Account protection
CareProof supports secure sign-in through Google, Microsoft, or ChatGPT rather than maintaining a separate CareProof password. Workspace APIs verify the signed-in user on the server, and care-profile access is checked against ownership or an authorized team role.
Data safeguards
Data is transmitted over encrypted connections and stored in managed platform infrastructure. CareProof limits access by role and records the account associated with care activity. Sensitive information is not used for advertising.
Your part
Use a protected device, keep your ChatGPT account secure, sign out on shared devices, review care-team access regularly, and avoid entering information that is not necessary for the caregiving purpose.
Security incidents
If we learn of unauthorized access involving protected information, we will investigate, contain the issue, and provide notices required by applicable law. Health applications may be subject to federal and state breach-notification requirements even when HIPAA does not apply.
Report a concern
Report suspected unauthorized access or a security issue promptly to the CareProof project administrator through the support channel provided with your account. Do not include unnecessary health information in the initial report.