Privacy Policy

What we collect

We deliberately collect less than most sites ask for. From your account: your email address and first name. From your intake: your family member's first name (never last name), city and county, broad categories (care setting, rough income and asset ranges, insurance type, veteran status), and the free-text description you write about the situation.

We never ask for the following, and we actively strip them out of your free-text description, before it is processed or stored, if they appear: Social Security numbers, dates of birth, full street addresses, phone numbers, email addresses, insurance member/policy numbers, VA claim numbers, and bank account details. This isn't just a policy. It's enforced in the software itself at multiple layers, not only by a human checking later.

We are not a healthcare provider and keep no medical records: no medication lists, diagnoses, doctors, or appointments, only the broad care-need category the eligibility rules require.

How we use it

We use it to compute which benefit programs your family may qualify for and to generate your report. We do not sell your data. We do not use your data to train third-party AI products. Parts of your free-text description are sent to a third-party AI model (reached via Amazon Bedrock, a US-based provider) to help extract structured details, but only after the identifiers listed above are stripped out first, so they are never transmitted. We never send your text to a model hosted in a jurisdiction we haven't vetted for data handling. Your email address is never sent to the AI model, shared with any AI system, or used for advertising.

Payment data

We never see or store your card details. Payment is handled entirely by Creem (creem.io), our Merchant of Record, under their own privacy policy. A Merchant of Record is a third-party company that legally sells our product on our behalf and handles the transaction, card processing, and sales tax, so it sees your payment details instead of us.

Analytics

On our public pages, before you sign in, we use two analytics processors: Google Analytics (Google LLC) and Microsoft Clarity (Microsoft Corporation). They receive the pages you visit, general device and browser information, and an approximate location derived from your IP address, never your name, email, or anything from your intake. Analytics never runs inside the signed-in app or the intake where you describe your family's situation, on any page, for any visitor. If you visit from the EU, the UK, or the EEA, we ask for your consent before either tool runs, and you can decline. Elsewhere, analytics runs by default and this page discloses it, consistent with our Cookie Policy.

Your rights over your data

From your account settings, you can request a full export of your data or request deletion of your account. When you request deletion, your account is deactivated immediately and your personal data is permanently deleted after a 30-day grace period. The delay is there in case you change your mind, and you can cancel during that window. After it passes, the data is gone for good, not merely hidden. Both actions ask you to confirm from a link we email you.

Sharing

You can generate a time-limited, revocable link to share your report with family members (e.g. a sibling helping coordinate care). You control when that link is created and can revoke it at any time from your dashboard. Aside from links you create, we share your information only with the processors needed to run the service: the AI extraction provider and our payment processor (both described above), and the email provider that sends your sign-in and report links. We don't sell your data or share it for advertising.

Sharing with care communities

When you send an inquiry through Get Bearings Iris, the community you contact receives your first name and your message, never the email address on your account. We never share your report, answers, or benefit details with a community unless you explicitly choose to.

Feedback outreach

The Get Bearings team may contact you by email with surveys or feedback requests about your experience, to help us understand what's working and improve the product. This isn't a recurring marketing list, and you can always decline to respond.

Changes to this policy

If we materially change what we collect or how we use it, we'll show the updated version at your next sign-in and ask you to acknowledge it.

Contact

Questions about your data? Email us at info@getbearings.us. For our company and registered-address details, see our Legal notice.

If you believe we have mishandled your personal data, you also have the right to lodge a complaint with a supervisory authority. If you are in the EU or EEA, you can complain to the supervisory authority where you live or work. Wherever you are, you can also reach our lead supervisory authority, the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon).