Privacy Notice

Last Modified: October 26, 2026

What This Notice Covers

This Privacy Notice explains how CAEVO LLC (“CAEVO,” “we,” “us,” or “our”) collects, uses, stores, and discloses personal information when you use the CAEVO website (caevo.ai), web application, mobile applications for iOS and Android, and related services (collectively, the “Services”).

The Services include the Aging Well Hub, Caregiver Hub, Family Loop, Ask EVO, Family Ready Folder, Daily Care Log, Aging Well Index, Move Well, Nourishment Center, Medicare Navigation, Care Cost Estimator, community features, and related tools and resources provided by CAEVO. This Notice will be updated as features become available.

This Notice does not apply to the privacy practices of third-party platforms, including Meta, which may process a form submission before delivering it to CAEVO.

The Services are intended for individuals located in the United States. The Services are not directed to, and CAEVO does not knowingly market or target the Services to, individuals located outside the United States. CAEVO makes no representation that the Services or their content are accurate, appropriate, or lawful outside the United States. If you access the Services from outside the United States, you do so on your own initiative and at your own risk, and you are solely responsible for compliance with local law. CAEVO may restrict or refuse access to the Services from any location in its discretion.

Personal Information We Collect

“Personal information” means information that identifies, relates to, or could reasonably be linked with an individual. The information we collect through the Services includes:

Identity and contact information. Name, username, email address, phone number, home address, date of birth, and photo.
Account and subscription information. Account credentials, subscription plan, billing information, and payment method details (such as card brand, last four digits, and expiration date).
Plan interest and situation description. The subscription plan you are interested in and how you describe your situation (for example, whether you are planning for your own future or caring for a family member).
Referral and acquisition information. How you heard about CAEVO and any referral source.
Waitlist and founding member information. Waitlist signup details and founding member cohort status collected before you create an account.
State and ZIP code. The state and ZIP code you provide, which we use to provide jurisdiction-specific content and programs across all 50 states and the District of Columbia.
Health and wellbeing information. Health conditions, diagnoses, dietary restrictions, medications, dosages, administration schedules, daily health and wellbeing logs (such as mood, sleep, appetite, pain, energy, mobility, meals, exercise, and caregiver notes), self-assessments, housing situation, reported health events (such as falls, hospitalizations, memory issues, or medication errors), and AI-generated status summaries.
Care team and other contacts. Names, phone numbers, email addresses, addresses, and other contact details for doctors, aides, home health workers, attorneys, neighbors, and other people in your or a care recipient’s support network, including provider specialties, NPI numbers, and insurance policy and member numbers where applicable.
Financial and insurance information. Expenses, Medicaid data (such as income and asset limits, application status, and look-back dates), veteran status, insurance type, and card metadata.
Legal and financial planning status. Information about whether you have completed legal or financial planning documents such as a power of attorney, healthcare proxy, advance directive, or will, and your daily-activity dependency level as reported through self-assessments.
Aging Well Index. Your inputs to the Aging Well Index self-assessment and the resulting scores across its weighted domains.
Family Ready Folder. Uploaded legal, insurance, and financial documents (such as wills, powers of attorney, and insurance cards), other reference materials (such as account statements, benefit letters, and insurance summaries), and usernames and passwords for third-party websites or accounts that you choose to store in the Family Ready Folder. The Family Ready Folder stores this information for your own reference only; it does not autofill your credentials on any third-party website, and CAEVO does not access, monitor, or use third-party accounts on your behalf through this feature. Information stored in the Family Ready Folder is encrypted, but CAEVO retains the ability to decrypt it, including through personnel and technology vendors who administer our production systems. If another user shares access to your profile, that user may be able to view the usernames and passwords you have stored in your Family Ready Folder. We delete your Family Ready Folder contents when you close your account, subject to the retention practices described in Retention below.
Family Loop and shared updates. Information you choose to share with family members or caregivers through Family Loop, including free-text posts, photos, comments, and family member names or tags.
Ask EVO conversations. Full chat text from your interactions with Ask EVO, which may contain any health, financial, family, or other detail you type.
Community content. Posts and comments you make in community forums under a chosen display name.
Fitness and cognitive activity. Exercise logs, brain-training game scores, and cognitive assessment scores tracked over time.
App usage and preferences. Onboarding status, app mode, in-app settings, and sharing and consent settings (such as which family members can see your health and wellbeing data and at what detail level).
Privacy requests, support tickets, and correspondence. If you contact CAEVO, including through a support ticket or privacy request, we may receive and retain the information you include in that communication.
Internal staff notes. Notes that CAEVO support, product, or other staff create in connection with your account or your interactions with CAEVO.
Feedback and surveys. If you provide suggestions, ideas, feedback, or survey responses about the Services, we may use that information to improve the Services without compensation or attribution.
Information about others. If you enter information about another person into the Services (for example, a family member’s health conditions, medications, provider contacts, or insurance information), we collect and process that information as part of the Services. You represent that you have obtained any affirmative consent required by applicable law or have legal authority to provide the information (such as a power of attorney or legal guardianship). Information about a person who is not a registered user of the Services, including a care recipient, receives the same privacy protections and data-handling practices described in this Notice that apply to information about registered users.
If you are a person about whom another user has entered information into the Services, you have an independent right to request access to, correction of, or deletion of that information, or to object to its further collection, use, or sharing, whether or not you are a registered user. You may submit this request using the contact information in Your Choices and Privacy Rights or Contact Us below. CAEVO will honor these requests to the extent required by applicable law, subject to CAEVO’s ability to reasonably verify your identity and relationship to the information. This provision corresponds to the third-party information rights described in the CAEVO Subscriber Agreement.

