Privacy policy

A simple, honest privacy notice.

This website provides general information, receives privacy-conscious inquiries, and optionally supports customer accounts for families, guardians, and referral contacts.

Information you choose to provide

The inquiry form may collect your name, email, phone number, inquiry type, preferred contact method, timeframe, and general message. Customer registration may collect full name, email, password, optional phone number, contact type, and acknowledgment of this notice. Do not include medical records, diagnoses, medications, care plans, insurance identifiers, admission documents, or other sensitive resident information.

Supabase Auth and customer profiles

Customer authentication is managed by Supabase Auth. Passwords are handled by the provider and are not stored by this website or in the customer profile table. The minimal profile table contains the authenticated user ID, full name, optional phone, contact type, privacy acknowledgment metadata, and timestamps. Row Level Security restricts profile access to the authenticated customer’s own record.

Cookies and sessions

Cloudflare Pages Functions use Secure, HttpOnly, SameSite cookies to maintain the Supabase session. Authentication and account pages do not send passwords, tokens, or profile data to analytics. The site does not use localStorage for authentication tokens.

Form provider

When an external HTTPS form endpoint is configured, submitted inquiry information is sent to that provider. Ayona Amen LLC must confirm the provider, retention practices, privacy terms, and data-processing responsibilities before launch.

Analytics

Analytics remain disabled unless a public analytics identifier is configured. Form and account values must not be sent to analytics.

Retention and deletion

Retention periods, account deletion, profile deletion, Supabase data-processing terms, and the privacy contact are not yet confirmed. The owner must approve those procedures and update this notice before public launch.

Questions

Privacy contact details will be added when the business supplies them. This notice requires owner and legal review before public launch.