Your privacy matters.

From a giver: an email address for the receipt, and if you make an account, a password. If you write a note, its text and the name you sign it with. If you follow somebody, that you follow them.

From a person who applies: their first name, a short address for their page, a photo if they add one, their story, what the money is for, and the documents below. Their public page shows only what they choose to show. Their last name and their email are never shown to anybody.

From everybody: the pages you open and when, so the service works and so a person can see how many visits and gifts came from sharing their page, as a number, never who.

A person’s diagnosis, treatment plan and doctor’s letters are health information. We collect it for one reason: to verify that the person really is in treatment before anybody gives them money.

It is shown only to the person and to our review team. It is never on a public page, never in a link preview, never in an email to a giver. The cancer type a person chooses to show on their page is theirs to show.

HIPAA mostly does not apply to a service collecting from its own users, but we protect this information as if it did.

The identity check runs through Stripe Identity. We keep the result, not the ID itself.

Doctor’s letters, treatment plans and bills are stored in private storage that only the person and the review team can open, through a link that expires. There is no public address for a document, ever. They are deleted with the account.

Cards are handled by Stripe. We never see or store a card number. Stripe keeps what the law requires of a payment company; their privacy policy covers that.

Payouts run through Stripe Connect. A person’s bank details live with Stripe, not with us. A giver never sees where a gift is paid.

Every person has a short address, and anybody may share it. The link preview shows their photo, their first name and one line in their words. It never shows health details, figures or anything else.

We count how many visits and gifts came from shares and show the person the number. We do not tell the person, or anybody, who visited or who gave, unless a giver signed their note.

We never sell your data. We never show ads. We never share health information with anybody but the person and the review team, except when the law requires it of us. We never give a giver’s email to a person, or a person’s email to a giver. We never allow direct messages between them.

We use a few providers to run the service: Supabase for accounts and storage, Stripe for money and identity, and an email provider for receipts and letters. Each one sees only what it needs for its job.

You can delete your account at any time in Settings. Deleting removes your account, your documents, your health information, your story, your updates, the notes you received and the people you follow. It really deletes: the rows and the files are gone, not hidden.

Gifts stay as ledger rows for the books, with your name removed. Letters you sent stay with the gift they came with, with your name removed. Stripe keeps its own records of payments as the law requires.

You can ask us for a copy of your data, or for a correction, at any time.

You choose what your page shows: your photo, your supporter count and your lifetime total. A note that came with a gift is never shown; only you read it. You can turn off email updates to your supporters, and a supporter can turn off updates from the people they follow.

You can follow and unfollow anybody at any time. You can pause or stop a monthly gift at any time. You can report a page, an update or a note, and the person never learns who did.

Dreamt Awake is for adults. Nobody under 18 may hold an account, give or apply. If we learn that a child has given us information, we delete it.

When the words here change in a way that matters to you, we tell you by email before the change takes effect, and the date at the top changes. Small corrections happen without a note.

Questions about privacy go to privacy@carerelief.org. We answer within two business days.