Some of this information may be considered sensitive personal information or consumer health data under applicable state privacy laws. CAEVO collects and uses this information to provide the Services and as otherwise described in this Notice.

CAEVO is not a healthcare provider, health plan, or healthcare clearinghouse, and CAEVO is not subject to the Health Insurance Portability and Accountability Act (HIPAA) in the ordinary operation of the Services. CAEVO does not create a physician-patient, attorney-client, or other professional relationship. The Services are not a substitute for professional medical, legal, financial, or emergency services.

We may create aggregated, anonymized, or de-identified data derived from your use of the Services (for example, statistics about how users navigate the platform or general trends in feature usage). This data cannot reasonably be used to identify you. We own this aggregated data and may use it for any lawful purpose, including improving the Services, conducting research, and publishing general statistics about aging and caregiving trends. Our use of de-identified data is subject to the de-identification standards and re-identification prohibitions of applicable law, including the CCPA and applicable state consumer health data laws.

We also automatically collect certain technical information when you access our website or use the Services, including:

Device and browser information. IP address, device type, device identifier, operating system, browser type, and browser settings.
Usage information. Pages visited, features used, date and time of visits, time spent on pages, referring and exit pages, and other information about how you interact with the Services.
Approximate location. General geographic location derived from your IP address.
Mobile app permissions and device data. If you use the CAEVO app for iOS, we request access to your camera and photo library, which let you capture and upload photos and documents, and to Face ID, which lets you secure app access using your device’s biometrics. If you use the CAEVO app for Android, we request access to device storage. Both apps collect a device identifier and, if you enable notifications, a push notification token.
Cookies and similar technologies. We may use cookies, pixel tags, web beacons, and similar tracking technologies to collect information about your use of the Services. Cookies are small text files stored on your device that help us recognize you, remember your preferences, and understand how you use our Services. Some cookies are session cookies that expire when you close your browser; others are persistent cookies that remain until deleted or expired.
Analytics. CAEVO’s public marketing website may use Google Analytics to collect and process information about visits to the website. Google Analytics is not used within the authenticated application. Where used, Google sets cookies on your browser or device, and your browser automatically sends information to Google. Google uses this information to provide us with reports that help us understand how visitors interact with the website. To learn more about how Google uses data, visit Google’s Privacy Policy and Google’s page on “How Google uses data when you use our partners’ sites or apps.” You may download the Google Analytics Opt-out Browser Add-on for each web browser you use.
Server and authentication logs. DigitalOcean application and server logs (such as IP address, request headers, and timestamps) and Supabase authentication logs (such as login timestamps and session and device metadata).
You can manage cookies through your browser settings. Most browsers allow you to refuse or delete cookies. However, disabling cookies may affect your ability to use certain features of the Services.

