Privacy Policy

Last updated: August 11, 2026

People Power Company d/b/a Care Daily is a Delaware corporation based in Kirkland, Washington.

1. Scope and roles

This Privacy Policy describes how People Power Company d/b/a Care Daily collects, uses, discloses, and protects personal information when we act as a controller or business for the consumer-facing Care Daily service.

The service includes our websites, apps, cloud services, compatible devices and sensors, alerts, reports, AI features, and related support.

In some cases, a health plan, senior living provider, home care agency, employer, platform partner, or other customer may provide the service to you or invite you to use it. In those situations:

• That organization may separately control some of your information and may have its own privacy notice.
• We may act as a processor, service provider, or business associate on their behalf under a separate agreement.
• Their agreement with us controls how we can use information for that deployment.

If another organization controls your account or provides the service to you, questions about their privacy practices should also be directed to them. We will honor our contracts with that organization and applicable law.

2. Information we collect

We collect information in a few main ways:

• You provide it directly.
• Devices, apps, and integrations send it automatically.
• Partners, customers, and other users provide it as part of a program or household.

The tables below give examples.

Account and contact information

Care-circle, household, and people in monitored locations

Device, sensor, audio, visual, and communication data

Technical, usage, payment, and partner information

3. Sensitive and health-related information

Many of the insights produced by Care Daily involve sensitive information, including health-related information and inferences.

Examples include:

• Inferences about activity, mobility, falls, or fall-related events.
• Patterns of sleep, bathroom use, hydration, or eating.
• Wellness or safety indicators based on device data.
• Notes about care needs, health concerns, or support services.

We treat in-home device data and inferences like these as consumer health data where a law uses that term, and as sensitive or special-category data where those concepts apply.

We use this information to:

• Provide the service you or your sponsoring organization request.
• Support safety, caregiving, and wellness workflows.
• Secure our systems and prevent fraud or abuse.
• Comply with law, such as responding to valid legal requests.
• Improve our products and models, including AI models, as allowed by law and by our contracts.

We do not use sensitive information to infer characteristics for unrelated advertising purposes without an appropriate legal basis or consent where required.

We do not sell consumer health data as "sell" is defined by the Washington My Health My Data Act.

If a particular Care Daily deployment is operated on behalf of a HIPAA-covered entity or business associate customer, additional contractual or regulatory rules may apply to that deployment. In consumer deployments, Care Daily is generally not acting as your doctor, health plan, or licensed healthcare provider.

Breach notifications

If a security incident involving your personal information occurs, we will provide notices required by applicable law. Depending on the product, the nature of the information involved, and our legal role, that may include notices under state breach-notification laws, HIPAA rules that apply to a covered customer, or the FTC Health Breach Notification Rule.

4. How we use information

We use personal information for the following business and commercial purposes:

• To provide, maintain, personalize, and improve the Care Daily service and compatible device experiences.
• To create accounts, authenticate users, manage permissions, and administer households, locations, and invited users.
• To generate alerts, summaries, insights, risk indicators, and reports requested by users or customers.
• To communicate with you about the service, including support, billing, onboarding, updates, and security notices.
• To process payments, subscriptions, renewals, credits, and refunds.
• To secure the service, detect and prevent fraud, abuse, unauthorized access, and other harmful activity.
• To comply with legal obligations, enforce our agreements, protect rights, and respond to lawful requests.
• To analyze trends, troubleshoot performance, develop new features, train and improve models, and create de-identified or aggregated analytics.

AI and automated decisions

We use automated systems, including machine learning and other AI models, to analyze device and usage data and to generate alerts, summaries, risk indicators, predictions, and recommendations.

These systems support people who are making decisions. They do not, by themselves, make binding decisions about eligibility for or pricing of insurance coverage, healthcare coverage, housing, employment, or similar legal rights without meaningful human involvement.

We also use information, including in de-identified or aggregated form where possible, to train, test, and improve these models. When we use third-party AI providers, we require them to protect personal information and to use it only to provide services to us, not to train their general models for other customers using your identifiable information.

Legal bases for EEA, UK, and similar jurisdictions

Where a legal basis is required, we rely on:

• Performance of a contract with you or your organization.
• Our legitimate interests, such as operating and improving the service, preventing fraud, and protecting users and our business.
• Compliance with legal obligations.
• Your consent, where required by law for a specific activity.
• For certain health-related or other special-category data, your explicit consent or, where permitted, our need to protect someone's vital interests when that person is unable to give consent.

5. When we share information

We do not disclose personal information except as described in this policy, at your direction, or as otherwise permitted or required by law.

