CareHalo360Book a demo
    Back to home

    Privacy Policy

    CareHalo360

    Effective date: 2026-05-08

    Last updated: 2026-05-10

    MSDS ALF Growth Solutions Inc. ("CareHalo360", "we", "our", "us") provides the CareHalo360 mobile application and the CareHalo360 Device (collectively, the "Service"). This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have. We designed CareHalo360 to collect the minimum information necessary to deliver fall-detection alerts and to keep that information secure.

    If you have any questions, contact us at support@carehalo360.com.

    1. Information we collect

    a) Account information you provide

    • Email address — used as your sign-in identifier.
    • Name — optional, used as a friendly label in alerts.
    • Phone numbers and other contact destinations — only those you explicitly add as caregiver routes (for example, a family member's phone for voice alerts, or a team chat channel for facility staff).

    b) Resident information you create

    • Resident display name and resident code — labels you assign to the people being monitored.
    • Household / facility name — the account label.

    c) Device information

    • CareHalo360 Device identifier and pairing token — to associate a device with a resident.
    • Device LAN IP and heartbeat status — to confirm the device is online.
    • Mobile device push token — provided by Apple Push Notification service (iOS) or Firebase Cloud Messaging (Android) so we can deliver alerts.

    d) Fall events

    • Fall incident records — timestamp, state transitions, acknowledgement and resolution events.
    • Evidence snapshots — short still images captured at the moment of a detected fall, stored briefly so caregivers can verify the event. Snapshots automatically expire and are deleted within 2 days of capture.

    e) Technical and diagnostic data

    • App version, OS version, crash logs (aggregated, no personal content).
    • API request logs containing the user identifier and the action performed (used for security and debugging; retained 30 days).

    f) What we do not collect

    • We do not stream live video from the CareHalo360 Device to our servers. AI fall detection runs entirely on the device. Only the short evidence snapshots described above are uploaded, and only when a fall is detected.
    • We do not track your location.
    • We do not access your contacts, photos, microphone, or other unrelated data.
    • We do not use third-party advertising trackers.

    2. How we use your information

    We use the information we collect to:

    • Deliver real-time fall alerts to the caregiver destinations you configure.
    • Keep your residents' devices online and notify you if one goes offline.
    • Authenticate you and protect your account from unauthorized access.
    • Diagnose and fix bugs, monitor service health, and improve detection accuracy.
    • Comply with legal obligations.

    We do not use your data to train third-party AI models. We do not sell your data, ever.

    3. Who we share information with

    We share information only with service providers who help us deliver the Service, and only the minimum necessary:

    • Cloud infrastructure (Amazon Web Services, U.S. region) — hosts our database and stores evidence snapshots. Encrypted at rest.
    • Voice and SMS provider (Twilio Inc.) — places phone calls and sends SMS alerts when a fall is detected.
    • Push notification providers (Apple Push Notification service for iOS and Firebase Cloud Messaging for Android, routed via the Expo Push Service) — deliver push notifications to your phone. Only the alert payload (resident code, incident state, and incident identifier) is sent through these providers; no health-related content beyond what is necessary to render the alert.
    • Team chat provider (where you have configured one) — receives the alerts you have explicitly opted to send there.

    We do not sell or rent your information to anyone. We do not allow these providers to use your data for any purpose other than delivering the Service to you.

    If we are required by law (subpoena, court order) to disclose information, we will do so only to the extent legally required and will notify you when permitted.

    4. Data retention

    • Evidence snapshots — auto-deleted within 2 days of capture.
    • Account and resident records — retained for the life of your subscription, plus 90 days after cancellation, after which they are permanently deleted unless you request earlier deletion.
    • API request logs — 30 days, then deleted.
    • Aggregate analytics (e.g. number of falls detected per month, with no personal identifiers) — retained indefinitely for service improvement.

    You may request immediate deletion of your data at any time — see Section 7.

    5. Security

    • All data is encrypted in transit (TLS 1.2+) and at rest (AES-256).
    • Passwords are hashed with bcrypt; we never store plain-text passwords.
    • Access to production data is limited to engineering staff under principle of least privilege and is logged.
    • We perform regular security reviews and apply patches to our infrastructure.

    No system is perfectly secure. If we ever experience a data breach affecting your information, we will notify you within 72 hours by email and through the app.

    6. HIPAA and healthcare contexts

    CareHalo360 is not a medical device and does not diagnose, treat, or prevent any condition. It is a fall-detection alerting tool.

    We design the Service to be safe to use in HIPAA-regulated environments, but we are not a HIPAA Covered Entity. If you are a Covered Entity and need a Business Associate Agreement (BAA), contact us at support@carehalo360.com and we will work with you to put one in place.

    7. Your rights and choices

    You can:

    • Access your data — request a copy at any time.
    • Correct your data — edit your name, email, and resident details directly in the app.
    • Delete your data — request full deletion via the app's "Delete Resident" action, or email support@carehalo360.com for full account deletion.
    • Export your data — request an export in JSON format at support@carehalo360.com.
    • Opt out of any alert channel — disable the channel in the app's caregiver settings.
    • Withdraw consent — uninstall the app and ask us to delete your account.

    We will respond to verified requests within 30 days. We will never charge you for exercising these rights.

    If you are a California resident, you have additional rights under the CCPA, including the right to know what personal information we have collected about you. We do not sell your personal information.

    If you are a resident of the European Economic Area, the United Kingdom, or another jurisdiction with comprehensive privacy laws, you have rights under those laws (such as the GDPR) and can exercise them by contacting us.

    8. Children's privacy

    CareHalo360 is not directed to children under 13, and we do not knowingly collect data from children. The Service is intended for use by caregivers monitoring adult or elderly residents. If you believe a child has provided us information, contact us and we will delete it.

    9. International users

    We are based in the United States, and our servers are located in the United States (AWS us-east-1). If you use the Service from outside the U.S., you consent to your information being transferred to and processed in the United States, where data protection laws may differ from those in your country.

    10. Changes to this policy

    If we make material changes to this policy, we will notify you by email and in the app at least 30 days before the changes take effect. Continued use of the Service after the effective date constitutes acceptance.

    11. Contact us

    MSDS ALF Growth Solutions Inc.
    Email: support@carehalo360.com
    Phone: +1 (713) 517-6792

    For privacy-specific inquiries: privacy@carehalo360.com