Legal

Privacy Policy

Last Updated: June 2026

1. Our Commitment to Privacy

At DayGuide AI ("we," "our," or "the platform"), privacy is not an afterthought - it is built into the foundation of how our platform operates. This Privacy Policy explains what information we collect, how we use it, and the choices available to you.

It applies to all features of the DayGuide AI platform, including Activities, Games, Daily Chronicles, Menus, Calendar, Pass Time Activities, Spiritual Reflections, Budget with Nova, Field Trip Finder, DayGuide Design Studio, Nova AI Assistant, Participant Profiles, Programs, Reports & Analytics, and the Nova Marketplace.

2. Data We Collect

DayGuide AI follows a data minimization approach and adheres to HIPAA de-identification standards under 45 CFR §164.514(b).

Account & Facility Information

  • Facility name, type, location, and timezone
  • Staff contact information (name, email, and phone)
  • Staff roles, permissions, and account credentials
  • Subscription details and billing history processed securely via Stripe
  • Facility branding assets and operating settings

Participant Profile Information (De-Identified, Non-Medical)

Participant profiles are designed to be fully anonymous. We do not collect any of the 18 HIPAA-defined identifiers.

  • A DayGuide ID (e.g., DG-4932) auto-generated by the platform - no real names stored
  • Non-medical lifestyle preferences: interests, hobbies, music and food preferences, engagement styles
  • Activity participation data including attendance and non-clinical observations

Content & Activity Data

  • AI-generated and user-created content such as activities, menus, games, and designs
  • Calendar events and scheduling data
  • Budget and expense tracking data entered by staff

Usage & Technical Data

  • System logs, browser type, device information, and IP address
  • Aggregated, non-identifiable platform usage analytics

3. Data We Do Not Collect

DayGuide AI is intentionally designed to prevent the collection or storage of Protected Health Information (PHI). We do not collect any of the 18 HIPAA Safe Harbor identifiers, including:

  • Real names
  • Dates of birth, admission, or discharge
  • Geographic data below state level
  • Phone numbers or email addresses belonging to participants
  • Social Security numbers
  • Medical record or account numbers
  • Biometric identifiers or photographs
  • Any unique identifying number, characteristic, or code

We also do not collect:

  • Medical diagnoses or conditions
  • Medications or prescriptions
  • Treatment plans or clinical notes
  • Any data intended for healthcare recordkeeping

DayGuide AI is not a medical system, EHR, or clinical documentation tool and must not be used as one.

4. Intended Use of the Platform

DayGuide AI is designed exclusively for activity planning, engagement support, and operational coordination within care environments. It is intended to complement - not replace - clinical systems and must not be used to store, manage, or process clinical, healthcare-related, or personally identifiable participant data.

5. User Responsibility

Users agree to:

  • Use only the auto-generated DayGuide ID (e.g., DG-4932) when creating participant profiles - never enter real names
  • Refrain from uploading or storing any PHI or HIPAA-defined identifiers
  • Refrain from using the platform as a medical record or clinical documentation system

Misuse of the platform to store identifiable or protected information is a violation of these Terms and may result in account termination.

6. How We Use Your Information

We use collected data to:

  • Operate and maintain the platform
  • Personalize activity content and recommendations
  • Manage facility accounts and user access
  • Process billing securely through Stripe
  • Generate AI-powered content and activity plans
  • Improve platform performance and communicate service updates
  • Comply with applicable legal obligations

We do not use data for advertising and never sell or rent user or facility data to third parties.

7. Security and Infrastructure

DayGuide AI is built on infrastructure with SOC 2 Type II and ISO 27001 certifications. Our safeguards include:

  • Encryption of all data in transit (TLS/HTTPS) and at rest
  • Role-based access controls limiting data access to authorized personnel
  • Multi-factor authentication protections
  • Continuous system monitoring and security reviews

Report any suspected unauthorized access to support@dayguideai.com.

8. Third-Party Services

We partner with trusted providers to support platform functionality:

  • Stripe - secure payment processing
  • Google - optional calendar integrations
  • AI service providers - content generation

We limit data shared with third-parties to non-identifiable, non-medical inputs and never transmit participant-identifiable or PHI data.

9. Your Rights

Facility administrators may:

  • Access and review account and facility information
  • Update or correct information at any time
  • Request deletion of their data
  • Export facility data
  • Opt out of non-essential communications

Submit requests to support@dayguideai.com.

10. International Use

DayGuide AI operates from the United States. Users outside the U.S. acknowledge that data may be stored and processed in the U.S. and are responsible for ensuring their use complies with applicable local privacy laws.

11. Changes to This Policy

We may update this Privacy Policy periodically. Users will be notified of material changes via email or in-platform notice. Continued use after notification constitutes acceptance of the updated policy.

12. Contact Us

Questions, concerns, or data requests: support@dayguideai.com

DayGuide AI is committed to maintaining a privacy-first platform and will never use participant data for purposes beyond those described in this policy.