How We Collect Information and Sources

We collect information when you provide it directly to us, including when you create an account, use the Services, enter information into forms on our website, interact with Ask EVO, share information through Family Loop, or submit an inquiry or privacy request.

If you submit information through a form in an advertisement on a platform such as Instagram or Facebook, the provider of that platform processes the submission under its own privacy policy before delivering it to CAEVO. These providers’ collection and use of information are governed by their platform’s terms and privacy practices, not this Notice.

CAEVO also receives personal information from Meta lead forms on Instagram and Facebook advertising; referral partners, including elder law firms and aging services organizations under pilot and Design Partner arrangements; enterprise and channel partners; event and conference signups; and Family Loop invitations, where an existing user supplies an invitee’s name and email before that person has an account.

How We Use Information

We use the information we collect for the following purposes:

To provide, maintain, and improve the Services, including the Aging Well Hub, Caregiver Hub, Family Loop, Ask EVO, and related features.
To create and manage your account and subscription.
To generate AI-assisted responses, summaries, recommendations, and guidance through Ask EVO and other AI features.
To enable Family Loop sharing between you and your invited family members and caregivers.
To personalize your experience based on your information, state, and preferences.
To process payments and administer billing for paid subscriptions.
To send occasional CAEVO updates. Those emails include a one-click unsubscribe option.
To send reminders and notifications, including SMS text messages, push notifications, and in-app reminders about medications, appointments, care tasks, wellness activities, payments, subscriptions, or Family Loop updates (if you opt in to receive them). You can manage your notification preferences in your account settings. Standard message and data rates may apply to SMS messages.
To understand, in aggregate, who CAEVO is serving so that we can prioritize building the right things first.
To conduct research and product development using de-identified and aggregated data.
To prepare grant reporting and program evaluation using aggregate information.
To surface emergency resources when you describe a safety concern or emergency in the Services.
To review Ask EVO responses for accuracy and safety.
To respond to your questions, customer support requests, and privacy requests.
To protect the Services, maintain the security of our systems, prevent misuse, and comply with applicable law.
To provide customer support, troubleshoot technical issues, and respond to your requests. Our support team may access your account information when reasonably necessary to assist you.

We do not use your information for purposes unrelated to the purposes described in this Notice unless we first provide any notice or obtain any consent required by applicable law. We collect only the personal information reasonably necessary to provide the Services and for the purposes described in this Notice.

Disclosures and Service Providers

We do not sell or rent your personal information and do not share it with third parties for their marketing.

We may disclose personal information to service providers that process it on our behalf to operate the Services and communicate with you. Current service providers include:

Supabase. To store personal information and provide authentication on U.S. infrastructure.
DigitalOcean. Serves the application files for the Services from a United States facility. DigitalOcean does not host personal information beyond standard server logs described below.
Resend. To deliver transactional email.
Anthropic. Ask EVO is powered by Anthropic’s Claude artificial intelligence technology. Your prompts and Ask EVO’s responses are processed by Anthropic under commercial terms and are not used to train Anthropic’s models. CAEVO may change the underlying AI provider from time to time upon notice to you.
Payment processor. Stripe processes subscription payments and billing. CAEVO does not store your full card number; Stripe holds your card data, and we retain only your card brand, last four digits, and expiration date.
App stores. If you access the Services through the Apple App Store or Google Play, Apple Inc. or Google LLC process your purchase and distribute the application under their own terms and privacy practices.
DeveloperTown. Our software development partner, which has administrative access to our production systems and infrastructure, including the ability to decrypt information stored in the Family Ready Folder, to build, maintain, and support the Services.

