Privacy Policy

Effective date: August 1, 2026

This policy explains what information Title22 (title22.app) collects, how we use it, and the choices you have. Title22 is a documentation and compliance tool for California residential care facilities, which we operate ("we," "us"). By using the Service you agree to this policy.

Your facility's records belong to your facility. We do not sell your data, we do not use resident or staff records for advertising, and we do not share them except with the service providers needed to run Title22, as described below. You can export or delete your data on request.

1. Information you provide

Account information — your name, email, password, and the facility details you enter when you sign up.
Billing information — handled by our payment processor (Stripe). We do not store full card numbers on our systems.
Facility records — the information your facility enters into the Service: resident records, staff and certification records, medication administration records, incident reports, daily care logs, compliance checklists, and training records. Some of this is health-related information about residents.

2. Information collected automatically

We use privacy-focused, cookieless website analytics (Cloudflare Web Analytics) to understand aggregate site usage. We keep basic technical logs needed to operate and secure the Service. We do not use third-party advertising or cross-site tracking cookies.

3. How we use your information

To provide the Service — store and display your records, run compliance checklists and readiness scoring, and manage team access.
To generate AI summaries and the daily briefing from the records in your account, when you use those features.
To process your subscription and send you account and service messages.
To secure the Service, prevent misuse, and meet legal obligations.

4. Resident and health-related information

Title22 stores resident records, which can include health-related information such as medications and care notes. We handle this information as confidential, restrict access to it through your facility's role settings, and process it only to provide the Service. Your facility's licensee and administrator remain responsible for obtaining any consents required to enter information about residents and staff. Title22 is a documentation tool and is not a HIPAA-covered entity; this policy does not create any HIPAA relationship.

5. AI features and your records

When you use the AI assistant or daily briefing, the relevant records from your account are sent to our AI provider (Anthropic) through their API solely to generate the response you asked for. That content is not used to train AI models. The AI never provides medication-dosage guidance and its output is informational only, as described in our Terms of Service.

6. Service providers we share with

We share information only with the providers that make the Service work, and only as needed for them to perform their function:

Supabase — secure database and account authentication.
Cloudflare — hosting, delivery, and security.
Stripe — subscription billing and payments.
Anthropic — the AI features described above.
Resend — sending account and service emails.

We do not sell your information, and we do not share it for advertising. We may disclose information if required by law or to protect the safety and integrity of the Service.

7. Data storage and security

Your data is stored with the providers above, protected in transit, and access is controlled through your facility's roles and our administrative controls. No online service can guarantee absolute security. Keep your login credentials safe, assign team roles carefully, and maintain your own copies of documents you are required to keep under your license.

8. Data ownership, export, and deletion

Your facility's records belong to your facility. You may request an export of your data, or request that we delete your account and its records, at any time by emailing [email protected]. We may retain limited information where required to meet legal, tax, or security obligations. If you are a California resident, you may exercise your rights to access or delete your personal information through the same contact.

9. Retention

We keep your records for as long as your account is active. After you close your account, we delete or de-identify your records within a reasonable period, except where we must retain limited information as noted above.

10. Changes to this policy

We may update this policy. We will post updates here with a new effective date and, for material changes, notify account holders by email. Continued use after changes take effect constitutes acceptance.

11. Contact

Questions or requests: [email protected]