We may share personal information with:

• Service providers and contractors that help us host infrastructure, store data, process payments, send communications, provide analytics or AI services, support customers, secure systems, or deliver related business functions.
• Partners, resellers, implementation providers, monitoring providers, or customer organizations that sponsor, deploy, support, or administer the service for you.
• Other users you authorize, such as family members, caregivers, household members, or trusted contacts in your care circle.
• Third-party integrations or devices you choose to connect, such as voice assistants or other connected-home platforms.
• Professional advisors, insurers, auditors, and transaction counterparties in connection with financing, mergers, acquisitions, reorganizations, or asset transfers.
• Law enforcement, regulators, courts, or others when we believe disclosure is necessary to comply with law, protect rights or safety, investigate fraud or abuse, or enforce our terms.

We require service providers and contractors that handle personal information on our behalf to protect it and to use it only to provide services to us.

De-identified and aggregated data

We may use and disclose de-identified or aggregated information that does not reasonably identify you for analytics, benchmarking, research, product development, and business reporting.

6. Cookies, analytics, and similar tools

Our websites and apps use cookies, SDKs, logs, and similar technologies to help the sites function, keep you signed in, measure traffic, and protect against attacks.

We group these tools into a few categories:

• Essential technologies help core site and app functions work, such as security, load balancing, and session management. For example, we use Cloudflare in front of our sites to help protect against malicious traffic and to improve delivery. Cloudflare may set its own cookies or similar identifiers for these purposes.
• Analytics technologies help us understand how visitors use our sites so we can improve content and features. We currently use Google Analytics 4 (GA4) as a first-party analytics service. We configure GA4 so that it is used only for our own analytics, not for Google Ads or cross-site ad tracking.
• Embedded media and integrations may set their own technologies when you choose to interact with them. For example, our sites may include Vimeo video players. We load Vimeo players only when you click to play a video and, when possible, we enable Vimeo's "do not track" setting so that Vimeo limits tracking.

We do not use third-party advertising or cross-site behavioral tracking cookies on our consumer site.

You can usually control cookies through your browser settings. Some features may not function properly if you disable certain technologies.

Lead forms and page-journey information

When you submit a lead or contact form on our websites, we may also send a short, first-party summary of recent pages you viewed on our site, how long you spent on them, and how you arrived at the site, along with the information you type into the form. We use this to better understand and respond to your request. We do not join this summary to Google Analytics client identifiers.

Consent banners

Under current US state privacy laws, our use of GA4 only for first-party analytics does not require a prior opt-in cookie banner. For US visitors, we rely on clear disclosures in this policy and other notices, and we honor applicable privacy choices such as opt-out preference signals where required.

For visitors in the European Economic Area, the United Kingdom, and similar jurisdictions, analytics cookies and similar tools are generally treated as non-essential. For those visitors, we show a consent banner and only set non-essential analytics cookies like GA4 if you choose to accept them.

Our own sites do not currently change behavior based on browser "Do Not Track" signals, but where state privacy law treats a browser-based opt-out preference signal such as Global Privacy Control as a valid opt-out of certain activities, we will honor that signal for covered interactions.

7. Retention

We keep personal information for as long as reasonably necessary to:

• Provide the service.
• Comply with law.
• Resolve disputes.
• Enforce agreements.
• Maintain security and business continuity.

Retention periods vary depending on the type of information, the product configuration, the applicable contract, and legal obligations.

We may delete or de-identify information when it is no longer needed for these purposes. We may also retain backup copies and archival records for limited periods as part of normal business continuity and legal compliance practices.

8. Security

We use administrative, technical, and physical safeguards designed to protect personal information. No system is perfectly secure, however, and we cannot guarantee that unauthorized access, disclosure, alteration, or destruction will never occur.

You also play an important role in security. Please use strong passwords, protect your devices, keep software updated, and notify us promptly if you suspect unauthorized access to your account.

9. International transfers

Care Daily may process information in the United States and other countries where we or our service providers operate. Data-protection laws in those places may differ from the laws where you live.

When required by law, we use appropriate safeguards for cross-border transfers, such as contractual protections or other approved transfer mechanisms.

10. Your rights and choices

Depending on where you live, you may have the right to request access to, correction of, deletion of, or a copy of your personal information. You may also have the right to object to certain processing, withdraw consent where processing is based on consent, appeal a denial of a request, or opt out of certain uses such as targeted advertising, sale, sharing, or certain profiling activities where those concepts apply under law.

These rights can apply to people with accounts and to people who are monitored in a location but do not have their own account.

Rights summary

Additional rights and choices

How to exercise rights

You can submit privacy requests by emailing hello@caredaily.ai. Where we make available a webform, in-app workflow, or account setting for a request, you may use that method instead. Because Care Daily operates primarily online, our designated request methods may be electronic.

You do not need an account to make a request. For example, if your information is captured because you live in or visit a monitored home that uses Care Daily, you may still contact us to ask about or exercise rights over that information.

We may need to verify your identity before acting on a request. If we process your information on behalf of a customer or partner that controls your account or deployment, we may direct your request to that organization or ask you to contact them directly, and we will support them in responding as the law and our contracts require.

California notice

California residents may have rights to know, access, correct, delete, and obtain information about disclosures of personal information, as well as rights to opt out of sale or sharing and to limit certain uses of sensitive personal information where applicable.

