FamilyRounds – Family Caregiver Workspace

If you are a Washington resident or otherwise covered by a state consumer-health-data law, please also see our Consumer Health Data Privacy Policy.

1. Information We Collect

FamilyRounds collects the following types of information to provide our caregiving coordination services:

Account information: Name, email address, and password when you create an account.
Clinical documents: Medical PDFs, discharge summaries, clinic notes, and lab reports that you upload for AI summarization.
Patient information: Diagnosis, medications, staging information, care team details, and other clinical data you enter into patient profiles.
Conversation logs: Messages exchanged during AI coaching sessions, including text and voice coaching interactions.
Care coordination data: Tasks, timeline events, family updates, and care circle membership information.
Usage data: Session activity, feature usage patterns, and audit logs for security monitoring.

2. How We Use Your Data

Your data is used to:

AI processing: Clinical documents and patient profiles are processed by AI models to generate plain-language summaries, visit questions, coaching scripts, and family updates.
Care coordination: Shared within your care circle to enable family members to collaborate on caregiving tasks.
Service improvement: We may use aggregated, de-identified usage metrics (never your health information) to improve the platform. We do not use your data for advertising or profiling, and we do not sell your data.

3. Third-Party Services

FamilyRounds uses the following third-party services to deliver its features:

Anthropic (Claude): Clinical documents, patient profile data, and coaching messages are sent to Anthropic to generate summaries, visit questions, checklists, family updates, and coaching responses. Anthropic does not use your data to train its models.
Mistral: Only non-identifying scenario labels (containing no patient information) are sent to Mistral to retrieve general caregiving reference material.
ElevenLabs: Coaching-session text is sent to ElevenLabs to synthesize spoken audio (pre-made voices, not a recording of you or the patient) for voice coaching practice.
Cloud hosting: Our application and database are hosted on Railway/Neon, with data stored in PostgreSQL.

4. Data Retention and Deletion

We retain your data for as long as your account is active. You have the following rights:

Data export: You can export a copy of your data at any time from your account settings in JSON format.
Account deletion: You can permanently delete your account and all associated data from your account settings. This action is irreversible.
Document removal: Individual documents, coaching sessions, and other content can be deleted at any time.

5. Security Measures

We implement the following security measures to protect your data:

Passwords are hashed using bcrypt before storage.
Session tokens are stored in HTTP-only, secure cookies.
Optional two-factor authentication (email one-time code) is available on every account.
Automatic session timeout after periods of inactivity.
Audit logging of security-relevant actions.
All data is transmitted over HTTPS/TLS encryption.
Database access is restricted to authorized application services.

6. HIPAA and Regulatory Status

FamilyRounds is a consumer product for family caregivers. It is not a HIPAA covered entity or business associate, and we make no representation that FamilyRounds is HIPAA-compliant or that it satisfies HIPAA’s requirements. Health information you enter is not protected health information under HIPAA when you use FamilyRounds as an individual consumer. If you are a healthcare provider or an organization subject to HIPAA, do not use FamilyRounds to process protected health information; any HIPAA obligations remain solely yours. FamilyRounds is intended for personal caregiving support and does not create a provider–patient relationship.

7. Contact

For privacy-related questions or concerns, please contact us at privacy@familyrounds.app.