What we're building

Care Colab helps people coordinate care situations together. As we develop our platform, we're focused on:

• Keeping your information secure and private
• Building features that respect your privacy needs
• Storing data in Canada and following Canadian privacy best practices
• Giving you control over what you share and with whom
• Being transparent about how we handle your information

Canadian data storage

We know data privacy is important to the people who use Care Colab. That's why:

• Your Labs, documents, and conversations are stored on secure Canadian servers
• We follow Canadian privacy best practices in how we handle your information
• We're committed to maintaining Canadian data residency as we grow

Note: While in beta, when you use AI summaries or image text extraction features, that specific content is processed by Google's Gemini AI service. See the AI Features section below for details.

Sign-in and your account

Care Colab supports several ways to sign in, each with different privacy considerations:

• Google, Microsoft, and Apple sign-in - these providers authenticate you and share basic profile information (name and email) with Care Colab. We don't receive your passwords or payment information from them
• OTP sign-in - we send a one-time verification code to your email address
• Guest access - you can join a shared Lab without creating an account. Guest sessions are temporary and tied to your browser. Guests can upgrade to a full account at any time to preserve their access
• We store your profile name, avatar, and preferences to personalize your experience

AI features and data handling

Care Colab offers AI features to help generate summaries and organize information when you choose to use them.

• AI features such as summaries and image text extraction are only used when you choose to activate them
• We use Google Gemini behind the scenes to process the relevant content needed for those features
• Care Colab defines the structure and templates used for summaries; Gemini helps generate the output
• We do not use your Labs or conversations to train AI models
• Our paid Google setup is designed so your data is not used for training

Learn more about Google's data usage policies.

How we protect your information

We take security seriously and use industry-standard practices to protect your information.

• Secure connections (HTTPS/SSL) for all data transmission
• Secure authentication to protect your account
• Row-level security enforced at the database layer
• Sharing PINs are hashed with bcrypt and never stored in plain text
• Regular security updates and monitoring
• Access controls help ensure only authorized users can access shared information
• Labs are private by default, with PIN-protected sharing when you choose to share

You're in control

Your information belongs to you. With Care Colab, you can:

• Choose exactly what information you add to your Labs
• Control who can see and access your shared Labs with granular permissions
• Delete your account at any time - all Labs you own and their contents are permanently removed. In shared Labs where you're a collaborator, your contributions remain visible as "Deleted User"
• Keep Labs completely private or share them only with people you trust
• Ask us questions about how your data is used

Calendar subscriptions

You can subscribe to your Care Colab calendar from Apple Calendar, Google Calendar, Outlook, or any iCal-compatible app. Here's what to know:

• Your subscribe URL uses a unique token as its only credential - anyone with the URL can read your calendar data, so treat it like a password
• The feed includes calendar event details, notes, locations, and tasks with due dates
• You can revoke and regenerate your subscribe URL at any time from the Calendar settings
• Calendar subscription URLs are automatically deleted when you delete your account
• Lab owners can restrict collaborators from accessing a lab's calendar, which also disables the iCal feed for that lab