If you join through a Meta form, Meta processes the submission before CAEVO receives it, as described in How We Collect Information and Sources.

Service providers may access personal information only as reasonably necessary to provide services to CAEVO, under the terms of our agreements with them and applicable laws.

We may also disclose personal information if reasonably necessary to comply with law, legal process, or a government request; protect CAEVO, users, or others; investigate or prevent fraud, security incidents, or misuse; or support a merger, acquisition, financing, reorganization, or sale of assets.

We may disclose aggregate information that does not reasonably identify you without restriction.

Sales, Targeted Advertising, and Marketing. CAEVO does not sell or rent personal information. CAEVO does not share personal information with third parties for their marketing, and CAEVO does not use personal information to provide targeted advertising. The CAEVO application does not use advertising trackers. CAEVO’s public marketing website may use third-party advertising or analytics technologies in connection with its paid social media advertising; CAEVO is confirming the specific technologies in use on the marketing website and will update this Notice accordingly. CAEVO does not send spam.

Do Not Track. We do not currently respond to “Do Not Track” (DNT) signals sent by web browsers, mobile devices, or other mechanisms. Per industry standards, third parties may be able to collect information, including personal information, about your online activities over time and across different websites or online services when you use the Services.

Global Privacy Control. You can use the Global Privacy Control (“GPC”) through a supported browser to signal certain opt-out preferences. If you use the GPC, we will process your request for that browser, but it will not apply outside of that browser to your device. You will need to use the GPC for each browser you use to access the Services. If you clear your cookies after using the GPC, you will need to use the GPC again for us to process your opt-out for that browser.

Your Choices and Privacy Rights

You can control your communications and information in the following ways:

Unsubscribe from updates. Use the one-click unsubscribe option in any occasional CAEVO update email.
Cancel your account. You may cancel your account at any time through your account settings or by contacting us at info@caevocare.com.
Manage Family Loop permissions. You control what information you share with your Invited Users through Family Loop. Review and update your sharing settings at any time.
Review, correct, or delete information. Email info@caevocare.com to ask what personal information CAEVO has about you, correct inaccurate information, or delete your information entirely.
Export your information. Before closing your account, you may request an export of your information in a portable format through your account settings or by contacting support@caevocare.com. Where available, we will make your requested data available for download for a reasonable period after your export request. Export options may not include every feature, format, or item.

Depending on where you live and applicable law, you may also have the right to access or receive a copy of your personal information, correct inaccurate information, delete personal information, receive it in a portable format, or opt out of certain processing such as sales, targeted advertising, or profiling. CAEVO does not currently sell or rent personal information or use personal information for targeted advertising.

To exercise a privacy right, email info@caevocare.com with your request. We may ask for information reasonably necessary to verify your identity and protect against unauthorized requests. We will respond as required by applicable law.

Authorized agents. In some states, you may designate an authorized agent to submit a privacy request on your behalf. If you use an authorized agent, we may ask for proof that the agent is authorized, and we may also require you to verify your identity directly with us.

Appeals. If we deny your privacy request, we will explain the reasons for the denial. You may have the right to appeal our decision under applicable state law. To appeal, email info@caevocare.com with the subject line “Privacy Request Appeal” and include your original request and our response. We will review and respond to your appeal within the time required by applicable law (generally 45 to 60 days). If we deny your appeal, we will provide information about how to contact your state attorney general or other relevant regulatory authority.

Sensitive personal information. CAEVO collects sensitive personal information, including health and wellbeing information, only as necessary to provide the Services and for the purposes described in this Notice. We do not use sensitive personal information to infer characteristics about you for purposes unrelated to providing the Services.

Non-discrimination. CAEVO will not discriminate against you for exercising your privacy rights. We will not deny you services, charge you different prices, or provide a different level or quality of services because you exercised a privacy right, except where permitted by law.

Nevada residents. Nevada law permits Nevada consumers to opt out of the sale of certain covered information. To submit an opt-out request, email info@caevocare.com with the subject line “Nevada Opt-Out Request.” CAEVO does not currently sell covered information as defined by Nevada law.

