OpenWolf Privacy Policy

Effective date: July 4, 2026

OpenWolf (the "Service") is a private family caregiving application that consolidates a patient's appointment information into a shared family calendar. This policy explains what information the Service collects, how it is used, and the choices you have. We collect the minimum information needed to operate the Service, and we never sell or share your information for advertising.

1. Information We Collect

• Appointment information from sources an authorized user connects: appointment-related emails, forwarded text messages, and appointment records retrieved from patient portals via patient-authorized APIs (such as FHIR Appointment and Patient resources). This may include appointment dates and times, provider and clinic names, locations, and the patient's name.
• Account and connection information: contact email addresses of family members using the Service and the authorization tokens needed to maintain connections you have approved.

We do not collect clinical records beyond what is needed to identify appointments (we do not retrieve lab results, medications, clinical notes, or diagnoses).

2. How We Use Information

• To identify, deduplicate, and track changes to appointments (including automated processing of message text to extract appointment details).
• To display appointments on a consolidated family calendar and connected displays, and to sync them to calendar services the family chooses (such as a shared Google or iCloud calendar).
• To notify family members of new, changed, or cancelled appointments.

We do not use your information for advertising, and we do not sell it to anyone.

3. Automated Processing

The Service uses third-party AI language-model APIs to extract appointment details from connected messages. These requests are made under zero-data- retention terms: message content sent for processing is not retained by the AI provider or used to train models.

4. How Information Is Stored and Protected

Data is stored in the United States, encrypted in transit and at rest. Portal authorization uses industry-standard OAuth 2.0 with rotating refresh tokens; the Service never sees or stores portal passwords. Access to the Service is limited to the family members the account holder authorizes.

5. Sharing

Appointment information is shared only with: (a) the family members authorized on the account; (b) calendar services the family connects (e.g., Google Calendar); and (c) service providers used to operate the Service (hosting and AI processing as described above), solely to provide the Service. We do not disclose information to any other third parties except as required by law.

6. Your Choices and Rights

• Disconnect anytime. You may disconnect any data source at any time — including revoking portal access from within your patient portal (e.g., MyChart) account settings, which immediately ends the Service's access.
• Deletion. You may request deletion of all stored data at any time by contacting us; data is deleted within 30 days.
• Access. You may request a copy of the data the Service holds about you or your family member.

7. Note on HIPAA

OpenWolf is a consumer caregiving tool that receives information at the direction and authorization of the patient or their legal proxy. It is not a healthcare provider or health plan and is not a HIPAA covered entity; information you direct to the Service is protected under this policy and applicable consumer privacy laws.

8. Changes to This Policy

We may update this policy from time to time. The current version will always be available at this URL, with its effective date noted above. If we make material changes, we will notify account holders by email.

9. Contact

Privacy questions or requests: jerry@sparklabsprojects.com