Golden Chart Health – Privacy Notice
Who we are and what this notice covers
Golden Chart Health is run by Goebel Biz, LLC, 55219 Huntington Rd, Bend, OR 97707 ("we," "us"). This notice explains what information we collect when you use goldencharthealth.com and the Golden Chart Health app, how we use it, who we share it with, and the choices you have.
Golden Chart Health is a personal health record you control. We are not your doctor, hospital or insurer. Because of that, the information you keep here is generally not covered by HIPAA, the federal law for doctors and health plans. We protect it as described in this notice, and laws such as the FTC Health Breach Notification Rule still apply to us.
Information we collect
We collect only what you, or someone you invite, enter or upload, plus a small amount of technical information needed to run the service.
| Type | Examples | Where it comes from |
|---|---|---|
| Account | Name, email address, password (stored scrambled by our sign-in provider), display name | You |
| Messages you send us | Name, email address and message from our contact form or emails to us | You |
| Profile | Name, date of birth, sex (optional), conditions, allergies, important notes | You or a family member/caregiver you invite |
| Health readings and notes | Blood pressure, blood sugar, oxygen, CPAP, weight, ECG, meals, symptoms, sleep, medicines and doses, notes and observations | You or people you give access to |
| Emergency information | NO BLOOD and DNR choices, where your directive is kept, emergency contacts, primary doctor, blood type, your uploaded directive or POLST | You |
| Other people's details | Names, relationships and phone numbers of emergency contacts and doctors; email addresses of people you invite | You, about them |
| Payments | Subscription status. Card details are handled by Stripe; we never see or store your full card number | Stripe |
| Technical | Sign-in session stored in your browser, basic visit statistics, error logs | Your browser and our hosting provider |
Some of this information, such as health conditions and your choices about blood transfusions or resuscitation, is sensitive. Only enter what you are comfortable keeping here.
How we use information
We use your information only to run Golden Chart Health for you:
- Show your readings, charts and averages, and create the reports, cards and lock-screen images you ask for
- Show your emergency page to people who scan your QR code, if you turn it on
- Let the family members and caregivers you invite see and add information
- Send account emails, such as sign-in messages and invitations, and occasional reminder and tip emails about using Golden Chart Health. You can turn off reminder emails anytime with the unsubscribe link or in your account settings.
- Process subscription payments
- Keep the service secure, fix problems and prevent misuse
We do not use your health information for advertising, and we do not use it for any other purpose without asking you first.
Your emergency page and QR code
Your emergency page is off until you turn it on. When it is on, anyone who scans your QR code or has the link can see it without signing in. That is what lets EMTs, hospital staff or a neighbor help you.
- You choose what shows. By default only your NO BLOOD / DNR choices and emergency contacts appear. You can add or remove allergies, conditions, medicines, your doctor and your signed directive.
- Never shown: your home address, health readings and history, or anyone else on your account.
- Your signed directive is stored privately and opens only through your emergency page, using a link that expires after a short time.
- You can turn it off or make a new code at any time. A new code makes old codes and printed cards stop working.
- We ask search engines not to list emergency pages.
- Lock-screen images and printed cards show what you choose to anyone who sees your phone or card. They stay on your device or paper; we don't control them once saved or printed.
Your NO BLOOD and DNR banners are not a legal medical order. Emergency crews generally follow your state's official signed form, such as a POLST.
Sharing with family and caregivers
You decide who can see each profile. Nobody gets access until you invite them and they accept.
- Access levels: Owner, "This is me" (the person the profile is about), Family – can add, and View only.
- Who wrote what: readings, notes and medicine doses show the name of the person who added them.
- Removing access: the owner, and the person the profile is about, can remove anyone at any time. Access ends right away. Entries that person already added stay in the record with their name.
- Access history: the owner and the person the profile is about can see when access was given or removed, and by whom.
- Doctor report links: you can create a private link to a report. Anyone with that link can view the report until it expires or you turn it off.
People you invite can see and add sensitive information. Only invite people you trust.
Service providers we use
We use a small number of companies to run the service. They handle your information only to provide their service to us.
| Provider | What they do | Information involved |
|---|---|---|
| Lovable (Lovable Cloud) | Hosts the website and app, stores your account and health information and uploaded files | All information you store in Golden Chart Health |
| Stripe | Processes subscription payments | Payment details, email, subscription status |
| Resend | Sends emails such as invitations | Email addresses and names in the email; no health information |
| Namecheap | Our domain names and business email | Messages you send to our support address |
What we never do
- We do not sell your information.
- We do not show ads or share your information with advertisers or data brokers.
- We do not share your health information with employers, insurers or anyone else unless you choose to share it, or the law requires it (for example, a valid court order).
- If we ever want to use your information in a new way, we will ask for your permission first.
Security and breach notification
We use HTTPS encryption for all connections, database access rules so each person sees only the profiles they are allowed to, and private file storage for uploaded directives. No system is perfectly secure, so please use a strong password and keep your devices locked.
If your health information is ever accessed or shared without your permission, we will notify you without unreasonable delay, and we will notify the Federal Trade Commission when the FTC Health Breach Notification Rule requires it.
Keeping and deleting information; your choices and rights
We keep your information while your account is open. If a paid subscription ends, your tracked information is kept read-only so it returns if you subscribe again, and your emergency features keep working.
You can:
- See and change your information in the app at any time
- Turn off your emergency page, remove your directive, or make a new QR code
- Remove anyone's access to a profile
- Delete your account in the app. We then delete your information within 30 days, except where the law requires us to keep something, such as payment records
- Ask us to confirm what we hold, correct it or delete it by emailing contactus@goldencharthealth.com
We will not treat you differently for using these rights.
Washington consumer health data
If you live in Washington State, Washington's My Health My Data Act gives you extra rights over your consumer health data. Everything in this notice is that information: the categories we collect, where it comes from, why, and who receives it (see the sections above). We collect and share it only to provide the service you ask for, or with your consent. We never sell it.
You may confirm whether we collect or share your health data, access it and get a list of the companies it was shared with, withdraw consent, and delete it. Email contactus@goldencharthealth.com with "Washington health data request."
Children
Golden Chart Health is for adults. Accounts may not be created by anyone under 18. A parent or legal guardian may keep a profile for their child and is responsible for that information.
Not medical advice
Golden Chart Health helps you record and share information. It does not give medical advice, diagnose or treat anything, and it is not for emergencies. In an emergency, call 911.
Changes to this notice
If we make important changes, we will tell you in the app or by email before they take effect. The date at the top shows when this notice was last updated.
Contact us
Goebel Biz, LLC 55219 Huntington Rd Bend, OR 97707 Email: contactus@goldencharthealth.com