Privacy Policy for Clients

Last Updated: May 26, 2025

Notice: This Privacy Policy describes how Celebricare LLC ("Celebricare," "we," "us," or "our") collects, uses and discloses the Personal Information of our Customer's patients and clients ("Clients," "you," or "your") when using the client web portal and client mobile application (including telehealth services) controlled by their healthcare or wellness Provider (our "Customer" or your "Provider") (collectively, the "Client Portal" or the "Services").

We are committed to protecting your privacy and handling your data transparently and securely. Our use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

1. Note to Celebricare Customers and their Clients

Our treatment of Client Personal Information is governed by our agreements with our Customers, including our Celebricare Terms of Service and HIPAA Business Associate Agreement, as applicable (our "Agreement"). If any provision in our Agreement with our Customers conflicts with any provision in this Privacy Policy, the provision in the Agreement will control to the extent of such conflict.

2. Personal Information We Collect

"Personal Information" is information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with you or your household.

Categories of Information We Collect:

Identifiers and Contact Information
Name, email address, mailing address, phone numbers, IP addresses

Billing Information
Insurance information, invoices, payment details, service records

Audio, Electronic and Visual Information
Photographs, images, voice recordings, telehealth session data

Internet and Device Activity
Browsing history, device data, service interaction logs

Appointment Information
Scheduling data, appointment history, location details

Sensitive Personal Information
Health status, demographic data, payment details, secure communications

Google User Data (via OAuth Integration)

When you choose to connect your Google Account with Celebricare services, you grant us access to specific data from your Google Account. We only request the minimum necessary data required for healthcare service delivery and appointment management.

Google Calendar Integration:

https://www.googleapis.com/auth/calendar.events.readonly: Your Google Calendar events, which we use to display your existing appointments and prevent scheduling conflicts during appointment booking

https://www.googleapis.com/auth/calendar.events: Creation and modification of calendar events, which we use to automatically add your healthcare appointments to your personal calendar for convenience and appointment reminders

Google Account Information:

https://www.googleapis.com/auth/userinfo.email: Your primary email address associated with your Google Account, which we use for account identification and sending important healthcare notifications

https://www.googleapis.com/auth/userinfo.profile: Basic profile information including your name, which we use for account verification and personalized healthcare service delivery

Google Meet Integration (if applicable):

https://www.googleapis.com/auth/meetings.space.created: Creation of Google Meet links for telehealth sessions, ensuring secure and HIPAA-compliant video consultations with your healthcare provider

3. How We Use Personal Information

  • To maintain your Client Profile and send requested information
  • To process billing information and transactions
  • To authenticate your identity and manage document signing
  • To improve service effectiveness and platform functionality
  • To protect against security threats and fraudulent activity
  • To comply with legal and regulatory obligations
  • To integrate with your Google services for enhanced appointment scheduling and telehealth delivery
  • To synchronize healthcare appointments with your personal calendar
  • To provide secure telehealth sessions through Google Meet integration

Limited Use of Google User Data

Our use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

  • We will only use Google user data to provide or improve the user-facing healthcare features of Celebricare that are prominently displayed in the application's user interface
  • We will not transfer Google user data to others unless necessary to provide or improve user-facing healthcare features that are prominent in the app's user interface, and only with your explicit consent
  • We will not use or transfer Google user data for serving ads, including retargeting, personalized, or interest-based advertising
  • We will not allow humans to read Google user data unless we have obtained your affirmative agreement to view specific calendar events or profile information, or for security purposes (such as investigating abuse), or to comply with applicable healthcare laws and HIPAA regulations

4. How We Share and Disclose Your Personal Information

Sharing with Providers

We share your information with Providers on our platform to facilitate mental health and wellness services and maintain compliance with our agreements. You may opt out at any time.

Service Providers

We may share data with trusted third-party service providers who assist us in operating Celebricare and providing healthcare features (e.g., hosting providers, analytics services, Google API services). These providers are contractually bound to protect your data and only use it for the purposes for which we disclose it to them.

Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities, or to comply with healthcare regulations including HIPAA requirements.

We will never sell your Google user data or use it for advertising purposes.

5. Access and Choice

Your Control Options:

  • Update Personal Information through your Provider
  • Manage notification preferences in Portal Settings
  • Request account deletion through your Provider
  • Control push notification settings
  • Revoke Google Account Access: You can revoke Celebricare's access to your Google Account at any time by visiting your Google Account security settings (https://myaccount.google.com/security)
  • Manage Google Calendar Integration: You can disable calendar synchronization through your account settings while maintaining other Celebricare services

6. Data Collection Technologies and Cookies

Automatically Collected Information:

Log Data
IP address, operating system, device type and version, browser information, URLs visited, date/time stamps, and user agent data

Analytics Data
Usage patterns, electronic pathways, activity information, and interaction metrics

Location Data
General geographic location inferred from IP addresses

Cookie Management

You can control cookies through your browser settings by:

  • Receiving notifications when cookies are sent
  • Disabling existing cookies
  • Setting automatic cookie rejection

7. Data Storage and Security

Security Notice: While we implement industry-standard security measures, no method of Internet transmission is 100% secure.

Our Security Practices:

  • Data retention aligned with account activity, legal requirements, and HIPAA compliance
  • SSL encryption for sensitive information transmission
  • Regular security updates and monitoring
  • Compliance with healthcare data protection standards
  • Secure storage of Google user data on HIPAA-compliant servers located in the United States
  • Implementation of technical and organizational security measures including encryption, access controls, and regular security audits for all data including Google API data

8. California Privacy Statement

Your California Privacy Rights

CCPA and CPRA Rights

  • Right to know what personal information is collected
  • Right to delete personal information
  • Right to correct inaccurate personal information
  • Right to data portability
  • Right to opt-out of information sharing

9. Additional State Privacy Laws

State-Specific Rights

Virginia Consumer Data Protection Act (VCDPA)

  • Right to access and confirm personal data
  • Right to data portability
  • Right to opt-out of targeted advertising
  • Right to deletion

10. Additional Information

International Users

We are located in the United States. By using our services, you acknowledge that your information will be processed in the United States and other countries where we operate.

Children's Privacy

Celebricare is not intended for use by children under the age of 13. We do not knowingly collect personal information from children without parental consent. If you believe we have collected information from a child, please contact us immediately, and we will take steps to remove that information and terminate the child's account in compliance with healthcare privacy laws.

Policy Changes

We may update this Privacy Policy from time to time to reflect changes in our practices, Google API requirements, or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the new Privacy Policy and updating the "Last Updated" date. We encourage you to review this Privacy Policy periodically.

11. Contact Us

If you have any questions in connection with this Privacy Policy, our use of Google user data, or other privacy-related matters, please visit our Help Center.