01
Who this covers, and who holds your record
Cairava provides software to hospitals. When a hospital uses Cairava to run a transition program, the hospital holds your medical record and Cairava handles information on its behalf under a written agreement. In the language of United States health-privacy law, the hospital is the covered entity and Cairava is its business associate.
This matters for a practical reason: rights you have over your health information — seeing it, correcting it, asking who it was disclosed to — are exercised through the hospital, not through us. If you ask us directly, we will pass the request to the hospital and tell you we have.
This policy also covers the cairava.com website, which anyone may visit without being in a program.
02
What we collect
- Information the hospital gives us about your discharge: your name, contact details, the plan, your medicines, and your follow-up appointments.
- What you tell the program: your check-in answers, your weight when you send it, and anything you write or say to your care team through Cairava.
- Records of messages: which messages were sent, when, whether they were delivered, and whether you replied.
- Basic technical information from the website and app, such as device type and pages visited.
If you fill in the request form on this website, we collect what you enter into it — your name, your work email, your organization, and, if you choose to provide them, your phone number, your role, your EHR system, your hospital's bed count, and the focus area you want to explore. We also record whether you ticked the box asking for email updates.
Ticking that box authorizes us to send you occasional updates about Cairava by email, through our email service providers. We store your choice and when you made it. You can withdraw at any time using the unsubscribe link in any of those emails. If you leave the box unticked, we send you no marketing email — only the follow-up to the request you made.
03
Why we collect it
To run the program: to send you the right prompts at the right time, to show your care team what you reported, and to make sure something you raised reaches a person who can act on it. We also use information in aggregate to measure whether the program is working and to improve it.
04
Text messaging
Your mobile number and the fact that you opted in to text messages are used only to deliver this program. We do not sell them. We do not share them with third parties or affiliates for marketing purposes. No mobile opt-in information is shared with anyone for any purpose other than sending you the program's messages.
Text messages travel over the ordinary mobile network and are not encrypted end to end. Because of that, program messages are written to be brief and non-specific — a prompt asks you to check in; it does not restate your diagnosis or your medicines. Detail belongs behind a sign-in.
We use a messaging provider to deliver texts. That provider handles your number and message content under a written agreement that restricts what it may do with them. Your mobile carrier also handles the message, on its own terms.
The messaging program's own terms — frequency, HELP, STOP — are on the SMS page.
05
Who else sees it
- Your care team at the hospital. This is the point of the program.
- A caregiver you have named, and only the information you agreed they should receive.
- Service providers that host the software or deliver messages, under written agreements that limit them to working for us.
- Anyone the law requires, such as in response to a valid legal demand.
We do not sell personal information, and we do not use it for advertising.
06
Automated processing
Cairava uses software, including language models, to summarize what you wrote, to translate it, and to sort it for the care team. It does not diagnose you, does not decide what treatment you should have, and does not close a clinical concern. Rules approved by the hospital decide what gets escalated, and a licensed person makes the clinical decision.
07
How long we keep it
Health information is kept for as long as the hospital's agreement with us requires, and then returned or destroyed according to that agreement. Records of what happened in the program — that a message was sent, that a concern was raised and resolved — are kept as an audit trail and are not edited after the fact.
Information from the website request form is kept until it is no longer needed for the conversation you started. If you asked for email updates, we keep your email address for that purpose until you unsubscribe.
08
How it is protected
- Information is encrypted when stored and when traveling between systems.
- Each part of the system receives only what its narrow role requires.
- Names, symptoms, medicines, measurements, appointments, free text, and documents are excluded from application logs.
- Access is limited to people who need it, and access to a patient record is itself recorded.
No system is perfectly secure, and we do not claim otherwise. Security controls for any particular hospital deployment are agreed with that hospital.
09
The iPhone app beta (TestFlight)
We are testing the Cairava iPhone app with volunteers through Apple's TestFlight. Testers play a practice patient: a made-up person with made-up medicines, weights and appointments. The beta is not a hospital program and is not medical care. Please never enter your own health information. If you ever feel unwell yourself, call 911 or your own doctor.
When you choose a practice patient, we create a practice record with those made-up details and a random account on our test system, with no name or email attached. What you type or tap in the check-in is stored with that practice record, so that we can see whether the app recorded it correctly.
You can also talk to the beta app instead of typing. Talking is optional. While the voice screen is open, the microphone is on: what you say is sent to OpenAI, which turns it into text, and that text is stored with your practice record, just like typed answers. Newer versions of the beta app (build 22 and later) also keep a recording of what the microphone picked up. We keep it on our test system for 90 days so the Cairava team can check that the app heard you correctly, and then we delete it. A recording can include background sound, so talk somewhere private. We use recordings only to check and improve how well the app hears people. We do not use them to identify you or to make a voiceprint, we do not publish them, and we do not use them for advertising. Before the first recording, the app asks you to agree; you can always type instead. Say only what your practice patient would say.
The beta app also records how it is used: which screens were opened, which buttons were tapped (by a fixed button name, never by what you typed or chose), how long things took, whether a check-in was started or finished, error types, and the app version. These usage records:
- never contain anything you typed or said, your answers, weights or other health details, your name, email, phone number, or device or advertising identifiers;
- are tagged only with a random number the app creates, which stays the same until the app is deleted;
- are not linked to your practice record or account, and record times to the minute;
- are kept without your IP address.
Apple runs TestFlight. Apple shares with us the crash reports, basic usage figures and any feedback or screenshots you choose to send through TestFlight; Apple's own privacy policy covers what Apple collects. If you signed up for the beta on this website, we keep the name and email you gave so that we can invite you and contact you about the beta.
At the end of the beta, practice records are retired so that no app can reach them, and usage records are deleted. Voice recordings are deleted after 90 days. We delete them sooner if the beta ends or if you ask us to. None of this is used for advertising or sold.
10
Children
The program is for adults. Cairava is not directed to children, and we do not knowingly collect information from anyone under 18 through this website.
11
Changes
If this policy changes in a way that matters, we will update the date at the top of this page and, where the change affects an active program, tell participants.
12
Contact
Write to privacy@cairava.com. If your question is about your medical record or your rights over it, your hospital is the right place to start, and we will help you get there.
SMS messaging programPrivacy policyTerms of service