Data practices
What we store and who can see it
A plain-language description of the information HealPlay™ holds, the boundaries around it, and how an organization gets it back or has it removed. This is a general description for review purposes, not legal advice, and your agreement with us governs if the two ever differ.
What we store
Organization set-up
Organization name, care setting, facilities, programs or units, preferred wording, branding and the work contact details of the people invited to run the platform.
People taking part
A display name or preferred name, an age zone, comfort and accessibility preferences, chosen interests and optional free-text engagement notes written by staff. No diagnoses, medications, treatment plans or clinical records.
Activity use
Which activity was opened, when, for how long, in which facility or program, whether it was individual, group or family, which comfort settings were on, and optionally which device was used.
Family connections
The family member's name, email, optional phone number, relationship, what they are permitted to do, and when they accepted their invitation.
Administrative records
Sign-in accounts, roles and scope, an activity log of significant administrative actions, support requests, and a record of suspicious events such as invalid join codes.
How it is protected and used
One organization never sees another
Every record belongs to exactly one organization, and that boundary is enforced by the database itself, not only by what the screens show. A person can only reach the facilities and programs they were explicitly given.
Family access is narrow and time-limited
A family invitation is single-use, expires, and can be suspended or revoked. It grants only the specific permissions the organization chose, and it never opens up records or administrative screens.
Reporting is aggregated
Dashboards and reports describe engagement patterns — participation, popular activities, active facilities and programs, session mix, accessibility take-up, devices and time-of-day. They are not clinical measures and do not compare one organization against another.
Internal commercial notes stay internal
Pricing discussions, negotiation notes, proposals and pipeline records are visible only to HealPlay platform staff. Organization administrators see their own plan, limits, usage and renewal date.
Kept only as long as it is useful
Each organization sets how long detailed activity history is retained. Set-up records are kept while the account is active. An organization can ask for an export or a deletion at any time, and we prepare it as a documented, logged request.
In the browser
The activity experiences remember comfort settings, favourites and progress on the device itself so they keep working through poor connectivity. Sign-in details are held by the browser only for as long as the session lasts.
No advertising, no selling
We do not sell information, we do not use it for advertising, and we do not use one organization's information to build products for another.
What we do not claim
HealPlay™ is an engagement and digital activity platform. It is not a medical device, it does not measure or diagnose any condition, and it makes no treatment claims. We do not assert any certification or regulatory status on this page — ask us for our current documentation and your own legal and privacy teams should review it against your requirements.
HealPlay™ supports engagement, positive distraction, creativity and connection during time in care. It is not a medical device and makes no diagnostic, therapeutic or treatment claims. Always follow your care team's guidance.