Privacy Policy

This Privacy Policy explains how LynCare, LLC ("LynCare," "we," "us," or "our") collects, uses, shares, and protects information when you use the LynCare mobile app and the LynCare website (together, the "Services").

LynCare is a care-coordination app for self-directed Medicaid care in Idaho. It is used by participants, their family members, the caregivers they hire, and the Care Managers who oversee a care circle. Because the app records care activity — medications given, shifts worked, notes, and tasks — it handles health information. We take that seriously, and this policy is written to be read by ordinary people, not lawyers.

If you have questions about this policy or your data, email us at privacy@lyncare.net.

Summary of key points

This summary highlights the main points. You can read more in the full sections below.

• What we collect. Your name, email, phone number, the password you set, the care records you create in the app (medication logs, shift records, notes, tasks, health events), and — on released app versions — basic crash-diagnostic information if the app crashes. We collect what you give us and what the app needs to function. See What we collect.
• Sensitive (health) information. The care records in the app are health information about the participant receiving care. We process this only to deliver the care-coordination service. See What we collect and Sensitive information.
• We do not sell your data, run ads, or track you across other apps and websites. LynCare contains no advertising network and no analytics SDK, and it does not collect your precise location. See How we share information and Do-Not-Track.
• Who we share with. The service providers that run the app on our behalf (such as Google Firebase, our email-delivery provider, and — for the optional Allowables search — our AI provider Anthropic), and the other members of your care circle, who can see records according to their role and the visibility you choose. See How we share information.
• How long we keep it. Account information lasts as long as your account does. Care records are the participant's medical history and are kept after you leave or delete your account. A care record that never reaches LynCare from a phone is removed from that phone 30 days after it was recorded. See How long we keep information.
• Your rights. You can review or update your profile in the app, delete your account, and — depending on your state — request access, correction, or deletion of your personal information. See Your privacy rights and How to review, update, or delete your data.

Table of contents

1. What information do we collect?
2. How do we process your information?
3. When and with whom do we share your information?
4. How do we handle social logins?
5. How long do we keep your information?
6. How do we keep your information safe?
7. Do we collect information from minors?
8. What are your privacy rights?
9. Controls for Do-Not-Track features
10. Do U.S. residents have specific privacy rights?
11. Do we make updates to this policy?
12. How can you contact us about this policy?
13. How can you review, update, or delete your data?

1. What information do we collect?

Information you give us

When you create an account and use LynCare, you provide:

• Account and contact details — your name (display name and short name), email address, phone number, and the password you set. If you sign in through Apple or Google, we receive the basic profile information those services return (such as your name and email).
• Care records you create — depending on your role, this includes medication administration records (scheduled and as-needed), shift records (clock in/out and shift notes), task completions, daily care notes, health events, and work-communication messages. Some of these records are health information about the participant.
• Content you choose to attach — for example, a photo or screenshot you add to a note or to an in-app feedback message.
• Feedback you send us — if you use the in-app feedback form, we receive the message you write, the email address tied to your account, and basic device details (such as device model, operating-system version, and app version) so we can reproduce and fix the problem.

Information collected automatically

• Push-notification tokens — so the app can send you notifications (for example, that a medication is due). You can turn off notifications in your device settings.
• Crash diagnostics (released app versions only) — if the app crashes, we use Firebase Crashlytics to record what went wrong: a crash trace (the technical record of where the code failed), your device model, operating-system version, and the app version. This is collected only on the public, released builds of the app, and only when a crash occurs. We use it to find and fix bugs. It is not linked to advertising and is not used to track you.
• Device attestation (App Check) — the app uses Google App Check (Play Integrity on Android, App Attest on iOS) to confirm that requests to our servers come from a genuine, unmodified copy of the LynCare app rather than a script or a tampered app. This is a security and anti-abuse measure. It produces a short-lived attestation token; it is not personal information and does not identify you.

