Overview
Plavo (“we,” “us”) provides a family care coordination application. This Privacy Policy explains what personal information we collect, how we use and share it, and the choices you have.
We are not a HIPAA covered entity or business associate. We treat medication schedules, care recipient information, and related data as sensitive personal information. This policy applies to users in the United States. We may update it from time to time; we will post changes in the app and at plavo.dev with a new effective date.
Information we collect
Account information: email address, display name, and authentication identifiers when you create an account or sign in (including identifiers from social login providers you choose).
Care circle information that you or invited members enter: care recipient names and profiles, medication names and schedules, dose confirmations, appointments, tasks, documents you upload, and other activity visible within your shared circle.
Device and service information: push notification tokens, app version, and technical logs needed to operate sync, security, and customer support.
How we use information
We use information to provide and maintain Plavo, including synchronizing care circles, delivering medication reminders you enable, processing subscriptions, and responding to support requests.
We use information to secure the service, prevent abuse, enforce access controls, and investigate security issues.
We do not sell personal information. We do not use medication or care data for advertising or marketing based on health information.
How we share information
With members of your care circle: people you invite can view information for that circle according to their role in the app.
With service providers that process data on our behalf under contract, such as cloud hosting and database services, authentication, push notification delivery, and payment or subscription management (including Apple, Google, and our subscription platform). These providers may use data only to perform services for us.
When required by law, legal process, or to protect the rights, safety, and security of users and the public.
Retention and deletion
We retain information while your account is active. If you delete your account in the app, we delete or de-identify associated cloud data within a reasonable period, typically within 90 days, except where limited retention is required for legal, security, or backup integrity purposes.
Security
We use encryption in transit (TLS), access controls, and application-level protections so users can access only their authorized care circles. No method of transmission or storage is completely secure. Please report security concerns using the contact below.
Your privacy rights
Depending on where you live, you may have the right to access, correct, delete, or export your personal information, or to opt out of certain processing. To make a request, email us at the address below. We will respond as required by applicable law.
Children
Plavo is designed for adults coordinating family care. Accounts are for users 18 years of age or older. A parent or guardian may create an account and invite family members according to the flows described in the app.
Breach notification
If we discover a security breach that affects your health-related personal information, we will notify you and regulators as required by applicable law, including the FTC Health Breach Notification Rule where it applies.
Contact
For privacy requests, account questions, or security reports, email support@plavo.dev.