Privacy

Your research workspace stays separate from product analytics.

This notice explains what Carealy stores, which services process it, and what happens when an account is deleted.

Effective August 10, 2026 · Private MVP

Information Carealy handles

Account information includes your Clerk identity, email, display name, role, specialty, and province or territory.

Workspace information includes your questions, answer threads, citations, saved insights, casebooks, feedback categories, and the source versions attached to that work.

Operational information includes bounded identifiers, configuration states, latency, token counts, estimated model cost, and product events needed to operate and improve Carealy.

Where information is processed

Clerk authenticates your account. Convex stores the application workspace, source library, authorization records, and agent history.

OpenAI processes the question and retrieved source context needed to generate an answer. Airtable is limited to editorial control for source content and does not store physician workspace activity.

PostHog receives structured operational events only. Carealy does not send raw questions, answers, source passages, citation text, or free-text feedback to PostHog. Session recording and autocapture are disabled.

Retention and account deletion

Carealy retains active workspace content for the lifetime of the account. You can request deletion from the Account page.

Deletion disables workspace access first and removes the associated profile, threads, answers, citations, insights, casebooks, feedback, and agent messages from the live application. Any deleted workspace content remaining in backups must expire no later than 30 days after deletion.

Carealy may retain a minimal Clerk subject and token identifier to honour the deletion and prevent an old authenticated identity from recreating the workspace. That marker does not contain your email, name, profile, questions, answers, or saved work.

Your choices

You can review your workspace in the product and delete your account from Account settings. To request access, correction, deletion assistance, or a privacy review, email support@carealy.com.

Security and changes

Carealy uses server-side authorization, bounded operator roles, source-version controls, and a research kill switch. No system can guarantee absolute security; if an incident affects your information, Carealy will investigate and notify affected users when required.

Material changes to this notice will be dated here before they take effect.