Careguide Privacy Policy & Terms of Service

PRIVACY POLICY

How Your Data is Stored

All your health data is stored securely using Google Firebase services. Your phone number is encrypted (hashed) and used as an anonymous identifier. This allows you to:

• Access your data from any device after phone verification
• Share data with group members you invite
• Keep your data private - we cannot see or access it

What Information We Store

We only store health information you choose to enter:

• Medications, dosages, and schedules
• Healthcare provider contacts
• Healthcare provider contact information when you choose to add them to your device contacts
• Appointment information
• Health documents you upload
• Audio memos you record (up to 10 memos, 1 minute each)

What Information We Do NOT Collect

We do NOT collect:

• Your name, email address, or physical address (unless you include it in documents you upload)
• Social Security Numbers
• Financial information (credit card details are handled by Apple for subscriptions)
• Location data
• Contacts from your device (unless you explicitly choose to import them)
• Information from other apps on your device
• Biometric data (Face ID scans, fingerprints, or other biometric information)
  • We do not collect, store, or transmit any biometric data
  • Face ID/Touch ID authentication is handled entirely by your device's operating system
  • We only store your preference to enable or disable biometric authentication (a simple on/off setting)
  • Your face scan or fingerprint never leaves your device

Firebase Services Used

We use these Google Firebase services to securely store and sync your data:

• Firebase Authentication: Phone number verification using OTP
• Firebase Firestore: Secure database storage
• Firebase Storage: Document and image storage

All Firebase data is encrypted and tied to your hashed phone number, not your personal identity.

Device Permissions

Careguide requests these permissions to function:

Camera

• Used to scan medical documents
• Photos are uploaded to secure Firebase storage
• Only accessible by you and invited group members

Photo Library

• Used to save and retrieve medication images and health documents
• Access controlled by iOS permissions

Microphone

• Used for recording care memos
• Audio stored securely in Firebase
• Only you and group members can access

Contacts

• Used to add healthcare providers to your contact list
• Contact information stays in your device's contact app
• It is stored in our database against your encrypted account and only accessible to you or any member you add. Members will only have read permissions

Identifiers

• Used for Firebase authentication and secure data storage

Notifications

• Used for medication and appointment reminders
• Scheduled locally on your device
• You control all notification settings

Family Groups

• Groups are created with 6-character invite codes
• Maximum 2 members per group (1 admin + 1 member)
• Group data shared securely through Firebase
• Admin controls member access
• Members can view but not edit group data

Data Security

• Firebase Security: Google's enterprise-grade encryption
• Phone Number Hashing: Your number is encrypted before storage
• No Personal Identifiers: No names, emails, or addresses stored
• Access Control: Only you can access your data via phone verification
• Biometric Protection: Optional Face ID/Touch ID for app access (biometric data stays on-device)

Health Framework Disclosure

This Careguide app does not use Apple's HealthKit or CareKit frameworks. No health data is accessed through Apple's health APIs. All health information is stored securely through Firebase services with user consent.

Data Retention

We retain your data for as long as you maintain an active account. When you delete items within the app, they are permanently deleted and cannot be accessed by anyone.

Third-Party Services

We only use Google Firebase services:

• ✅ Firebase Authentication, Firestore, Storage
• ❌ No advertising networks
• ❌ No social media integrations
• ❌ No analytics or tracking services
• ❌ No AI or machine learning services

Data Deletion

You have complete control over your data:

• Delete individual items anytime within the app
• Leave groups to stop sharing data
• Delete your entire account through Settings → Delete Account
  • All your data is permanently deleted immediately
  • This includes medications, documents, contacts, audio memos, and all group data
  • This action cannot be undone
• Uninstalling the app stops new data sync but doesn't delete stored data
• To permanently delete all data, use the in-app deletion feature before uninstalling

How to Delete Your Account

1. Go to Settings → Delete Account
2. We will show you a summary of all data to be deleted
3. Confirm by tapping "Yes, Delete Everything"
4. All data is permanently deleted immediately
5. You will be signed out

We recommend downloading your data before deletion if you want to keep a copy.

Children's Privacy

Careguide is designed for caregivers managing elders. We do not knowingly collect information from children under 13.

Your Privacy Rights

You have the right to:

• ✅ Access all your stored data
• ✅ Delete any or all data through the app
• ✅ Control who can access your group data
• ✅ Use the app with minimal data sharing
• ✅ Export your data before deletion