1. Scope and who we are
FactAlly is a brand operated by Handful of Ideas. In this Privacy Policy, “FactAlly,” “we,” “us,” and “our” refer to the operator of the FactAlly website and the services described here. This policy explains the information handled when you visit our website, use an interactive experience, contact us, or use an available FactAlly product. It also explains your choices and how to submit a privacy request.
Our public website introduces Healthcare Screening and Family Lookout and includes interactive experiences. An interactive experience is not a live screening, monitoring, account, or payment service. Descriptions of account, roster, billing, or monitoring information below apply only when a corresponding feature is actually available and used; they do not mean every described feature is currently offered. If a separate customer agreement or product-specific privacy notice applies, we identify it when that service is offered.
2. Information we collect
Information you provide. When you use our Contact page, we receive your name, reply email, selected topic, message, and a submission reference. If you request support, report an issue, suggest a feature, or correspond with us, we receive the content of that communication and information needed to follow up. Please provide only what is needed for your request. Do not send passwords, full payment-card numbers, government identification numbers, patient records, or sensitive information about a child through the general contact form.
Technical information. Serving and protecting a website involves processing technical request information such as an IP address, browser and device information, requested pages, request times, and security or error events. Our hosting and delivery providers may process this information in their systems. A form submission also includes the site origin and a unique request identifier used to handle the submission and reduce duplicate delivery.
Account and service information, when offered. An available account or product may require contact and organization details, authentication information, preferences, plan information, support history, and records of actions taken in the service. A screening or monitoring feature may process the identifiers, professional details, organization details, places, roster entries, or other subjects you choose to submit, together with source results, review decisions, and change history. We do not ask you to submit unrelated sensitive information just because a product concerns healthcare or families.
Payment information, when paid services are offered. A payment provider may process payment credentials and return billing status, transaction identifiers, plan details, and limited payment-method information needed to administer the service. The payment methods and provider will be disclosed at checkout. The current public preview does not itself collect payment-card details.
3. Where information comes from
Information comes from you, people authorized to act for your organization, the browser or device interacting with the website, service providers supporting the website, and sources used by a product you actually access. For information products, sources may include government agencies, public registries, professional directories, and other identified data providers. Public availability does not mean a record is necessarily accurate, current, complete, or about the person you intended to find.
When an organization provides information about other people, that organization is responsible for having the authority and required notices or permissions to provide it. We may receive information about someone who has never visited our website if an authorized customer submits that person as a service subject or an applicable source contains a relevant record. Product-specific notices describe additional processing when such services become available.
4. How information is used
We use information to serve and secure the website; receive, route, and respond to requests; provide the product features you request; administer accounts and subscriptions when available; deliver relevant service communications; troubleshoot failures; prevent fraud, abuse, and duplicate submissions; maintain appropriate records; resolve disputes; and meet applicable legal obligations. We may use feedback to improve the clarity, accessibility, and usefulness of our products.
A selected contact topic is used to identify the nature of your request. For example, “Privacy request” identifies a request about information or privacy rights, while “Information correction” identifies a concern about a record or its presentation. Do not use a marketing or general-support request to send a complete screening file when a brief description is enough.
We do not make an employment, housing, credit, insurance, medical, credentialing, or safety decision for you. A potential record match, review state, or alert is information for further assessment; it is not a determination about identity or eligibility.
5. When information is disclosed
Service providers. We disclose information to providers that perform services needed to operate the website or a feature you request, such as hosting, secure message delivery, authentication, payment processing when available, technical support, and security. For the present website, contact and feedback messages are handled through our hosting/function infrastructure and email-delivery provider. These providers receive the information needed to perform their role.
Your organization and your instructions. In an organization account, authorized administrators or colleagues may be able to access information and activity associated with that organization according to their permissions. We may disclose information when you direct us to do so, connect an integration, request an export, or authorize another person to act for you.
Legal and safety purposes. We may disclose information when reasonably necessary to comply with applicable law or legal process, respond to a lawful authority, protect rights or safety, investigate abuse, enforce an agreement, or defend a claim. If the business or relevant assets are involved in a merger, acquisition, financing, reorganization, or transfer, related information may be reviewed or transferred subject to applicable protections.
The current public website does not install advertising analytics, advertising pixels, or cross-context behavioral advertising trackers. Contact submissions are used to handle requests, rather than sold as marketing leads. Future commercial data products may involve different categories of records and recipients; those practices must be described in an applicable notice before that processing begins. This policy is not a claim that every public record is exempt from privacy law.
7. How long information is kept
We keep information for the period reasonably needed for the purpose for which it was collected, taking account of the type and sensitivity of the information, the relationship with you, whether a request remains open, contractual requirements, security needs, limitation periods, and applicable recordkeeping obligations. This policy does not establish a single fixed retention period for every category.
Contact and support communications may be retained to answer follow-up questions, document how a request was resolved, prevent repeated abuse, and maintain business records. Technical logs are retained according to operational and provider requirements. If paid or account services are offered, transaction, service, and audit records may have different retention periods described in the service terms or applicable agreement.