Sensitive information

The care records in LynCare describe the health and care of a participant — medications, health events, and care notes. We treat this as sensitive information and process it only to provide the care-coordination service to the care circle you belong to. We do not use it for advertising or sell it.

Information from third parties (sign-in providers)

If you choose to sign in with Apple or Google, that provider shares limited profile information with us — typically your name and email address — so we can create or match your LynCare account. We do not receive your password for those accounts. See How do we handle social logins?

What we do not collect

LynCare does not collect your precise geolocation, does not contain any advertising network, does not include a third-party analytics SDK, and does not track you across other companies' apps or websites.

What we collect and how we use it — at a glance

This table summarizes the main categories of information, why we use them, and how long they stay. It is a plain-language overview; the sections that follow give the detail.

What	Why we use it	How long
Name, email, phone	Create and secure your account; identify you to your care circle; contact you about your account	While your account exists; your name stays on records you authored (see below)
Password / sign-in credentials	Authenticate you and protect your account	Deleted when you delete your account
Care & health records (medications, shifts, notes, tasks, health events)	Deliver the care-coordination service; maintain the participant's care history	Permanent — these are the participant's property and are kept as part of their medical history (see retention)
Care records waiting on a phone to be sent	Keep a record made while the phone was offline until LynCare receives it	Cleared from the phone once LynCare confirms it; if LynCare never does, removed from the phone 30 days after it was recorded (see records not yet sent)
Photos / attachments you add	Support a note, record, or feedback message	With the record they belong to
Push-notification tokens	Send you in-app notifications	Until you sign out, remove the app, or delete your account
In-app feedback (your email, message, device details)	Diagnose and respond to the problem you reported	As long as needed to resolve and for our support records
Crash diagnostics (Crashlytics — released builds only)	Find and fix crashes	Retained by the diagnostics provider for a limited period (typically ~90 days)
App Check attestation token	Confirm requests come from the genuine app (security / anti-abuse)	Short-lived; not stored as personal data

2. How do we process your information?

We process your information to run the Services and keep them safe. Specifically, we use it to:

• Create and manage your account and let you sign in and stay signed in.
• Deliver the care-coordination service — record and display medications, shifts, notes, tasks, and health events to the right members of a care circle.
• Enable communication between members of a care circle (for example, work-communication messages and shift notes).
• Send service messages — account emails such as verification, password reset, and email-change confirmations, and in-app push notifications such as medication reminders.
• Provide customer support and respond to your in-app feedback and your messages to us.
• Keep the Services secure — verify that requests come from the genuine app (App Check), and detect, prevent, and address fraud, abuse, and technical problems.
• Diagnose and fix problems — use crash diagnostics to identify and repair bugs and to improve reliability.
• Comply with legal obligations — including health-record retention requirements that apply to care records.

We do not use your information for behavioral advertising, and we do not profile you to make decisions that produce legal or similarly significant effects.

3. When and with whom do we share your information?

We share information only in the situations below. We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

Other members of your care circle

LynCare is collaborative. The records you create are visible to other members of the same care circle according to their role and the visibility you choose for a given record (for example, a note marked private or limited to specific viewers). Your name appears on records you author so the care team knows who did what.

Service providers who run the Services for us

We use trusted third parties to operate the app. They process information only to provide their service to us, under their own terms and security commitments:

• Google Firebase / Google Cloud — hosting, database (Firestore), authentication, file storage, push notifications, App Check device attestation, and Crashlytics crash diagnostics.
• Anthropic, PBC — AI processing for the optional "Allowables" search feature (beta). When you run an Allowables search or sweep, the relevant care-record excerpts (with caregiver names replaced by tokens such as "Caregiver A") are processed by Anthropic's Claude API as our service provider to generate suggestions. Anthropic does not use this data to train its models, and we have requested Zero Data Retention so the data is not stored after processing.
• Resend — delivery of account emails (such as verification, password-reset, and email-change messages).
• Apple and Google sign-in — if you choose to sign in with Apple or Google, to authenticate you.

