care insights, task suggestions, or the AI chat assistant), relevant care data from your current care profile is sent to our AI processing provider to generate responses. This data is:

• Sent securely via encrypted connections (TLS 1.2+).
• Used only to generate the specific response you requested.
• Not used by our AI provider to train or improve their models.
• Not stored by our AI provider beyond the duration needed to process your request.

AI-generated actions (such as creating tasks or notes) are always presented for your review before execution. Destructive actions (deletions) require explicit confirmation.

We share your information only in the following circumstances:

• Household members — care data is shared with family members or caregivers you invite to your household. You control who has access and at what permission level (owner, editor, viewer).
• Service providers — we use trusted third-party services to operate the platform, including cloud hosting (Supabase/AWS), AI processing, and email delivery. These providers are contractually required to protect your data.
• Legal compliance — we may disclose information if required by law, subpoena, court order, or to protect the rights, property, or safety of ElderNex, our users, or the public.
• Business transfers — in the event of a merger, acquisition, or sale of assets, your data may be transferred as part of the transaction. We will notify you before your data becomes subject to a different privacy policy.

Your data is primarily stored on servers located in the United States, operated by our cloud infrastructure provider (Supabase/AWS). ElderNex is operated by a team based in India. As a result, authorized personnel may access your data from India for the purposes of providing support, maintaining the Service, and resolving issues.

We implement appropriate safeguards for international data transfers, including encryption in transit and at rest, access controls, and contractual protections with our service providers.

We take the security of your data seriously and implement industry-standard measures, including:

• Encryption of data in transit (TLS/HTTPS) and at rest.
• Row-level security policies to isolate data between households.
• Secure authentication with password hashing and session management.
• Rate limiting to prevent brute-force and abuse attacks.
• Regular security reviews of our codebase and infrastructure.

No method of electronic storage or transmission is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. See our Security page for more details.

You have the right to:

• Access your personal data by viewing your profile and care data within the Service.
• Correct inaccurate information by editing your profile or care records.
• Delete your account and associated data by contacting us at hello@eldernex.com. We will process deletion requests within 30 days.
• Export your data by contacting us. We will provide your data in a portable format within 30 days of your request.
• Withdraw consent for optional data processing (such as AI features) at any time by disabling those features in your settings.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• Right to know — you may request details about the categories and specific pieces of personal information we have collected about you.
• Right to delete — you may request deletion of your personal information, subject to certain exceptions.
• Right to opt-out of sale — we do not sell your personal information. No opt-out is necessary.
• Right to non-discrimination — we will not discriminate against you for exercising your privacy rights.

To exercise these rights, contact us at hello@eldernex.com. We will respond within 45 days as required by law.

While we implement robust security measures to protect the health-related information you enter into the Service, ElderNex is not designed or intended to store formal Protected Health Information (PHI) as defined by HIPAA. The health-related data you enter (conditions, medications, symptoms, etc.) is provided voluntarily for your personal care coordination purposes.

We strongly recommend:

• Not uploading sensitive medical records containing Social Security numbers, full insurance policy numbers, or detailed clinical notes from healthcare providers.
• Using the Service as a supplementary coordination tool alongside your healthcare providers' official patient portals.
• Keeping your account credentials secure and not sharing them with unauthorized individuals.

The Service is not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately at hello@eldernex.com and we will promptly delete the information.

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on the Service or sending you an email. Your continued use of the Service after changes become effective constitutes acceptance of the updated policy.

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us: