Privacy Policy

    Last updated: April 2026

    casedaisy ("we", "us", "our") provides a cloud-based scheduling and documentation platform for mobile professionals. This Privacy Policy explains what we collect, how we use it, and the choices you have. Questions? hello@casedaisy.com.

    Information We Collect

    We collect the information you provide when you create an account and use the service, including name, email, phone number, mailing address, practice type, client/patient records you enter, visit schedules, session notes, and mileage logs. We also collect basic usage data (page views, timestamps, device type) to keep the service running.

    How We Use Your Information

    We use your information to provide, maintain, and improve the service: to authenticate you, render your schedule and reports, process payments, send transactional email, and provide customer support.

    Third-Party Services

    casedaisy uses the following sub-processors. Your data is shared with them only to the extent needed to deliver the service:

    • Supabase — database and authentication hosting.
    • Stripe — subscription billing and payment processing.
    • SendGrid — transactional email delivery.
    • Google Maps — geocoding and route optimization.
    • Google Calendar — optional two-way calendar sync.
    • Anthropic (Claude) — AI-powered notes and suggestions.

    Data Storage & Security

    Data is stored in a Supabase-hosted PostgreSQL database protected by row-level security so each account can only access its own data. Connections are encrypted in transit (TLS) and at rest.

    Data Retention

    We retain account and content data for as long as your account is active. After cancellation, data is retained for 12 months to support reactivation, then permanently deleted unless a longer period is required by law.

    Your Rights

    You may request an export of your data, correction of inaccuracies, or full deletion of your account at any time by emailing hello@casedaisy.com. We will respond within 30 days.

    Cookies

    casedaisy uses session cookies strictly for authentication. We do not use third-party advertising or behavioral tracking cookies.

    HIPAA

    casedaisy is not HIPAA compliant by default. Customers should not enter protected health information that requires HIPAA safeguards. Enterprise plans can include a Business Associate Agreement (BAA) — contact us for details.

    Children's Privacy

    The service is intended for licensed professionals, not children. In therapy verticals, client records about minors are entered and managed by the professional account holder, who is responsible for obtaining all necessary consents.

    Changes to This Policy

    We may update this policy from time to time. Material changes will be announced in-app or by email. Continued use of the service after a change constitutes acceptance of the revised policy.

    Contact

    casedaisy · hello@casedaisy.com