1. Categories of consumer health data we collect

We collect only information you and your care circle voluntarily enter or upload, which may include:

• Patient diagnosis, cancer staging, medications, allergies, comorbidities, treatment and care-team details, insurance and hospital information, emergency contacts, and free-text clinical notes (patient profile).
• Medical documents you upload and their AI-generated summaries (Document Vault).
• Messages you exchange in AI coaching and simulation sessions, including voice interactions.
• Care-coordination data: tasks, timeline events, family updates, checklists, and emergency plans.

2. Sources

All consumer health data is entered or uploaded by you or other members of your care circle. FamilyRounds does not connect to hospitals, electronic health records, insurers, or any external health data source, and we do not purchase or acquire health data from third parties.

3. How we use it

To generate plain-language document summaries, visit questions, discharge checklists, family updates, and coaching guidance; to let members of your care circle coordinate care; and to secure and operate the service. We do not use your consumer health data for advertising or profiling.

4. Third parties who receive consumer health data

We share the minimum necessary with service providers who process data on our behalf under contract:

• Anthropic (Claude): receives your clinical content to generate AI outputs, and contractually does not train on your data. Across our AI features, direct identifiers are removed by our de-identification step (below) before text is sent, so Anthropic receives de-identified text.
• De-identification (in-process): before text is sent to AI providers — across our AI features — it is processed by an automated de-identification step that runs within our own application (not a third-party service) to detect and mask direct identifiers (names, contact details, street addresses and ZIP codes, birth dates, Social Security and Medicare numbers, medical-record, insurance, and account numbers, license and device numbers, and ages over 89). The mapping of placeholders to real values stays on our servers and is used to restore the original values in the result shown to you. To keep clinical guidance accurate we intentionally retain non-identifying clinical context (diagnoses, medications, treatment dates, and the patient's age — never the date of birth). This automated masking reduces the identifiers shared with AI providers but does not guarantee removal of every identifier and is not a formal HIPAA de-identification.
• ElevenLabs: receives coaching-session text to synthesize spoken audio (pre-made voices, not a recording of you or the patient) for voice coaching practice.
• Your browser's speech recognition (not a FamilyRounds processor): if you choose to speak instead of type, your browser converts your speech to text. Chrome, Safari, and Edge may send that audio — which can include health information you say aloud — to Google, Apple, or Microsoft for processing, under their own privacy terms. We have no contract with these companies for this, and they are not our processors. FamilyRounds receives only the resulting text. Using the microphone is always optional; typing works everywhere.
• Mistral: receives only non-identifying scenario labels (no patient information) to retrieve general caregiving reference material.
• Hosting (Vercel and Neon): store your data and run the service.

We do not share consumer health data with advertisers, data brokers, or any party for their own purposes.

5. We do not sell your consumer health data

FamilyRounds does not sell, rent, or license consumer health data to anyone, and does not exchange it for money or other valuable consideration.

6. Your rights

You may:

• Access a copy of your data (Account Settings → Export My Data).
• Delete your account and all associated data (Account Settings → Delete My Account). We honor deletion requests, including deletion from our processors where applicable.
• Withdraw consent to collection and/or sharing at any time (Account Settings).
• Contact us to exercise any right you have under applicable state law.

7. Consent

We collect and share your consumer health data only after you provide separate, specific consent for (i) collection and (ii) sharing with the processors listed above. You can withdraw either consent in Account Settings; withdrawing sharing consent disables the AI features that depend on it.

8. Contact

For privacy-related questions or to exercise your rights, contact us at familyrounds2026@gmail.com.