What data we collect
We only collect information that is necessary to provide the CalmCare service.
Account information
When you create an account, we collect your first name, last name, and email address. We store a secure hash of your password — we never store passwords in plain text and cannot read them.
Profile and preferences
To personalise your experience, we collect information about your care situation: your role, schedule type, work setting, experience level, and placement stage. You provide this voluntarily during onboarding and can update it at any time in account settings.
Assessment results
When you complete a communication assessment or style test, we store your answers and results. This information is used to personalise your dashboard recommendations and improvement path.
Usage data — update logs, schedules, and summaries
If you use features such as the family update log, weekly schedule, handoff notes, or weekly summary builder, the content you enter is stored against your account so you can access it across sessions.
Saved resources and template notes
Items you save to your library and notes you write on template pages are stored against your account.
Technical data
We collect standard server logs including your IP address and browser type when you access the platform. This is used for security, error monitoring, and service reliability. We do not use this data for tracking or profiling.
Why we collect it and our lawful basis
Under GDPR and applicable data protection law, we process your data on the following bases:
- Contract performance: Account information, profile data, and usage data are necessary to provide the CalmCare service you signed up for.
- Legitimate interests: Technical logs are processed to maintain platform security and reliability. We have assessed that this does not override your rights.
- Consent: Where we send you optional communications such as improvement tips or platform updates, we do so only with your consent. You can withdraw consent at any time.
How long we keep your data
- Account data: Retained for as long as your account is active. If you request deletion, your account and associated data are removed within 30 days.
- Assessment results and usage data: Retained while your account is active so your progress and history remain accessible.
- Technical logs: Retained for up to 90 days for security purposes, then deleted.
Who we share your data with
We do not sell your personal data. We do not share it with advertisers or third-party marketing services.
We use the following third-party service providers to operate the platform:
- Web hosting provider: Stores the platform files and database. Operates under a data processing agreement with us.
- Database hosting: Your account data and usage data are stored in a managed MySQL database operated by our hosting provider.
If you join through an employer or agency activation code, your employer or agency will know that you have an active CalmCare account. They will not have access to your assessment results, personal notes, update logs, or any content you create within the platform.
Cookies
CalmCare uses a single session cookie to keep you logged in while you use the platform. This is a strictly necessary cookie and does not track you across other websites. We do not use advertising, analytics, or third-party tracking cookies.
Your rights
Depending on where you are located, you may have the following rights regarding your personal data. To exercise any of these rights, email us at privacy@calmcareacademy.com.
- Access: You can request a copy of the personal data we hold about you.
- Correction: You can update your profile information directly in account settings, or contact us to correct any inaccurate data.
- Deletion: You can request that we delete your account and all associated personal data. We will action this within 30 days.
- Portability: You can request your data in a structured, machine-readable format.
- Objection: You can object to processing based on legitimate interests. We will assess your objection and respond within 30 days.
- Withdrawal of consent: Where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of prior processing.
If you are in the European Economic Area and believe we have not handled your data correctly, you have the right to lodge a complaint with your national data protection authority.
Data transfers
CalmCare is operated in the United States. If you access the platform from the European Economic Area or another region with data transfer restrictions, your data will be transferred to and processed in the US. We take steps to ensure appropriate safeguards are in place for such transfers.
Changes to this policy
If we make material changes to this policy, we will notify active members by email or through the platform before the changes take effect. The date at the top of this page reflects when the policy was last updated.
Questions or concerns: privacy@calmcareacademy.com
CalmCare is a product of Dreamweaver LLC.