Security & privacy
Trust is part of the product.
HealPlay™ is built for organizations that answer to the people in their care, to families, to boards and to regulators.
Role-based access
Every person sees only what their role allows, enforced in the database rather than by hiding buttons.
Tenant separation
Each organization's records are isolated. One organization can never read or change another's data.
Secure authentication
Modern email and password sign-in with confirmation and self-service password reset.
Audit controls
Configuration and access changes are recorded so administrators can review who changed what.
Minimum necessary data
Activity experiences run without names or records. We collect the least we need, and no clinical information.
What we deliberately do not collect
- No diagnoses, conditions, treatments or clinical notes.
- No identifying details in shared family activities.
- No advertising, tracking for advertising, or data sale — ever.
- No account required to use an activity at the bedside or in a program room.
Questions from your security team
We're glad to walk through architecture, access control, hosting and data handling with your IT, privacy or compliance team before any pilot.
HealPlay™ supports engagement, positive distraction, creativity and connection during time in care. It is not a medical device and makes no diagnostic, therapeutic or treatment claims. Always follow your care team's guidance.