Draft — pending review. This policy takes effect once the bracketed values are completed and reviewed.
Privacy Policy
Effective: [Effective date — fill at adoption] · Applies to the Rhizo platform, including the Rhizo Care and Rhizo Family mobile apps and the web app at app.rhizo.care.
Who we are
Rhizo ([Legal entity name, e.g. Rhizo LLC]) provides scheduling, care documentation, messaging, and billing software to home care agencies. You use Rhizo because a home care agency — your employer, or the agency caring for you or your family member — invited you.
Health information in Rhizo belongs to the agency’s care relationship with its clients. The agency is the HIPAA “covered entity”; Rhizo processes that information on the agency’s behalf under a business associate agreement. The agency’s own Notice of Privacy Practices governs how client health information is used and disclosed, and requests to exercise HIPAA rights (access, amendment, an accounting of disclosures) go to the agency.
What the apps collect
- Account information — your name, email, phone number, and sign-in credentials, so the agency can give you access.
- Care and schedule information — client profiles, care plans, visit schedules, care logs, incident reports, and messages, entered by the agency’s office and caregivers in the course of providing care. This is health information.
- Voice notes — caregivers record an end-of-visit voice note using the microphone, only when they tap record.
- Photos — receipt photos for expense reimbursement, using the camera only when you choose to capture or attach one.
- Billing information — for clients and the family members who pay: invoices and payment records. Card and bank details are collected and stored by our payment processor (Stripe), not by Rhizo; Rhizo keeps only a display-safe summary (for example, card brand and last four digits).
- Device push tokens — so notifications can reach your device if you turn them on.
- Technical logs — basic records of app activity and errors, with personal and health details removed by design.
What we do not collect: the apps do not track your device’s GPS location, do not show advertising, do not use third-party advertising or analytics trackers, and we never sell personal information.
How information is used
Only to operate the service for your agency: scheduling visits, documenting care, coordinating between the office, caregivers, and families, producing invoices and payroll, keeping the service secure (including access logs), and meeting legal obligations. Every access to health information is recorded in an audit trail.
Who information is shared with
Your agency’s authorized staff see information according to their role — caregivers see only the clients they are assigned to. Family portal members see only their own client’s information, as enabled by the agency.
We use a small set of service providers to run Rhizo, each limited to what their job requires: Amazon Web Services (hosting and storage), Clerk (sign-in), Google Firebase (delivering push notifications — notification content is deliberately generic and never includes health details), Stripe (payment processing — no health information), and Anthropic (generating care plan summaries, under a business associate agreement). Providers that handle health information do so under HIPAA business associate agreements. We do not share information with anyone else except as required by law.
Security
Information is encrypted in transit and at rest. Access is role-based and every access to health information is logged. Files like voice notes and receipts are served only through short-lived signed links. No system is perfectly secure, but safeguarding this information is the core design constraint of the product.
Retention and deleting your account
Care records are retained according to the agency’s policy and healthcare record-keeping law (typically at least six years), then deleted.
You can delete your own account inside the apps: Rhizo Care: Home → Account → Delete account. Rhizo Family: More → Account → Delete account. Deleting your account removes your sign-in and personal account data. Care records the agency is legally required to keep (for example, visit documentation) are retained by the agency even after your account is deleted.
Children
Rhizo is a work and family-coordination tool for adults. It is not directed at children, and we do not knowingly collect information from children.
Changes and contact
If this policy changes materially, we will update this page and note the new effective date; the agency will be told first. Questions about this policy: [support email, e.g. support@rhizo.care], or by mail at [mailing address]. Questions about how your health information is used in your care: contact your agency’s office — see our support page.