Privacy Policy

What information C.A.R.E.S may collect

C.A.R.E.S may collect personal information such as name, phone number, email address, account type, emergency contacts, caregiver relationships and communication details.

The platform may also process health-related or sensitive information, including medication schedules, reminder history, wellbeing check-ins, activity logs, emergency/SOS events, optional location sharing, medication confirmation photos and AI-generated routine alerts.

Why C.A.R.E.S uses this information

C.A.R.E.S uses information to provide reminders, wellbeing check-ins, caregiver updates, emergency contact alerts, account access, secure communication, support features and service improvements. Information should only be used for the purpose of supporting the selected features.

Consent and optional features

Some features are optional and require user permission. These may include location sharing, medication photo support, AI routine insights, caregiver access and voice personalisation. Users can change optional permissions in their settings where available.

Who can see user information

Only authorised users should access shared information. This may include the older adult, approved family members, nominated caregivers, care-circle members or care provider staff with permission. C.A.R.E.S should use role-based access controls so users only see information relevant to their role.

Payments

If you subscribe to a paid plan, payment is handled by Stripe, a regulated payment provider. Your card details go directly to Stripe and are never seen or stored by C.A.R.E.S. We receive only confirmation of your subscription status. Stripe’s own privacy policy applies to the payment process.

Service providers

C.A.R.E.S uses a small number of trusted providers to run the service: Stripe for payments, an email delivery provider (currently Resend) to send verification, invitation and account emails, secure cloud hosting for the application and database, and Anthropic as the AI provider behind the optional AI Companion. These providers process data only on our instructions and for no other purpose.

The AI Companion and your data

The AI Companion is an optional feature. When you send the Companion a message, that message, the recent conversation, and a limited summary of information from your account (medication names and times, task and appointment titles, the wellbeing summary wording shown in the app, and the most recent shared check-in mood) are sent to our AI service provider, Anthropic, whose model generates the reply. This happens only when you choose to use the Companion.

C.A.R.E.S does not store your Companion conversations on our servers. Our AI provider processes this information on our instructions to provide the reply. Do not include information in Companion messages that you would not want processed this way; the Companion works without you typing any personal or health details.

Medication photo check and your photos

The medication photo check works entirely on your device: photos are analysed in your browser and the reference photos and their visual summaries are stored on your device only. They are not uploaded to C.A.R.E.S or to any third party.

The photo check is optional and can be switched on or off at any time in Settings. While it is switched on, each photo you check (and the suggestion) is also stored as a small copy in your account’s shared care area, so an authorised caregiver can look at it and double-check. Shared photo checks are automatically removed after 24 hours. If you do not want checked photos shared, switch the feature off in Settings. Reference photos used for enrolment always stay on your device.

Data security

C.A.R.E.S will aim to protect user information using secure login, encryption, access controls, audit logs and secure cloud storage. Sensitive information should not be shared with unauthorised people.

Data retention and deletion

You can permanently delete your account at any time from Settings → Delete account. This erases your account and associated data from our systems, in line with your right to erasure under UK GDPR.

C.A.R.E.S should only keep information for as long as needed to provide the service, meet legal requirements, resolve issues or protect users. Users should be able to request deletion of their account or certain personal information, subject to legal, safety or operational requirements.

User rights

Users may have rights to access, correct, delete, restrict or object to the use of their personal data. Users may also request a copy of their personal data where applicable. Requests can be made through the Data Rights page or by contacting C.A.R.E.S support.

Data breaches

If a data breach occurs, C.A.R.E.S will investigate the incident, take steps to reduce harm, and report the breach where required by law.