We may collect personal information that California law treats as "sensitive," such as inferences about your health, disability, or care needs from device and sensor data. We use this sensitive information only as reasonably necessary to provide the services you or your sponsoring organization request, to maintain safety and security, to prevent fraud, to comply with law, and for other limited purposes permitted by California law, and not to build profiles for unrelated targeted advertising.

If we ever engage in "sale," "sharing," or targeted advertising in a way that triggers opt-out rights under applicable law, we will process valid opt-out requests, including browser-based opt-out preference signals such as Global Privacy Control, where required by law for the relevant interaction.

We will not discriminate against you for exercising rights granted by law.

11. Washington consumer health data notice

This section supplements the rest of this Privacy Policy for Washington residents and other people whose information is covered by the Washington My Health My Data Act. It describes how we handle consumer health data as defined by that law.

Unless we obtain separate consent or another legal basis applies, we collect and share consumer health data only to the extent reasonably necessary to provide a product or service requested by you or by a customer organization that sponsors your deployment, or to perform operations that are closely related to that service such as security, troubleshooting, and compliance.

We do not sell consumer health data.

For any collection or sharing of consumer health data that is not reasonably necessary for these purposes, we will present a clear, standalone consent screen that explains what data will be collected or shared, for what purpose, and with whom. We will not proceed with that activity unless you agree. You may withdraw that consent at any time using in-app settings where available or by contacting us, and we will stop the relevant collection or sharing except where we must keep or use information for legal, security, or fraud-prevention reasons.

Categories of consumer health data collected

Depending on the product and features you use, this may include:

• Device-generated signals and inferences about activity, mobility, presence or occupancy, sleep or rest patterns, falls or fall-related events, bathroom patterns, hydration patterns, wellness or safety indicators, and environmental events tied to a person's living conditions.
• Caregiving status, such as whether someone appears to be providing or receiving support.
• Notes or comments about care needs, health concerns, or support services you enter into the service.
• Health-related communications or content you choose to enable, such as tagged messages or check-ins about symptoms or wellbeing.

Categories of sources

We collect this information from:

• You and other authorized users.
• Care Daily devices and software.
• Compatible third-party devices and integrations you choose to connect.
• Customer organizations or partners that sponsor or administer your deployment.
• Support, onboarding, and customer-service interactions.

Categories of consumer health data we may share

We may share identifiers and account context needed to route information, plus device-generated and inferred wellness, safety, and caregiving information, when needed to:

• Provide, maintain, and troubleshoot the service.
• Coordinate with a customer organization that sponsors your deployment.
• Support optional escalation, monitoring, or call-center services where offered.
• Comply with law or protect rights and safety.

Categories of third parties and specific affiliates

Categories of third parties may include:

• Cloud hosting, storage, customer-support, communications, security, analytics, AI, implementation, monitoring, and payment providers.
• Customer organizations that sponsor or administer the service for you.
• Device and integration partners you choose to connect.
• Professional advisors and transaction counterparties.
• Regulators, law enforcement, or others when disclosure is legally required.

We do not currently identify any specific corporate affiliates that independently receive consumer health data in the ordinary course.

How to exercise Washington rights

You may have rights to confirm whether we collect, share, or sell your consumer health data and to access that data; withdraw consent for certain collection or sharing; request deletion; and appeal a refusal.

Submit a request by emailing hello@caredaily.ai. We may verify identity using commercially reasonable methods. We do not require you to create a new account to exercise these rights, though we may ask you to use an existing account if you have one.

If we deny a Washington consumer health data request, you may appeal by replying to the denial notice or by emailing hello@caredaily.ai with the subject line "Privacy Appeal." If we deny the appeal, we will provide the result in writing and, where applicable, information about how to contact the Washington Attorney General.

12. Children

The consumer-facing Care Daily service is not directed to children under 13, and we do not knowingly allow children under 13 to create their own accounts.

Parents, legal guardians, or other authorized adults may use the service to monitor or support children in their household or care. By doing so, they confirm that they have any permissions or consents required by law and by their relationship with the child.

In some places, including parts of the United States and the European Union, people under 16 have additional privacy protections. When required, we will seek consent from a parent or legal guardian before collecting certain information or using it for certain purposes, such as targeted advertising, from users under 16.

If you believe a child has provided personal information to us directly without appropriate authorization, contact us and we will review and address the situation, which may include deleting the information where required.

13. Changes to this policy

We may update this Privacy Policy from time to time. If we do, we will post the updated version and revise the "Last updated" date above. The updated policy becomes effective when posted unless a later date is stated.

If a change would materially reduce your privacy rights, we will provide additional notice where required by law, which may include email, in-app notice, or a prominent notice on our websites. You should review the current policy periodically.

14. Contact us

For privacy questions or requests, email hello@caredaily.ai.

You may also write to:

People Power Company d/b/a Care Daily

Attn: Privacy

12423 NE 137th PL

Kirkland, WA 98034 USA