Privacy Policy

This policy applies to KareBud consumer websites, applications, and services. KareBud is generally a consumer health technology service, not a healthcare provider or health plan. Information you provide directly to KareBud may not be protected by HIPAA. If KareBud processes information for a covered entity under a signed business associate agreement, that processing is governed by that agreement and applicable law.

This policy is intended to function as a consumer health data notice where applicable. It is not a HIPAA Notice of Privacy Practices unless KareBud separately provides one for a covered-entity relationship.

Depending on the features you use, we may collect:

• Account, contact, subscription, and support information.
• Health information you enter or upload, such as symptoms, medications, labs, notes, and records.
• Medication names, doses, schedules, adherence notes, allergies, conditions, procedures, and care-team notes.
• Voice recordings or transcripts when you choose voice features.
• Images, documents, lab reports, and metadata from uploaded files when you choose upload features.
• Information about family members or dependents that an authorized account holder adds.
• Summaries, classifications, review cues, and other inferences generated from submitted information.
• Consent records, correction/audit history, access logs, export logs, and feature-use preferences.
• Device, browser, IP address, authentication, fraud-prevention, and security-event information.
• Website and product usage information, including pages viewed and feature interactions.

KareBud distinguishes reported facts from generated inferences. Reported diagnoses, conditions, procedures, symptoms, and related details may be presented back to you with a source label such as self-reported, clinician-diagnosed, or documented clinical record.

We use information to provide requested features, organize records, generate optional AI-assisted summaries, enable sharing you request, maintain accounts, process payments, provide support, prevent fraud, secure and improve the service, comply with law, and enforce our terms.

KareBud is not an emergency monitoring service. It does not diagnose conditions, prescribe treatment, or make medical decisions. Do not change medication or treatment based on a KareBud output.

Many KareBud features depend on your consent or direction, including health-data collection, AI-assisted summaries, uploads, family/dependent profiles, external sharing, and certain interoperability features. Where required by law, we ask for consent before collecting, using, or disclosing consumer health data for the applicable purpose. You may withdraw consent, but doing so can limit or disable the related feature.

We may also process information to provide the service you requested, protect accounts and security, comply with law, respond to your requests, maintain audit records, and support legitimate operational needs consistent with applicable privacy law.

Optional AI features may send selected content to KareBud systems and contracted service providers that support hosting, databases, authentication, security, communications, payments, analytics, or AI processing. We use contractual and technical controls appropriate to the service and configuration.

Automated tools may attempt to reduce direct identifiers before certain processing, but automated redaction is not guaranteed to identify every sensitive detail. AI-assisted tools strictly provide contextual language grounded in your reported logs and should be verified for completeness.

KareBud does not intentionally use identifiable consumer health data to train general-purpose AI models. Provider terms, retention windows, abuse-monitoring practices, and available privacy configurations may vary by vendor and deployment. We will not claim a vendor, model, HIPAA, or no-training configuration is available unless it is enabled and contractually supported for that feature.

We may disclose information to service providers, people or clinicians you direct us to share with, professional advisers, authorities when legally required, and parties involved in a corporate transaction. We do not sell consumer health data or use it for targeted advertising. We do not disclose health content to data brokers.

We may share information when you invite a care circle member, request an export, connect an external service, submit information to a clinician, or otherwise direct KareBud to disclose it. Review recipients and shared content carefully before authorizing access.

KareBud may use analytics and device-identification technologies to understand service usage, diagnose errors, and prevent fraud. We seek to avoid sending user-entered health content to general-purpose analytics tools. Browser settings and privacy controls may limit some technologies.

We do not permit general analytics tools to be configured for targeted advertising based on consumer health data. Product and security telemetry should not include free-text health entries, uploaded files, or clinical record contents; however, URLs, page titles, device details, event names, and technical logs can still reveal context and are treated as sensitive where appropriate.

We retain information for as long as needed to provide the service, meet legal and security obligations, resolve disputes, and enforce agreements. Account deletion begins a deletion or de-identification process, but limited information may remain temporarily in backups or longer where required for security, legal, fraud-prevention, or audit purposes.

Correction history, consent records, export logs, security logs, and deletion records may be retained to show what changed, when, why, and by whom. This supports healthcare traceability and does not mean deleted records remain available in normal product views.

KareBud account holders must be adults. A parent, legal guardian, or other properly authorized adult may manage a Teen profile for someone age 13 through 17 or another eligible dependent profile only when legally permitted. Do not create a profile or enter health data for anyone under 13. Contact us immediately to request review and deletion if information about a child under 13 was entered.

By creating a dependent or Teen profile, you represent that you have authority to do so, that the information is appropriate to share in KareBud, and that you will update or remove access if your authority changes. We may suspend dependent-profile access while authority, custody, or consent is reviewed.

Subject to applicable law, you may request access, correction, deletion, or a copy of your information; withdraw consent; restrict certain processing; or appeal a denied request. Residents of states with consumer health privacy laws may have additional rights concerning consumer health data, including the right to know what categories are collected, the purposes of collection, categories of recipients, and how to revoke consent.

Submit requests to privacy@karebud.com. We may verify your identity and authority before completing a request. Authorized agents may be required to provide proof of authority.

We use administrative, technical, and physical safeguards designed to protect information. No method of storage or transmission is completely secure. If a legally reportable incident occurs, we will provide notice as required by applicable law.

KareBud is not a monitored emergency service. Security, safety, and AI guardrails may generate warnings or review prompts, but they may be delayed, incomplete, or require verification.

KareBud is currently designed primarily for United States users. Service providers, support systems, and infrastructure may process information in the United States or other locations where they operate. If KareBud offers the service in additional countries, we will update this notice and implement required transfer, consent, and local-rights mechanisms before launch in those markets.

This Service is operated by KareBud LLC, located at Bridgewater, NJ 08807, USA. Questions, complaints, or inquiries regarding this Privacy Policy or your privacy rights may be sent to privacy@karebud.com.

Material changes will be posted here with a revised effective date (currently June 11, 2026) and, when required, additional notice or consent.

Read the Terms of Service, Consent & AI Use notice, and Privacy & Security overview.