Privacy Policy

HealthOasis ("we," "us," or "our") is a California nonprofit public benefit corporation (EIN 99-4599879) that provides free educational care navigation services for family caregivers and older adults. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.

By using healthoasis.org or creating an account, you agree to this Privacy Policy.

a. Information you provide directly

• Account information: When you create a free account, we collect your email address and a hashed password. We do not collect your name unless you choose to provide it.
• Chat conversations: When you use our AI care navigator, we receive and process the questions and messages you send. These conversations may contain sensitive personal information about you or the person you care for, including health conditions, family situations, or financial circumstances.
• Payment information: If you become a Sustaining Supporter or Caregiver Circle member, payment is processed securely by our payment provider. We do not store your credit card number. We store your membership tier and subscription status only.

b. Information collected automatically

• Usage data: We track the number of messages sent per account or session to enforce free tier limits. We also use a third-party website analytics service to understand, in aggregate, how visitors use our site — such as which pages are viewed and how features are used — so we can improve HealthOasis. We do not sell your data, and we do not use it for advertising.
• Device and log data: We and our third-party analytics provider automatically receive technical information such as your IP address, browser type, device type, and the pages you visit on our site. This information is used for security, analytics, and service improvement only.
• Cookies: We use cookies required to keep you signed in and maintain your session, and analytics cookies from a third-party analytics service that help us measure how the site is used. We do not use advertising cookies, and we do not sell data collected through cookies.

We use the information we collect to:

• Provide and operate the HealthOasis AI care navigator
• Create and manage your account
• Track message usage and enforce tier limits
• Process membership payments securely
• Respond to your questions or support requests sent to help@healthoasis.org
• Improve the accuracy and quality of our AI responses
• Comply with legal obligations

We do not:

• Sell your personal information to anyone, ever
• Use your chat conversations for advertising
• Share your data with insurance companies, employers, or healthcare providers
• Use your information for any purpose unrelated to operating HealthOasis

Our AI care navigator is designed to answer questions about elder care. When you use it, you may share sensitive information such as health conditions, diagnoses, medications, financial situations, or family circumstances.

Please be aware:

• Chat conversations are stored in our secure database to maintain conversation history and improve our service
• We treat all chat content with care and do not share it with third parties except as described in Section 5
• HealthOasis is not a HIPAA-covered entity. We are an educational information service, not a healthcare provider. Do not share information that you believe requires HIPAA-level protection.
• Do not share Social Security numbers, financial account numbers, or passwords in the chat

We share data only in the following limited circumstances:

Service providers: We work with carefully selected technology service providers to operate HealthOasis, including database hosting, user authentication, payment processing, website analytics, and AI services. These providers access only the data necessary to perform their functions and are required to maintain appropriate security standards. They do not use your data for their own purposes.

Legal requirements: We may disclose information if required by law, court order, or government authority, or if we believe disclosure is necessary to protect the safety of any person.

Organizational transfer: If HealthOasis merges with or transfers its operations to another nonprofit organization, your information may transfer as part of that transaction. We will notify you before such a transfer occurs.

• Guest session data: Anonymous message counts are deleted after 90 days of inactivity
• Account data: Retained while your account is active. You may request deletion at any time
• Chat conversations: Retained to maintain your conversation history. You may request deletion by emailing help@healthoasis.org
• Service matching records: When the navigator suggests resources, we keep a record of the request and what was suggested, so we can check that our suggestions are useful and unbiased. The wording of your question is removed after 90 days; the anonymous record is kept.
• Payment records: Retained for 7 years as required by tax and accounting regulations

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

• Right to know: You may request a copy of the personal information we hold about you
• Right to delete: You may request that we delete your personal information, subject to certain exceptions
• Right to opt out of sale: We do not sell personal information. There is nothing to opt out of.
• Right to non-discrimination: We will not discriminate against you for exercising your privacy rights

To exercise these rights, email help@healthoasis.org with the subject line "California Privacy Request."

Regardless of where you live, you may:

• Access your data: Email help@healthoasis.org to request a copy of your account information
• Delete your account: Email help@healthoasis.org with "Delete My Account" in the subject line. We will delete your account and associated data within 30 days, except information we are required to retain by law
• Delete chat history: Email help@healthoasis.org to request deletion of your conversation history
• Update your email: Log into your account settings

HealthOasis is intended for use by adults (18 and older). We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact help@healthoasis.org and we will delete it promptly.

We take reasonable measures to protect your information, including:

• Encrypted data transmission (HTTPS) on all pages
• Row-level security policies on our database
• Hashed passwords — we never store passwords in plain text
• Payment card data is handled entirely by our payment processor — we never see your card number

No method of transmission over the internet is 100% secure. We encourage you to use a strong, unique password for your HealthOasis account.

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For material changes, we will notify registered members by email.

HealthOasis
Email: help@healthoasis.org
Website: healthoasis.org