How we care for your data.

Hope Chest Digital Binder ("Hope Chest", "we", "our", "us") is operated by Organized Hope. We built Hope Chest to help families organize caregiving — and we treat the information you trust us with the same way we'd want our own family's information treated: privately, securely, and respectfully.

This policy is written in plain language. If you have any questions, contact us at the address below.

1. Who we are

Organized Hope
2905 Triana Boulevard
Huntsville, AL 35805
Phone: (256) 537-8872
Email: support@organizedhope.online

2. What information we collect

You give us:

• Account info: your name, email address, and (for password sign-in) a hashed password. We never store passwords in plain text.
• Hope Chest content: names of loved ones, dates of birth, medical conditions, allergies, medications, vitals, appointments, doctor's notes, daily care log entries, expense entries, emergency contacts, and any documents or photos you upload to the Document Vault.
• Care team info: email addresses of people you invite to a Hope Chest.
• Billing info (if you upgrade to Premium): billing details are handled directly by Stripe; we never see your card number.
• Calendar tokens (optional): if you connect Google Calendar, we store the OAuth refresh token so we can push planner events to your calendar. We do not read your existing calendar events.

We collect automatically:

• Basic technical data your browser sends (IP address, browser type) for security and abuse prevention.
• App usage events (page views, actions like "created medication", "uploaded document") to improve the product. We do not associate this with your medical content.

3. How we use your information

• To provide the Hope Chest service to you and the people you share it with.
• To send you the emails you opted into: daily digest, weekly care-team report, gentle check-in nudges, member invitations, and account/security notifications.
• To process payments (via Stripe) if you subscribe to Premium.
• To push planner events to your Google Calendar (only if you connect it).
• To investigate abuse, security incidents, or technical issues.
• To comply with the law.

We do not sell your data. We do not use your medical or care information to train AI models. We do not share your data with advertisers.

4. Who can see your data

• You, the owner of a Hope Chest.
• People you invite to a Hope Chest, with the role you assign them (Contributor, Viewer, or Professional). You can remove them anytime.
• Service providers we use to operate Hope Chest: Resend (email delivery), Stripe (payments), Google (calendar push, if you connect), our cloud hosting provider (Emergent / MongoDB). Each is contractually required to handle data securely.
• Law enforcement, only when legally required (e.g., a valid subpoena).

We do not give your data to insurance companies, employers, or any party not listed above.

5. HIPAA and medical information

Hope Chest is a personal and family organization tool for individual caregivers and their loved ones. It is not a HIPAA-covered entity, and we are not providing medical advice, diagnosis, or treatment.

If you are a healthcare professional using Hope Chest as part of your work with patients, you remain responsible for your own HIPAA compliance. We can sign a Business Associate Agreement (BAA) for Premium business accounts — contact us for details.

6. Security

We protect your data using:

• HTTPS encryption in transit for everything between your browser and our servers.
• Encryption at rest for our database and uploaded files.
• Bcrypt-hashed passwords (we cannot recover your password — only reset it).
• Access control: every record is tied to a Hope Chest, and we check on every request that the person asking has permission.
• Regular backups.

No system is perfect. If we ever become aware of a breach affecting your account, we'll notify you within 72 hours.

7. Your rights

You can, at any time:

• Access your data — it's all visible in the app, and you can export each Hope Chest as a PDF.
• Correct any information by editing it in the app.
• Delete a Hope Chest, which permanently removes all its content and uploaded files.
• Delete your account — email us at hello@organizedhope.online and we'll permanently delete your account and all Hope Chests you own within 30 days.
• Opt out of any email (daily digest, weekly report, check-in nudges) in Settings → Notifications.

If you are in the EU, UK, or California, you also have rights under GDPR / UK GDPR / CCPA, including the right to a portable copy of your data and the right to object to processing. To exercise these, email hello@organizedhope.online.

8. Children

Hope Chest is not intended for children under 13, and we do not knowingly collect data from anyone under 13. If you become aware that a child has provided data to us, please contact us and we will delete it.

9. Cookies

We use only essential cookies needed to keep you signed in. We do not use advertising or tracking cookies.

10. Changes to this policy

If we make material changes to this policy, we'll email you. Continuing to use Hope Chest after a change means you accept the updated policy.

11. Contact us

Questions, concerns, or requests? We genuinely want to hear from you.

Organized Hope
2905 Triana Boulevard
Huntsville, AL 35805
(256) 537-8872
support@organizedhope.online