Consumer health data. CAEVO’s Services are available nationwide, including to residents of Washington, Nevada, and Connecticut. Consumer health data laws in these states, including Washington’s My Health My Data Act (MHMDA), require a separate, conspicuously linked consumer health data privacy policy, heightened consent before collection, a distinct set of rights, and geofencing restrictions near healthcare facilities. CAEVO’s Consumer Health Data Privacy Policy, set out as a standalone document below, addresses these requirements, including consent for consumer health data about a person who is not a registered user.

California residents. If you are a California resident, you have additional rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, “CCPA”).

Your California privacy rights. As a California resident, you have the right to: (1) know what personal information we collect, use, disclose, and sell or share; (2) request deletion of your personal information; (3) correct inaccurate personal information; (4) opt out of the sale or sharing of your personal information (CAEVO does not sell or share); (5) limit the use and disclosure of sensitive personal information to purposes necessary to provide the Services; and (6) not be discriminated against for exercising your rights. To exercise these rights, email info@caevocare.com or use the methods described in Your Choices and Privacy Rights above.

Minors. CAEVO is intended for adults and does not knowingly collect personal information from anyone under 18. We do not sell or share the personal information of consumers we know to be under 16 years of age.

CAEVO’s onboarding is designed to prevent Family Loop invitations to anyone under 18.

Authorized agents. You may designate an authorized agent to submit a privacy request on your behalf. We may require proof that the agent is authorized and may require you to verify your identity directly with us.

Financial incentives. CAEVO does not offer financial incentives for the collection, sale, or deletion of personal information.

Shine the Light. California Civil Code § 1798.83 permits California residents to request information about our disclosure of personal information to third parties for their direct marketing purposes. CAEVO does not disclose personal information to third parties for their direct marketing purposes.

Categories of personal information. In the preceding 12 months, we collected the following categories of personal information as defined by the CCPA: (A) Identifiers (name, email address, phone number, IP address, account name); (B) Personal information described in Cal. Civ. Code § 1798.80(e) (name, address, phone number, financial information); (C) Characteristics of protected classifications (age, date of birth); (D) Commercial information (subscription and billing records); (E) Internet or other electronic network activity information (browsing history, interactions with the Services); (F) Geolocation data (approximate location from IP address); (G) Sensory data (photos you upload); (H) Professional or employment-related information (if you provide it in connection with caregiving); (I) Education information (if you provide it); (J) Inferences drawn from the above (such as preferences and characteristics); and (K) Sensitive personal information (health information, precise geolocation if enabled, account credentials).

Sources. We collect this information from you directly, automatically when you use the Services, and from service providers that help us operate the Services.

Purposes. We use this information for the business and commercial purposes described in How We Use Information above.

Disclosures. We disclose personal information to service providers for business purposes as described in Disclosures and Service Providers above. In the preceding 12 months, we disclosed identifiers, personal information under Cal. Civ. Code § 1798.80(e), internet or network activity information, and sensitive personal information to service providers to help us operate the Services.

Sales and sharing. CAEVO does not sell your personal information. CAEVO does not share your personal information for cross-context behavioral advertising. We have not sold or shared personal information in the preceding 12 months.

Sensitive personal information. We collect sensitive personal information, including health information, only as necessary to provide the Services. We do not use or disclose sensitive personal information for purposes other than those permitted by the CCPA, and we do not use sensitive personal information to infer characteristics about you.

Retention. We retain each category of personal information for as long as reasonably necessary to provide the Services, maintain your account, and comply with legal obligations, as described in the Retention section above.

Children

CAEVO is intended for adults. We do not knowingly collect personal information from anyone under 18. If we learn that we have received personal information from someone under 18, we will take reasonable steps to delete it. If you believe a person under 18 has submitted information, please contact us at info@caevocare.com.

Security

We use commercially reasonable administrative, physical, and technical safeguards designed to protect personal information from accidental loss and from unauthorized access, use, alteration, or disclosure.