Legal and safety

We may disclose information if required by law, regulation, legal process, or governmental request, or where we believe disclosure is necessary to protect the rights, property, or safety of LynCare, our users, or others.

Business transfers

If LynCare is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction. We will note any such change of ownership or control of your personal information in this policy.

4. How do we handle social logins?

LynCare offers the option to sign in using your Apple or Google account. If you do, the provider gives us basic profile information — generally your name and email address — to create or match your LynCare account. We use that information only as described in this policy. We do not receive your password for those accounts. Your use of Apple or Google sign-in is also governed by that provider's own privacy policy.

5. How long do we keep your information?

Account information

We keep your account information for as long as your account is active. When you delete your account, we remove your sign-in credentials, your personal profile information, your push-notification tokens, your access to care circles, and your in-app settings.

Care and health records — kept after you leave

Care records are different. The medications, shift records, notes, tasks, and health events recorded in a care circle are part of the participant's medical history and belong to the participant. They are not deleted when you leave a care circle or delete your account, and your name remains on the records you authored as the original author. This is how medical records work — authorship is part of the record and cannot be removed. These records are retained for the period required by applicable law and self-directed Medicaid program standards, generally at least six years, and sometimes longer.

When you remove your account, the app shows you the following before you confirm. We reproduce it here word-for-word so there are no surprises:

For more detail on what is deleted and what is retained, see our Account Deletion page.

Records not yet sent from a phone

When someone records care while their phone can't reach LynCare, the app keeps the record on that phone, encrypted, until LynCare confirms it has received it. Until then the app shows it as Recorded on this device. Once LynCare confirms it, the phone's copy is cleared, and the record is kept as described above.

A record LynCare never confirms is removed from the phone 30 days after it was recorded. The app warns the person who recorded it a week before, and afterwards tells them how many records were removed. This happens on the phone itself, whether or not anyone is signed in. Signing out or removing an account can shorten the 30 days; apart from a wrong clock (below), nothing extends it. The phone's copy is encrypted with a key that never leaves that phone, and it is kept out of iPhone backups (a backup made before this change can still hold an encrypted copy until that backup is replaced; Android does not back up the app's data). Uninstalling the app, or losing or erasing the phone, before a record is sent also loses that record.

If the phone's clock is set wrong, records can be removed early or kept longer. Early: by up to how far behind the clock was when the record was made, plus how far ahead it is when the phone checks (at most about 3 hours ahead when the phone is signed in and reaches LynCare). Longer: if the clock is behind when the phone checks, by up to how far behind it is; and a record made while the clock was set ahead is kept until 30 days after the phone next checks while signed in and reaching LynCare (or, if that never happens, until the phone's clock reaches the date it was stamped plus 30 days), plus any later lateness from a clock that is then behind. Phones set their clocks from the network, so this needs a clock changed by hand or one that lost its time. The person who recorded a removed record is still told (except after an account is removed).

Record exports

A Care Manager or admin can export the participant's records they administer — and the participant can export their own — as an Excel, CSV, or print-ready PDF file, for example for a records request or reassessment. This is a read-only export of records the exporter already has lawful access to; it does not change what we retain. Once a file is exported and shared, where it goes is the exporter's responsibility.

After a care circle closes, the participant's download also includes notes that staff kept among themselves (Staff notes). Notes limited to the Care Manager or admins are never included.

6. How do we keep your information safe?

We use technical and organizational measures designed to protect your information, including encryption in transit, authenticated access, role-based and rule-based access controls on the database, and device attestation (App Check) to block requests that don't come from the genuine app. No method of transmission or storage is 100% secure, however, so we cannot guarantee absolute security. You use the Services and transmit information at your own risk, and you should access the Services within a secure environment.

