Privacy Policy

This Privacy Policy explains how Harper Grace Solutions LLC ("we", "us", or "our"), the operator of SpinaCareSync, collects, uses, shares, and protects information when you use our website and application (the "Service"). SpinaCareSync helps families and care teams coordinate a child's care — appointments, specialist contacts, daily logs, and notes — in one shared place.

By using the Service, you agree to this policy. If you do not agree, please do not use the Service.

1. Who is responsible for your data

Harper Grace Solutions LLC, a limited liability company organized in the United States, is the operator of the Service and is responsible for the personal information described in this policy. You can reach us at any time through our Support page.

If a care organization (such as an agency or clinic) invited you to SpinaCareSync as part of their team, that organization may be the "business" responsible for the care data it manages, and we act as its service provider for that data. This policy still describes how the Service itself handles information.

2. Information we collect

• Account information. Your name, email address, password (stored only as a secure hash), profile photo, role within a household, and account preferences such as notification settings.
• Care data you enter. Appointments, specialist and clinic contact details, daily log entries, appointment notes, reminders, and related observations. Because of what the Service is for, this can include health-related information about a child. You choose what to enter; please only enter information you are authorized to share.
• Team and invitation data. The names, email addresses, and roles of people you invite to your household, and invitation status.
• Billing information. Your plan, subscription status, and renewal dates. Payment card details are collected and processed directly by our payment processor — we never see or store your full card number.
• Support communications. Messages you send through our Support page, ticket threads, and any replies.
• Technical data. Basic server logs (IP address, browser type, pages visited, timestamps) needed to operate, secure, and debug the Service.

3. How we use information

• To provide the Service: sync your calendar, directory, logs, and notes across your household team.
• To send appointment reminders and in-app notifications you have enabled.
• To process subscriptions and payments through our payment processor.
• To respond to support requests and communicate with you about your account.
• To keep the Service secure, prevent abuse, and fix problems.
• To meet legal obligations (for example, tax and accounting records for payments).

We do not sell your personal information, and we do not use your care data for advertising.

4. Who can see your care data

Care data is private to your household. It is visible only to the people a household invites — family members, caregivers, or care-organization staff — according to the role each person is given (for example, parents can edit while some roles are view-only). We do not make your care data public, and other households cannot see it.

5. Service providers we use

We share information with a small number of providers strictly so they can operate the Service for us:

• Cloud hosting, database, authentication, and email delivery — our cloud platform provider stores the application's data and delivers account and notification emails on our behalf.
• Payment processing — our payment processor handles card payments, subscription billing, and refunds under its own privacy policy.

These providers may only process your information to provide their services to us and must protect it appropriately.

6. Children's privacy

SpinaCareSync accounts are for adults (18 or older). Information about a child — such as appointments, care tasks, and observations — is entered and managed by that child's parent, guardian, or authorized care team. We do not knowingly collect accounts or direct submissions from children. If you believe a child has created an account, contact us through the Support page and we will remove it.

7. Cookies

We use a small number of strictly necessary cookies for sign-in and security. See our Cookie Policy for details.

8. How long we keep information

We keep your information while your account is active. When you delete your account from the Account page, we delete your personal data; if you are the last member of a household, that household's care data is permanently removed too. Limited records (such as payment transactions) may be kept longer where the law requires it, and encrypted backups may take a short additional period to cycle out.

9. How we protect information

We use encryption in transit, row-level access controls so households can only reach their own data, hashed passwords, and role-based permissions inside the Service. No method of transmission or storage is perfectly secure, but we work to protect your information and will notify affected users of a data breach where the law requires it.

10. Your rights and choices

Depending on the U.S. state you live in (including California under the CCPA/CPRA and states with similar laws), you may have the right to:

• Know and access the personal information we hold about you.
• Correct inaccurate information (you can edit most of it in your Account page).
• Delete your personal information (you can delete your account in the app).
• Receive a portable copy of your information.
• Not be discriminated against for exercising these rights.

We do not sell or "share" personal information for cross-context behavioral advertising, so there is no sale/share to opt out of. To exercise any right, contact us through the Support page. We may need to verify your identity before acting on a request.

11. Users outside the United States

The Service is operated from the United States, and your information is processed there. If you use the Service from another country, you understand that your information will be transferred to and processed in the United States, which may have different data-protection laws than your country.

12. Changes to this policy

If we change this policy, we will update the "Last updated" date above and, for significant changes, notify you in the app or by email. The version in force is always available at this page.

13. Contact

Questions, requests, or concerns about privacy: please use our Support page. We aim to respond within 1–2 business days.