Your data
What we hold, what we never hold.
Care Wizard holds information about your staff and your homes — training dates, screening dates, drills, inspections. It holds nothing about the people you serve. No names, no diagnoses, no medication records, no service notes. That is a structural line, not a setting: the build itself fails if anybody tries to add a field for it.
Most software in this industry is built around the people you support. Care Wizard deliberately is not, and almost everything on this page follows from that one decision.
Do I need a medical-privacy contract to use this?
No. The federal medical-privacy law people mean when they say HIPAA is about health information belonging to the people you serve. We never receive any, so there is no medical-privacy contract to sign, no IT department to get through, and nothing to buy before you start. You can be running this afternoon.
One thing worth knowing, whoever you are shopping: there is no government certificate for that law. No vendor can be “certified” under it, and any that says so is describing something else. What a vendor can tell you is what they hold and how they protect it, which is what the rest of this page does.
What we hold
- Your staff members' names, roles and hire dates
- Which trainings each one has done, and when they expire
- Background screening dates and status
- Driving record and license dates, where the role needs them
- Your homes, and their drills, extinguisher checks and inspections
- Documents you upload — certificates, cards, inspection reports
This is real personal information about your employees, and we treat it that way.
What we never hold
- Anything at all about the people you serve — no names, no initials, no addresses
- Diagnoses, medical records or medication passes
- Service notes, progress notes, support plans or monthly summaries
- Medicaid claims — we never touch a claim
- Card numbers. Those go to Stripe and never reach us
Notes fields warn against resident names for the same reason. If you find somewhere that lets you type one in, tell us and we will fix it.
How the staff records are protected
Encrypted going and sitting still
Your records are encrypted in transit and at rest by our infrastructure providers.
One business cannot see another
Every record is isolated at the database level, business by business. It is not a filter applied in the app that somebody could forget to write — the database itself refuses the read.
Two-factor, if you want it
Turn on two-factor from your account settings and a password alone will not get anybody in. It uses a standard authenticator app.
We do not go looking
Our own access is limited to what is needed to run and support the service. Care Wizard is built by people who also run Florida APD group homes, and we do not review or use your records to compete with you.
Yours to take, yours to delete
Export your data whenever you want. Ask us to delete it and we will — some may sit in encrypted backups for a limited period before those expire.
Never sold. Not once.
We do not sell, rent or trade your information, and we do not share it with anyone for their own purposes. That is in the terms you sign, not just on a page.
Who else touches it
Three companies, and only to run the service:
- Supabase — stores the database and handles logins
- Vercel — runs and serves the application
- Stripe — takes the payment — card numbers go to them, never to us
The full list, including how long things are kept, is in our privacy policy.
What we do not claim
Because a page like this is only worth reading if it says the unflattering part too:
- We hold no formal security certifications, and we are not going to imply otherwise with a badge.
- We do not promise you will pass an inspection or a review. We show you what is due and what changed; the work stays yours.
- Staff records are personal information, and no system removes your own responsibility for who you give access to inside your business.
Question this page does not answer? Email info@carewizard.ai and a person who runs group homes will answer it.