Privacy Policy

1. Information We Collect

• Identity Data: Name, verified email address, and encrypted phone number.
• Care Data: Tasks, appointments, and medication schedules (MTR) you explicitly log.
• Vitals & Health: Health metrics shared within your Circle (protected with encryption and role-based access controls).
• Safety Data: Temporary geofencing and SOS location data, stored only during active incidents.

2. Regulatory Compliance (2026 Standards)

3. Data Retention & Deletion

You own your data. Right to Deletion: you can request deletion of your account and associated data at any time — see Account Deletion for how to request it and what happens next.

When a verified request completes, we delete login access, authentication credentials, active sessions, device registrations, push subscriptions, active location and geofence access, and personal information not covered by a valid retention requirement.

Some information may be retained: qualifying shared care history for up to three years under CareCircle's own company retention policy, which is not a HIPAA requirement; provider-controlled records under an applicable agreement, business associate agreement or law; information under a research or legal hold until released; and required compliance documentation for six years where those obligations apply to us. Deleted information can also persist in routine system backups until those backups age out on our provider's normal cycle. Retained data is access-restricted, is never used for advertising or unrelated profiling, and is destroyed when its retention period expires unless a lawful hold applies.

Because CareCircle is built for shared family care, deleting one member's account does not automatically delete records legitimately shared with or controlled by other members of the same Circle.

4. Third-Party Processors

We use a limited number of "Sub-processors" to run CareCircle:

• Vercel / AWSSecure Hosting & Edge
• StripePCI-Compliant Billing
• Apple MapsIn-app maps, only when you tap

Maps: on a fall, a Silent SOS or Safe Return's Home, the "Show map" button draws the map with Apple Maps. Only when you tap it, Apple receives that one place's coordinates and a short label such as "Home", never a name; nothing is sent to Apple before the tap. Apple handles that request under its own privacy terms. The "Open in Maps" link works without it.

5. Children's Information

• A parent or legal guardian sets up a child's access by creating a kid code in Kids Admin, and states the child's age range (under 13, or 13 to 17). We keep only the age range, never a date of birth. A kid code does not need the child's phone number.
• The child's page holds the name the parent enters, the tasks a parent assigns, and the child's progress on them.
• Photos: for a child aged 13 to 17, a parent can ask for a photo to finish a task. For a child under 13, or whose age is not set, photo proof is off and CareCircle does not take in a photo. Task photos stay private to the family circle until a parent keeps or deletes them; only owners and parents can see or delete them.
• Silent SOS: a child can send a silent alert to their family. The child's location is attached only if a parent turned location on for that child. For a child under 13, or whose age is not set, that parent must also do a one-time card check (a 50-cent charge, refunded right away) so we know an adult gave the permission. The alert itself is always sent. We keep only a record that the check was done; the card details stay with our payment provider, Stripe.
• Maps: if a parent taps "Show map" on a child's Silent SOS, that one location is sent to Apple Maps to draw the map, with the label "Silent SOS location" and never the child's name. Nothing is sent to Apple unless someone taps. How long CareCircle keeps the location is below.
• How long we keep it: what a child sends (task photos, comments, time requests, Silent SOS alerts and geofence events recorded under the child's own account) is kept for 6 months after the last activity on the task (such as finishing it, or a parent reviewing its photo) or after the Silent SOS is resolved, then deleted automatically. We keep it that long so the family can look back at recent tasks and alerts. A Silent SOS location is cleared within a day after the alert is resolved, or after 7 days if it is never resolved. An open Silent SOS is kept until it is resolved.
• Your choices: when you create a kid code, we tell you on the page and by email what your child's page collects. In Kids Admin, Child's data shows the family owner what CareCircle holds about each child and deletes what the child sent. Revoking a kid code in Kids Admin stops that code from working. You can also email us at the address below to review or delete the information about your child. We do not sell children's information or use it for advertising.