CareHub | Privacy Policy

Introduction

Privacy Policy

Last updated: 10 August 2026

This Privacy Policy describes how CareHub (operated by David Lennard / Global Outcomes) collects, uses, and protects information when you use our websites, applications, and related services (the “Services”).

We design for minimum necessary data. Sensitive health-data workflows are staged and are not treated as fully activated production PHI systems until the controls described on our Privacy, Security & HIPAA Posture page are in place.

Not medical advice

CareHub does not provide diagnosis or treatment. The Services support information, coordination, research translation, and community support.

Who We Are

Contact

David Lennard, Founder

Email: info@globaloutcomes.press
Phone: +1 (480) 200-0253

Until formal B Corp registration and a registered office address are completed, the contact details above are the primary channel for privacy requests and questions.

Technical and security posture (including HIPAA roadmap and known gaps) is published on our Privacy, Security & HIPAA Posture page.

Information We Collect

What we collect depends on how you use the Services. The beta is intentionally narrow.

What we deliberately avoid in beta

Social Security numbers or government ID documents as a default requirement
Payment-card processing inside the current public beta posture
Broad PHI intake by default before production-grade controls are activated

How We Use and Share Information

Use

Provide, secure, and maintain the Services
Authenticate users and prevent abuse
Respond to requests and provide support
Improve reliability, performance, and product design
Comply with law and enforce our terms

We do not sell your personal information.

Legal bases (where applicable)

Contract — to provide the Services you request
Legitimate interests — security, debugging, product improvement, where not overridden by your rights
Consent — where required (for example certain analytics or optional features)
Legal obligation — when the law requires us to retain or disclose information

Sharing and processors

We use service providers to operate the Services (for example hosting, authentication, analytics, and AI infrastructure). They may process data only to provide services to us and under appropriate agreements.

Hosting and infrastructure
Authentication and database services
Analytics (if enabled)
AI model providers when you use AI features (e.g. Ask Rupert / Gemini) — subject to those providers’ terms and policies

We may disclose information if required by law, to protect rights and safety, or in connection with a legitimate business transfer (with appropriate safeguards).

Retention, Deletion, and Your Rights

We retain information only as long as needed for the purposes described in this policy, including security and legal requirements.

Deletion requests

Verified deletion requests are intended to be completed within 30 days, unless we must retain data for legal, security, or fraud-prevention reasons.

Removal from live systems and removal from rotating backups may not occur at the same moment; backup copies age out through normal rotation. More detail on continuity appears on Privacy, Security & HIPAA Posture.

Your rights

Depending on applicable law (including GDPR/UK GDPR and CCPA/CPRA where they apply), you may have the right to:

Access the personal information we hold about you
Correct inaccurate information
Request deletion
Request portability of information you provided
Object to or restrict certain processing
Withdraw consent where processing is consent-based
Opt out of sale/sharing where those concepts apply (we do not sell personal information)

To exercise rights: info@globaloutcomes.press or +1 (480) 200-0253. We may need to verify your request.

Cookies and Children

Cookies and similar technologies

Essential: required for security and core operation (always on).
Analytics: help us understand usage and improve the product (where enabled / consented).

You can control non-essential cookies through our consent tools where available, and through browser settings.

Children

The Services are not directed to children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children under that age. If you believe we have, contact us and we will take appropriate steps to delete it.

Features that may involve dependents should be used under adult supervision where appropriate (including adult-managed tools such as Ask Rupert).

International Users and Policy Changes

International users

We may process information in the United States and other countries where our providers operate. If you access the Services from outside those locations, you understand that information may be transferred to and processed in those countries, subject to applicable safeguards and law.

Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. Material changes may also be communicated through the Services or by email where appropriate.

Contact

Email: info@globaloutcomes.press
Phone: +1 (480) 200-0253

For security implementation, HIPAA roadmap, and known gaps, see Privacy, Security & HIPAA Posture.

Privacy Policy

Privacy Policy

Featured Topics

Podcast Summary

Privacy Policy

Not medical advice

Who We Are

Contact

Information We Collect

Categories

What we deliberately avoid in beta

Retention, Deletion, and Your Rights

Deletion requests

Your rights

Cookies and Children

Cookies and similar technologies

Children

International Users and Policy Changes

International users

Changes to this policy

Contact