Deletion may not immediately remove information from protected backups, records subject to a legal hold, fraud-prevention records, or information we are required or permitted to retain. In those cases, retained information remains subject to appropriate restrictions until it is deleted or no longer required. Deleting information from FactAlly does not delete the underlying record maintained by an independent public source.
8. Security and sensitive information
We use measures intended to reduce unauthorized access, misuse, and loss, and limit access according to operational need. No website, delivery channel, or storage system can be guaranteed completely secure. You are responsible for protecting account credentials, using appropriate access controls, and sharing only information you are authorized to share.
The general contact form is not a channel for patient medical records, confidential clinical information, financial account credentials, or extensive identifying information about children. If an issue requires sensitive details, describe the issue briefly and ask us to arrange an appropriate method. Report a suspected vulnerability using Contact → Security concern without attempting to obtain other users’ information or disrupt the service.
A healthcare-focused product is not by itself a representation that every use of the website is covered by HIPAA, that a business associate agreement is in effect, or that patient information may be uploaded. Any required agreement and supported data categories must be established before such processing.
9. Children and family information
FactAlly’s website and account services are intended for adults, including parents, guardians, and authorized professionals. Family Lookout is intended to help an adult understand relevant information, rather than to provide an account for a child. Children under 18 should not create an account or submit information through the website.
We do not knowingly solicit personal information directly from children under 13 through the public website. If you believe a child has submitted personal information to us, choose Contact → Privacy request and describe the concern without repeating unnecessary sensitive information. We will review the situation and take appropriate steps under applicable law.
An adult should submit information about a child only when a supported feature requires it and the adult has the necessary authority. Do not send a child’s full identity documents, school schedules, precise location, medical records, or other sensitive information in a general inquiry. Product descriptions do not authorize covert tracking or monitoring of another person.
10. Your choices and privacy requests
You can choose not to submit a contact form, limit what you provide, adjust browser settings, and use any preferences available in a product you access. If you want to access, correct, delete, or obtain a copy of information we hold about you, or ask us to limit or stop a use, select Contact → Privacy request. State the nature of the request and the relationship you have with FactAlly. You do not need to create an account merely to submit a privacy inquiry.
We may ask for information reasonably necessary to verify identity or authority before disclosing or changing personal information. Do not submit identity documents unless we specifically arrange an appropriate method. An authorized agent may need to establish their authority and, where required, have you verify the request. Verification requirements depend on the request and the information involved.
We consider requests under the law that applies to the person and processing involved. Some rights have exceptions, including information needed to provide a requested service, protect security, comply with law, maintain protected records, or respect another person’s rights. If a request cannot be fully honored, we will explain the response as required by applicable law.
11. California and other regional rights
Depending on where you live and whether a particular privacy law applies to FactAlly and the processing at issue, you may have rights to know or access categories and specific pieces of personal information; understand its sources, purposes, and recipients; correct inaccuracies; request deletion; obtain a portable copy; restrict certain uses of sensitive information; and opt out of covered sales, targeted advertising, sharing for cross-context behavioral advertising, or certain profiling. We do not treat these rights as applying identically to every person or every record.
To exercise an applicable right, use Contact → Privacy request and identify the right you wish to exercise. If you want to opt out of a covered sale or sharing activity, say so in the message. We will assess the request and provide any further required method or instructions. We do not require a paid subscription to ask about your rights.
Where applicable law provides an appeal, you may appeal a denied request through the same Contact topic by identifying the earlier request and the reason for your appeal. We will respond within the applicable legal timeframe. You may also contact the relevant privacy regulator. We will not unlawfully discriminate against you for exercising an applicable privacy right.
12. Questions about source records and identity
If a record appears to be inaccurate, outdated, or associated with the wrong person, select Contact → Information correction. Identify the relevant product, source, record reference, and a brief explanation. Do not send a full identity file through the general form. We may need to verify the concern and distinguish an error in our display from an error maintained by the original source.
Independent sources control their underlying records and correction procedures. Correcting a presentation or match in FactAlly may not change a government, licensing, court, registry, or other third-party record. We may direct you to the source’s correction process where necessary. A similar name alone does not establish that two records concern the same person.
13. Location of processing and third parties
FactAlly is operated from the United States. Information may be processed in the United States or other locations where our providers operate. Privacy rules in those locations may differ from those where you live. Where a particular transfer requires additional safeguards under applicable law, the required arrangements must apply to that processing.
Links to government sources, payment providers, third-party services, or Handful of Ideas may take you outside FactAlly. Those operators’ own notices govern information they collect directly. This policy does not control another operator’s systems, records, retention practices, or response to your request.
14. Changes to this policy
The effective date appears at the top of this page. We may update this policy when website features, practices, providers, or applicable requirements change. We will post the updated version here and use additional notice or obtain consent where required. A future product feature will not be treated as already operating solely because its possible information categories are described in this policy.
For a question about this policy, an accessibility need relating to a privacy request, or a concern about information handling, use Contact → Privacy request. If you are acting for an organization or another person, identify that relationship so we can route the request correctly.