CAEVO support staff do not have standing access to your health data, care logs, or Ask EVO conversations. When support access to that information is needed to assist you, access is granted on a just-in-time basis, scoped to the specific support issue, requires your approval, and is logged.

No website, online service, storage system, or transmission method is completely secure. Unauthenticated website forms and email may not be secure, and we cannot guarantee the security of information transmitted to or through the website; please do not submit health records, financial information, passwords, or other sensitive information through those public website forms. Within the authenticated application, where CAEVO’s core features are designed for you to store this type of information, we use encryption in transit and at rest, U.S. data residency, role-based access controls, and consent-gated sharing.

Photos you share through Family Loop or post in community features are stored at web addresses that are not indexed for public search but are not otherwise access-restricted; a person who obtains that address could view the photo without logging in. Do not share a photo through these features that you would not want viewable by anyone who obtains its address.

Retention

If you ask us to delete your information, we will delete it from our active systems in accordance with your request, subject to any limited retention required or permitted by law.

CAEVO is not a backup service or the sole place to keep important information. Keep independent copies of important legal, health, insurance, medication, financial, account, and credential information, especially information that is time-sensitive or legally important.

CAEVO does not currently offer an online tool for designating a legacy contact. If CAEVO is notified of a user’s death or incapacity, CAEVO will require, for a deceased user, a death certificate and documentation of legal authority to act on the estate’s behalf (such as letters testamentary or a court order), and for an incapacitated user, a court order or a valid power of attorney that by its terms remains in effect during the user’s incapacity, before granting access to the user’s account. If family members or other parties dispute access to an account, CAEVO will preserve the account in a locked state and will not release account information until CAEVO receives a court order or a written agreement signed by all documented parties. CAEVO does not automatically delete an account or its content upon a user’s death. Family Ready Folder contents will not be released to any party in connection with a deceased or incapacitated user’s account under any circumstances. CAEVO may introduce a dedicated legacy contact tool in the future and will update this Notice before that feature becomes available.

We retain personal information for as long as reasonably necessary to fulfill the purposes described in this Notice, maintain your account, comply with legal obligations, resolve disputes, and protect the security of CAEVO and its users. We retain active account data for the duration of your account. Billing and tax records are retained for the period required by applicable law. When you request deletion of your information or close your account, we delete it from our active production systems, but copies may persist for a period of time in encrypted backups until those backups are overwritten in the ordinary course. Ask EVO conversation transcripts, and waitlist and marketing contact information, are retained until you request deletion or until CAEVO implements an automated retention schedule for these categories; CAEVO is working to implement defined retention periods for these categories and will update this Notice once they are implemented and verified. If you post content in community features, CAEVO may retain that content after you close your account with your identifying information removed.

Future Platform Features

We may add features to the Services over time. If we materially expand the types of information we collect or materially change how we use personal information, we will update this Notice and provide any notice or obtain any consent required by applicable law before using information in a new way.

CAEVO does not use your personal information, User Content, health information, uploaded documents, Ask EVO conversations, prompts, or feedback to train or fine-tune AI models, and we do not permit our AI providers to do so.

Changes to This Notice

We may update this Notice as our practices or legal obligations change. When we update it, we will post the revised Notice on the CAEVO website and update the Last Modified date shown at the top.

If we make meaningful changes, we may notify you by email or through the Services. Please check this page periodically for the current Notice.

Contact Us

If you have questions about this Notice, want to exercise a privacy right, or want to see, correct, or delete information CAEVO has about you, contact us at:

CAEVO LLC

Email: info@caevocare.com

Website: caevo.ai and caevocare.com

CAEVO Consumer Health Data Privacy Policy

This Consumer Health Data Privacy Policy is intended to be published by CAEVO LLC (“CAEVO,” “we,” “us,” or “our”) as a document separate from, and conspicuously linked apart from, the CAEVO Privacy Notice, consistent with the requirements of Washington’s My Health My Data Act (MHMDA), Nevada SB 370, and Connecticut’s consumer health data amendments. It is drafted here for review and should be moved to its own page and URL before publication. It applies to consumer health data, meaning data that identifies a consumer’s past, present, or future physical or mental health status, collected in connection with the Services.

