Privacy Policy
Effective October 30, 2026. Last updated: October 30, 2026.
This policy explains how G&G AI Group LLC ("G&G", "we", "us"), a North Carolina limited liability company (SOSID 3414669), 65 Boxer Run, Brevard, NC 28712, handles information in the Survey Ready 365 Mock Survey app (the "App"). Contact: support@ggaigroup.com.
1. Short version
- The App is a practice and education tool for nursing home staff. It is not a place to store or process resident information.
- Scoring, answers and the work plan run on your device. We do not have user accounts, and we do not store your answers, documents, document text, photos or AI results on our servers.
- Not everything stays on your device. If you use the optional AI paper check, the text you approve is sent through our server to Cloudflare Workers AI for processing. License checks also send limited data to our server (see Section 3).
- Upload policies and blank or de-identified forms only. Do not upload or enter protected health information (PHI) or other personal information about residents, patients, family members or staff.
- Photos are not accepted for the AI check until on-device redaction of photos is available. Use pasted text or text-based PDF, Word or text files, which are redacted on your device before you approve them.
- G&G is not a HIPAA business associate of your facility, and we do not sign Business Associate Agreements (BAAs). The App is not designed or offered for PHI.
2. What stays on your device
- Your facility profile, answers, ticks, results and work plan are kept in your browser's memory while the App is open.
- If you turn on "Keep my work in this browser", they are saved in your browser's local storage on that device only. You can turn this off or use "Start over" to delete them.
- "Save to a file" creates a file on your device. We never receive it unless you send it to us.
- A random device ID and your unlock code or license key are stored in your browser so the App can confirm your license.
3. What is sent to us or our providers
AI paper check (optional, text). The App blacks out likely resident details on your device using a pattern check, shows you the result, and sends it only after you tap Approve. The approved text and the checklist item it is checked against go to our server (which runs on Cloudflare Workers). Our server runs a second redaction pass and then sends the text to Cloudflare Workers AI. We do not store or log the document text or the AI's answer. Redaction is automated and can miss things.
Photos. The App does not currently send photos to the AI check; photo uploads are turned off until they can be redacted on your device. We will update this policy before that changes.
Usage totals. We count anonymous daily totals of feature use (no personal info) to improve the app.
License checks. When you unlock the App, your unlock code or Payhip license key and a random device ID are sent to our server and stored in our license database (hosted on Cloudflare) so we can limit each license to 2 devices and turn off refunded or misused licenses. Payhip license keys are re-checked with Payhip from time to time.
Abuse protection. To stop abuse, our server keeps a count of unlock attempts per IP address in 10-minute windows (IPv6 addresses are shortened to a network range). These records are deleted automatically within 24 hours.
Refund notices. When a purchase is refunded, Payhip sends our server a notice (including the order ID, buyer email and license key). We use the license key to turn off that license and do not store the email.
Basic web traffic. Our hosting provider, Cloudflare, receives standard request information such as IP address, browser type and request time to deliver and secure the service.
4. Cloudflare (our service provider)
We use Cloudflare, Inc. to host the App and our server, store license records, and run the AI model through Cloudflare Workers AI. Cloudflare acts as our service provider (processor) for this content. Based on Cloudflare's published terms as of the date above: - Cloudflare states that, for standard Workers AI requests, it does not retain inputs or outputs after they are no longer needed to process the request and deliver the response, subject to limited exceptions (for example, legal or security obligations). Cloudflare may keep operational metadata such as timestamps, request sizes and status codes, which does not include the content itself. - Cloudflare states that it does not use Workers AI customer content to train AI models. - We do not turn on Cloudflare features that would store your content (such as AI Gateway logging or application logs of document text).
Sources: Cloudflare Workers AI "Data usage" (https://developers.cloudflare.com/workers-ai/platform/privacy/); Cloudflare Service-Specific Terms, Workers AI section (https://www.cloudflare.com/service-specific-terms-developer-platform/); Cloudflare Privacy Policy (https://www.cloudflare.com/privacypolicy/). Cloudflare's terms may change; please review them directly. The AI model is a third-party open model run by Cloudflare. We do not have a BAA with Cloudflare for this App, which is another reason PHI must never be sent.
5. Purchases (Payhip)
Purchases are made through Payhip, an e-commerce platform, with payments processed by its payment processors (such as Stripe or PayPal). They receive your name, email, billing and payment details under their own terms and privacy policies (https://payhip.com/privacy). We never see your full card number. We receive order details from Payhip (for example your email, order ID and license key) to provide support, confirm licenses and handle refunds.
6. What we do not do
- We do not sell or rent personal information, and we do not "share" it for cross-context behavioral advertising.
- We do not use advertising trackers or analytics cookies in the App.
- We do not want and do not intentionally collect PHI or information about residents.
7. If PHI or personal information is entered anyway
Stop using the AI check and contact us at support@ggaigroup.com. Because we do not store document text, photos or AI results, we generally have nothing to delete. Your facility remains solely responsible for its own HIPAA obligations, including deciding whether an incident is a reportable breach.
8. How long we keep information
- Document text, photos and AI results: not stored by us.
- License records (code or key, device IDs, dates, status): for as long as the license is active and a reasonable time after, for fraud prevention, refunds and records.
- Unlock-attempt counts by IP address: deleted automatically within 24 hours.
- Support emails: as long as needed to help you and keep business records.
9. Your choices and rights
You can clear App data from your browser at any time. You may ask us to access or delete license or support information we hold about you by emailing support@ggaigroup.com. Depending on where you live, state privacy laws may give you additional rights; we will honor requests as required by applicable law.
10. Security
We use reasonable safeguards, including encrypted connections (HTTPS), and we keep stored data to a minimum. No system is perfectly secure.
11. Who the App is for
The App is for business use by adults (18 or older) working in or with long-term care facilities. It is not directed to children, and we do not knowingly collect information from anyone under 18.
12. Changes
We may update this policy. We will change the "Last updated" date and, for material changes, post a notice in the App or on our website. Continued use after an update means you accept the updated policy.
13. Contact
G&G AI Group LLC, 65 Boxer Run, Brevard, NC 28712 ยท support@ggaigroup.com
← Back to Survey Ready 365 · Privacy · Terms · Not affiliated with CMS