Privacy notice

This notice describes how Citigen Care may collect, use, disclose, and retain information when people use our website, portals, helper tools, and coordinated community-support services. Actual practices may vary by state, program, and executed service agreement.

Information we collect

Depending on the service and user role, we may collect contact and account details; organization and authorization records; scheduling and service-location information; support preferences and safety instructions; helper credentials, employment, vehicle, and availability records; service notes, incidents, expenses, billing records, device information, and audit logs. Please do not submit medical records or sensitive health details through public inquiry forms.

How we use information

We use information to authenticate users, determine role-based access, coordinate approved services, review workforce readiness, support safe handoffs, communicate with authorized parties, maintain records, investigate incidents, prevent misuse, meet contractual or legal duties, and improve the service.

Location and mobile data

The helper app is designed to record location snapshots only at required service actions, such as clock-in, departure, arrival, return, or clock-out. It is not designed for continuous tracking. Offline service actions and note drafts are encrypted on an enrolled device where supported.

Cookies and hosting

Citigen Care is served through Cloudflare and related content-delivery and security infrastructure. These providers may set necessary security or bot-management cookies, such as __cf_bm or an equivalent cookie, and process basic device, request, and network information to deliver the site and prevent misuse. The cookies used may change as our hosting and security configuration evolves.

How information may be shared

We may share information with authorized facilities, partner employers, families or guardians, support coordinators, service providers, mapping and infrastructure vendors, payment or billing vendors, professional advisers, regulators, or law enforcement when reasonably necessary and permitted by law. Access is restricted by role, organization, approved relationship, and client assignment where applicable.

HIPAA and health information

HIPAA does not apply to every organization or every record. When Citigen Care is acting for a HIPAA covered entity or business associate and protected health information is involved, the applicable agreement and HIPAA requirements govern that work. Other information may instead be governed by state privacy, consumer-protection, breach-notification, contract, or program rules.

Retention, security, and incidents

We retain records for the period reasonably needed for service, safety, audit, contractual, legal, insurance, and program purposes. We use administrative, technical, and physical safeguards appropriate to the information, but no system can guarantee absolute security. We will provide notices about qualifying incidents as required by applicable law.

Your choices and requests

Subject to identity verification, legal exceptions, and the law that applies where you live, you may ask to access, correct, or delete certain information, limit some communications, or close an account. Some service, incident, billing, credential, and audit records cannot be deleted immediately. Citigen Care services are designed for adults and are not directed to children under 18.

State-specific terms

State privacy rights and appeal procedures differ. We will add state-specific disclosures and request methods before offering regulated live services in a state. This draft does not waive rights that cannot legally be waived.

Contact

Email privacy questions or requests to info@citigencare.com. Qualified privacy and healthcare counsel must review this draft, applicable contracts, retention schedules, and state notices before live client launch.