Consumer Health Data We Collect

We collect the following categories of consumer health data through the Services: health conditions, diagnoses, medications, dosages, and administration schedules; daily health and wellbeing logs (such as mood, sleep, appetite, pain, energy, and mobility); self-assessments and Aging Well Index inputs and scores; reported health events (such as falls, hospitalizations, memory issues, or medication errors); Ask EVO conversations that may contain health information; insurance and Medicaid information, including consumer health data reflected in those records; and any health-related documents you choose to store in the Family Ready Folder. This may include consumer health data about a person who is not a registered user, such as a care recipient, as described below.

Purpose for Collecting and Processing Consumer Health Data

We collect and process consumer health data to provide and personalize the Services, including Ask EVO responses, Daily Care Log tracking, Aging Well Index scoring, and Family Loop sharing you enable; to provide customer support; to maintain the security of the Services; to comply with applicable law; and to create aggregated or de-identified data as described in the CAEVO Privacy Notice. We do not process consumer health data to advertise or market products or services to you based on your consumer health data without your separate consent where required by applicable law.

Consent to Collect and Process Consumer Health Data

We obtain your consent, or rely on another permissible basis under applicable law, before collecting or processing your consumer health data for a purpose not described in this Policy. If you provide consumer health data about another person who is not a registered user, such as a care recipient, CAEVO requires a separate consent or authorization step directed to that person’s consumer health data, which may include an attestation and documentation of your legal authority to act for that person, or direct outreach to that person where feasible. Your representation that you have permission to enter another person’s information, standing alone, does not satisfy this requirement. We will obtain your valid authorization, as defined by applicable law, before selling your consumer health data, and your separate, affirmative consent before sharing your consumer health data with a third party for a purpose other than providing the Services, in each case to the extent required by applicable law.

Sharing of Consumer Health Data

CAEVO does not sell consumer health data and would not do so without your valid authorization as required by MHMDA and similar laws. CAEVO does not share consumer health data with any third party for that third party’s own purposes. We disclose consumer health data only to the service providers identified in the CAEVO Privacy Notice (including Supabase, DigitalOcean, Anthropic, Resend, and Stripe) that process it on our behalf under a written contract limiting their use of that data to providing services to CAEVO, or as otherwise required or permitted by law.

Your Rights Regarding Consumer Health Data

Subject to certain exceptions under applicable law, you have the right to: confirm whether CAEVO processes your consumer health data; access your consumer health data; withdraw your consent to CAEVO’s collection or processing of your consumer health data; and request deletion of your consumer health data, which we will honor and instruct our processors and any affiliates who received the data to also delete. If you are a non-user third party about whom consumer health data was entered (such as a care recipient), you have these same rights, as described in the CAEVO Privacy Notice. To exercise a right under this Policy, email info@caevocare.com. We may ask for information reasonably necessary to verify your identity and, if applicable, your relationship to the consumer health data at issue. If we deny your request, we will explain the reason for the denial, and you may appeal using the appeal process described in the CAEVO Privacy Notice.

Data Security and Retention

We protect consumer health data using the administrative, physical, and technical safeguards described in the Security section of the CAEVO Privacy Notice. We retain consumer health data as described in the Retention section of the CAEVO Privacy Notice.

Geofencing

CAEVO does not use geofencing to establish a virtual boundary around a mental health facility, reproductive or sexual health facility, or other healthcare facility to identify, track, collect data from, or send a notification, message, or advertisement to a consumer regarding their consumer health data, as prohibited by MHMDA.

Changes to This Policy; Effective Date

We may update this Policy as our practices or legal obligations change. If we make a material change to this Policy, we will notify affected consumers and, where required by applicable law, obtain renewed consent before applying the change to previously collected consumer health data.

Effective Date: August 24, 2026.

CAEVO LLC · Noblesville, Indiana · info@caevocare.com