7. Do we collect information from minors?

The Services are not directed to children, and we do not knowingly collect personal information from anyone under 18. The app is intended for use by adults (caregivers, family members, participants, and Care Managers); you must be at least 18 to create an account. Note that a participant receiving care may be a minor — but their account and records are created and managed by an adult member of the care circle, not by the minor. If you believe a child under 18 has provided us personal information, contact us at privacy@lyncare.net and we will take appropriate steps to address it.

8. What are your privacy rights?

You have rights over your information:

• Withdraw consent. You can withdraw consent at any time by deleting your account. Withdrawing consent does not affect processing that already took place, and it does not delete the care records you authored, which remain part of the participant's medical history (see retention).
• Review and update your information. You can review and change your profile information in the app.
• Delete your account. You can delete your account from within the app (Settings → Danger Zone → Remove Account), or by emailing us.

To exercise any right, or if you have questions, contact privacy@lyncare.net. Depending on your state, you may have additional rights — see Do U.S. residents have specific privacy rights?

9. Controls for Do-Not-Track features

Most browsers and some mobile systems include a "Do-Not-Track" (DNT) setting. No uniform technology standard for recognizing and honoring DNT signals has been finalized. Because LynCare does not track you across other apps or websites and contains no advertising or third-party analytics SDK, there is nothing for a DNT signal to change. If a standard is adopted in the future that we must follow, we will update this policy.

10. Do United States residents have specific privacy rights?

If you are a resident of certain U.S. states, you may have specific rights regarding your personal information under your state's privacy law. These states include California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia.

Categories of information

Depending on the law, we may collect the following categories: identifiers (such as name, email, phone number, and account identifiers); customer records (such as contact details); internet or app-activity information (such as crash diagnostics on released builds); and health/medical information (the care records in the app, which is sensitive information). We do not collect precise geolocation, biometric information, or information used for advertising, and we do not sell personal information or share it for targeted advertising.

Your rights

Subject to your state's law and to exceptions (including for health and medical records that must be retained), you may have the right to:

• Know / access what personal information we have collected and how we use and share it;
• Correct inaccurate personal information;
• Delete personal information we collected from you;
• Obtain a copy of personal information you previously shared with us;
• Opt out of the sale of personal information or targeted-advertising processing (note: we do not sell personal information or use it for targeted advertising, so there is nothing to opt out of);
• Non-discrimination for exercising your rights;
• Limit the use of sensitive personal information, where your state's law provides this right. (We use sensitive care/health information only to provide the Services, not for advertising or sale.)

How to exercise these rights, verification, and appeals

To exercise any of these rights, email privacy@lyncare.net. We will verify your request by confirming that the request comes from the account holder or an authorized agent — typically by matching the email address on your account — and may ask for additional information if we cannot otherwise verify your identity. If we decline a request, you may appeal by replying to our response; if you have concerns about the outcome, you may contact your state attorney general.

California "Shine the Light"

California Civil Code Section 1798.83 permits California residents to request information about our disclosure of personal information to third parties for those third parties' direct-marketing purposes. We do not share personal information with third parties for their direct marketing, so there is nothing to disclose. California residents may still contact us at privacy@lyncare.net.

11. Do we make updates to this policy?

Yes. We may update this Privacy Policy from time to time. The updated version is indicated by the "Last updated" date at the top of this page. If we make material changes, we will take steps to notify you, such as by posting a prominent notice or notifying you directly through the app. We encourage you to review this policy periodically.

12. How can you contact us about this policy?

If you have questions or comments about this policy, email us at privacy@lyncare.net.

LynCare, LLC
Idaho, United States

13. How can you review, update, or delete the data we collect from you?

You can review and update your profile information directly in the app. To delete your account, use Settings → Danger Zone → Remove Account in the app, or follow the steps on our Account Deletion page. Remember that deleting your account removes your login, profile, push tokens, circle access, and settings, but does not delete the care records you authored, which remain part of the participant's medical history.

To request access to, correction of, or deletion of personal information we hold about you — to the extent those rights apply and are not limited by record-retention law — email privacy@lyncare.net.