Legal
Privacy Policy
Last updated: [date of publication] · Draft pending legal review - not yet in effect.
This Privacy Policy explains how GOAT Exercise LLC ("GOAT Exercise," "we," "us") collects, uses, and shares information through ActiveCare, our software platform for home care agencies (the "Service").
ActiveCare is a business-to-business platform. Agencies subscribe to ActiveCare and their staff (agency administrators and caregivers) use it to manage exercise and care plans for the agency's own clients. This policy covers information about agency staff who hold an ActiveCare account, and about the clients, family observers, and physicians whose information agency staff enter into the Service on the agency's behalf.
If your agency has its own privacy policy or a Business Associate Agreement / data processing agreement with GOAT Exercise, that agreement governs how your agency's own data is handled to the extent it conflicts with this general policy.
1. Information we collect
Account information (agency staff)
Name, email address, phone number, role (caregiver, agency administrator, or GOAT network staff), and a hashed password. If you enable optional two-factor authentication, an authenticator-app credential is registered directly with our authentication provider (Supabase Auth) - we never see or store your authenticator codes or secret in plain text.
Client (care-recipient) information
Entered by agency staff, not typically by the client directly: full name; mobility, fall-history, strength, and range-of-motion information; health conditions, pain points, and physician-noted restrictions; personal goals; standardized assessment scores (e.g. chair-stand and Short Physical Performance Battery results); exercise and cognitive-activity session history, including completion, ratings, and caregiver-written notes; fall-incident reports; and derived indicators such as fall-risk level and decline-risk signals.
Family observer information
If an agency grants a family member read-only access to a client's progress, we collect that person's email address to send them a sign-in link. Family observers can view a client's plan and progress; they cannot edit records or export data.
Physician and payer contact information
If an agency chooses to send a physician export or is enrolled in payer-export delivery, we collect the recipient's email address solely to deliver that agency-initiated report. These recipients do not have ActiveCare accounts and cannot log in.
Billing information
Subscription plan, billing cycle, and the last four digits of the payment card on file. Full payment card details are collected and processed directly by our payment processor, Stripe, and never pass through or are stored on ActiveCare's own servers.
Usage and device information
Sign-in timestamps, session activity, and notification history, used to operate and secure the Service. If a caregiver enables optional voice control, spoken commands are processed by the device's own browser-based speech recognition - ActiveCare does not record or retain raw audio.
2. How we use information
- To provide the Service - generating and updating exercise/care plans, tracking outcomes and adherence, administering caregiver training and certification, and processing billing.
- AI-assisted plan generation. When a plan is created, periodically updated, or an exercise is substituted after a caregiver flags a difficulty, relevant assessment and session information is sent to our AI provider, Anthropic (maker of Claude), to generate a suggested plan or substitution. Anthropic processes this information on our behalf under its own business/API terms, which do not permit using data submitted through the API to train Anthropic's models. AI-generated plans are always reviewable by agency staff before use with a client.
- Communications - re-assessment reminders, fall-incident and decline-risk alerts, invitation and password-reset emails, and other operational notifications.
- Quality and certification tracking - computing agency-level outcome and certification metrics as described on the ActiveCare Certified program.
- Security and fraud prevention, and to comply with legal obligations.
We do not use client or caregiver information for advertising, and we do not sell personal information.
3. Who we share information with
We share information only as needed to operate the Service, or as your agency directs:
- Supabase - database, authentication, and file storage for substantially all Service data.
- Vercel - application hosting.
- Anthropic - AI-assisted plan generation and exercise substitution, as described above.
- Stripe - payment processing for agency subscriptions.
- Resend - delivery of transactional emails (invitations, notifications, scheduled reports).
- Recipients your agency chooses - a family observer, a client's physician, or a payer, only when agency staff initiate that access or export.
We do not sell personal information, and we do not share client or caregiver data with third parties for their own marketing purposes.
4. How access is controlled
ActiveCare enforces role-based access at the database level, not only in the application interface: agency administrators and caregivers can see only their own agency's clients and staff; family observers have read-only access to the one client they were granted access to; and GOAT network staff have oversight access across agencies for platform operation and support. See our Security & Trust page for more detail on how this is enforced.
5. Data retention
Client session, assessment, and plan history is retained as part of the ongoing care record and is not automatically deleted, consistent with how care documentation is typically retained for continuity of care. A client or team member can be deactivated by their agency, which removes them from active lists while preserving their historical record.
6. Your choices and rights
- Agency staff can update their own profile information from their account settings at any time.
- An agency can deactivate a client or team member, or remove a family observer's access, at any time.
- Requests to access, correct, or delete personal information can be directed to support@goatexercise.com, subject to applicable law and our legitimate need to retain care-related records.
[Add region-specific rights language here if ActiveCare serves users in jurisdictions with specific statutory disclosure requirements - e.g. GDPR, CCPA/CPRA, or state health-data statutes - once confirmed with counsel.]
7. Children's privacy
ActiveCare is a business tool for home care agencies serving adult clients. It is not directed to children, and we do not knowingly collect personal information from children.
8. Changes to this policy
We may update this policy from time to time. We'll post the revised version here with an updated "Last updated" date. Material changes will be communicated to agency administrators.
9. Contact us
Questions about this policy or your data can be sent to support@goatexercise.com, or by mail to [business address].