Privacy Policy

1. Introduction

CarePulse ("we," "our," or "us") provides a care coordination app that helps families track check-ins for loved ones. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and related services (collectively, the "Service").

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

2. Information We Collect

Account Information

When you create an account, we collect your email address and display name. You may optionally provide a profile photo.

Care Team Data

When you create or join a care team, we store team membership information, the display names of loved ones you add, and check-in records (including timestamps, method of check-in, and optional notes).

Device Information

To deliver push notifications, we collect your device's push notification token and platform type (iOS or Android). We also collect basic device information for crash reporting and analytics.

Usage Data

We may collect anonymous usage statistics to improve the Service, such as which features are used most frequently. This data is aggregated and cannot identify individual users.

Purchase Information

If you subscribe to CarePulse Circle, your payment is processed entirely by Apple (App Store) or Google (Google Play). We do not collect or store your credit card information. We receive only a transaction identifier to verify your subscription status.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Send push notifications about check-in alerts and team activity
• Process and manage your subscription
• Respond to your requests and support inquiries
• Detect and prevent fraud or abuse
• Comply with legal obligations

We do not sell your personal information. We do not use your data for advertising. We do not share your data with third-party data brokers.

4. Data Sharing

We share information only in the following circumstances:

• Within your care team: Team members can see check-in records, loved one names, and team membership for the teams they belong to.
• Service providers: We use Supabase for hosting and database services. Your data is stored securely on their infrastructure.
• Legal requirements: We may disclose your information if required by law, court order, or governmental authority.

5. Data Security

We implement industry-standard security measures to protect your data, including:

• Encryption in transit (TLS/HTTPS) and at rest
• Row-level security policies on all database tables
• Authenticated API access with JSON Web Tokens
• Secure password hashing

While we strive to protect your information, no method of electronic storage is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your data for as long as your account is active. If you delete your account, we permanently delete your profile, team memberships, and associated data within 30 days. Some data may be retained in encrypted backups for up to 90 days before being purged.

7. Your Rights

You have the right to:

• Access your personal data stored in the Service
• Correct inaccurate information via your profile settings
• Delete your account and all associated data at any time from the app's Settings screen
• Export your data by contacting us at the email below
• Withdraw consent for push notifications via your device settings

If you are a resident of the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR), including the right to data portability and the right to lodge a complaint with a supervisory authority.

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to deletion, and the right to opt out of the sale of personal information. We do not sell personal information.

8. Children's Privacy

The Service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us immediately.

9. Not a Medical Service

CarePulse is a care coordination tool for families. It is not a medical device, healthcare provider, or HIPAA-covered entity. The Service does not collect, store, or transmit protected health information (PHI). It should not be used as a substitute for professional medical care or emergency services. If you have a medical emergency, call 911.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy in the app and updating the "Last updated" date above. Your continued use of the Service after changes constitutes acceptance of the revised policy.

11. Contact Us

If you have questions about this Privacy Policy or your data, contact us at:

privacy@carepulseapp.com