Privacy Policy

We collect information you voluntarily provide when you use our platform, including:

• Parents & Families: Name, email address, phone number, child's name and age, diagnosis information, insurance details, and service preferences.
• Professionals: Full name, contact information, professional license number, license expiration date, licensed states, certifications, bio, service offerings, and profile photo or video.
• Organizations: Organization name, contact information, service interests, and staff size.
• Payment Information: Billing details are collected and processed directly by Stripe, our third-party payment processor. Pitimi Care does not store credit card numbers or full payment credentials on our servers.
• Usage Data: Pages visited, features used, and other interaction data collected automatically to improve your experience.

We use the information we collect solely to operate and improve the Pitimi Care platform. Specifically, we use your information to:

• Connect families with qualified autism support professionals.
• Process bookings, consultations, and subscription payments.
• Send appointment confirmations, reminders, and service-related communications.
• Maintain and verify professional credential listings.
• Improve platform features, safety, and user experience.
• Respond to inquiries and provide customer support.
• Comply with applicable laws and professional licensing requirements in Texas and other licensed states.

We do not share personally identifiable information with third-party advertisers, data brokers, analytics vendors, or any other commercial entities. The only limited circumstances in which data may be disclosed are:

• Stripe (Payment Processing): Payment data is transmitted securely to Stripe to process transactions. Stripe is PCI-DSS compliant. We do not receive or retain your full payment card details.
• Legal Compliance: We may disclose information if required by law, court order, or governmental authority, or to protect the rights, safety, and property of Pitimi Care or its users.
• Business Transitions: In the unlikely event of a merger, acquisition, or sale of assets, user data may be transferred — and users will be notified in advance.

In all other cases, your information stays within the Pitimi Care platform.

We take the security of your personal and health-related information seriously. Our security measures include:

• Encrypted data transmission via HTTPS/TLS on all pages and API calls.
• Secure, access-controlled databases with role-based permissions.
• Stripe's PCI-DSS Level 1 certified infrastructure for all payment data.
• Regular security reviews and monitoring of our platform.

Pitimi Care is not a covered entity under HIPAA in its capacity as a directory and scheduling platform. However, we apply HIPAA-aligned data handling principles as a best practice. Professionals using our platform for clinical services are responsible for their own HIPAA compliance obligations.

We use minimal, essential cookies to maintain your session and improve platform performance. We do not use third-party tracking cookies for advertising purposes. Essential cookies include:

• Session authentication cookies to keep you logged in.
• Preference cookies to remember your settings.

You may disable cookies in your browser settings; however, some features of the platform may not function correctly without them.

Pitimi Care is designed for use by parents, caregivers, and professionals — not directly by children. We do not knowingly collect personal information from children under the age of 13. Information about a child (such as name, age, or diagnosis) is provided by a parent or legal guardian and is used solely to facilitate service coordination. If you believe a child's information has been submitted without parental consent, please contact us immediately so we can remove it.

You have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Update or correct inaccurate information in your profile at any time.
• Deletion: Request deletion of your account and associated personal data. Requests will be honored within 30 days, subject to legal retention requirements.
• Opt-Out: Unsubscribe from non-essential communications at any time using the unsubscribe link in our emails.
• Data Portability: Request an export of your data in a machine-readable format.

To exercise any of these rights, contact us at privacy@pitimicare.com.

We retain your personal information for as long as your account is active or as needed to provide services. Professional profiles and booking records may be retained for up to 3 years after account closure to comply with professional licensing and audit requirements. Payment records are retained as required by Stripe and applicable financial regulations. You may request deletion of your data at any time (see Section 7).

Our platform may contain links to external websites, such as professional licensing boards, insurance resources, or community organizations. This Privacy Policy does not apply to those third-party sites. We encourage you to review the privacy policies of any external sites you visit.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify users via email. Your continued use of the platform after such changes constitutes acceptance of the updated policy.