Privacy Policy

Our plain-language promise: Your family's health information is some of the most personal there is. Here's exactly what we collect, how we protect it, and what we'll never do — in plain words.

What we collect

• Account info: your email and login.
• The health information you choose to log: notes, vitals, symptoms, medications, bathroom logs, and any photos you attach to an entry.
• A little usage data (like when the app is opened) to keep it running well. This never includes your loved one's health details. On our signed-out public pages only, we also measure how the pages themselves are used — see “Our public website pages” below.

What we never do

• We never sell your data. Not to anyone, ever.
• We don't show ads, and we don't share your information with advertisers or data brokers.
• We don't use your health information to market to you.

Who can see the information

Only the caregivers you invite and give access to. This isn't just a promise — it's enforced by our system on every request, which checks that you're allowed to see a given loved one's information before showing it (this is called row-level security). We've also limited our own internal admin view so that identifiable patient health details aren't exposed to staff.

How we protect it

• Your data is encrypted in transit and at rest (bank-level encryption).
• Photos you attach are stored in a private location — never public. They're viewable only through short-lived secure links, and only by caregivers with access to that loved one.
• You can download a summary as a PDF and send it yourself to a doctor or family member. Once you send a PDF, it can't be taken back.

If something goes wrong

We build carefully, but no system is perfect. If your information is ever accessed, used, or disclosed without authorization, here's what we'll do:

• We'll notify you by email without unreasonable delay, and no later than 60 days after we discover it.
• We'll tell you what happened, what information was involved, when it happened, what we're doing about it, and what steps you can take.
• We'll notify the Federal Trade Commission and any state authorities as required by law, within the timeframes the law sets.
• If the incident affects 500 or more people, we'll also provide notice to media as required.

You can always reach us at support@pocketcaregiver.com with questions about an incident.

Companies that help us run PocketCaregiver

We keep this list short on purpose. Each of these vendors is under contract to protect your information and is prohibited from using it for their own purposes:

• Supabase — database, authentication, and file storage. United States.
• Stripe — payment processing. Stripe receives your billing details. Stripe never receives your loved one's health information.
• Lovable — application hosting and delivery. Serves the application and static assets for pocketcaregiver.com; does not receive your loved one's health information beyond what's necessary to deliver the app to your browser.

We do not sell or share your information with anyone else. Google Analytics runs only on our signed-out public pages and never inside your account — it is described in “Our public website pages” below. If we add or change a vendor that handles health information, we'll update this list.

Our public website pages

On our public pages only — the homepage, About, Plans & Pricing, the campaign page, and Caregiver Resources articles, in English and Spanish — we use Google Analytics. It counts page visits and two button clicks: when someone taps “Start your 30-day free trial” and when someone opens Plans & Pricing from a public page.

Google Analytics never runs once you are signed in, or on sign-in, password reset, invite, unsubscribe, support or shared-summary pages. It never receives your account, your loved one's records or anything you type into the app. If measurement is running and you sign in, the page reloads before your account appears.

We never send Google Analytics your name, email, account id or any health information. We send only the public page address and our campaign labels, which public page it was, its language, and where the button sat — no referring website, no other web address details and no page text. Google Signals and advertising personalisation are switched off. These clicks indicate interest, not a record of a signup or a payment.

Google processes its data as described in the Google Privacy Policy: Google Privacy Policy

About photos

Wound photos and other images are among the most sensitive information in the app, and we treat them that way.

By uploading a photo, you're confirming you have the care recipient's permission, or the legal authority to act on their behalf.

Photos are stored in a private location — never publicly accessible. They're viewable only through short-lived secure links, and only by caregivers you've given access to. When you delete an entry, its photos are deleted with it.

How long we keep it

• Safety Mode: your full history stays saved and viewable
• Your full history stays saved and viewable on every plan and in Safety Mode.
• If a loved one passes away, their records stay viewable and downloadable for 12 months. We'll email reminders before then so you can save a copy. After 12 months, the records are permanently deleted.
• You can delete your data anytime, and it's gone.
• If nobody signs in to an account in Safety Mode for 12 months, we'll email reminders before then with a way to download your records. After 12 months without a sign-in, the account and its records are permanently deleted.

Your choices and rights

You can access or delete your information whenever you want, right from the app — on every plan and in Safety Mode. Exporting a copy of your records is included on Basic and Plus, and remains available in Safety Mode. If you need help with a privacy request, email us and a real person will help.

Your rights under state privacy laws

Several states have passed laws giving you specific rights over health information collected by apps like ours. Depending on where you live, these may include the right to know what we've collected, to get a copy, to have it deleted, to withdraw consent to collection, to appeal a denial of any of these requests, and to not be discriminated against for exercising those rights.

If you live in Washington State. PocketCaregiver treats the health information you log about yourself or a loved one as "consumer health data" under Washington's My Health My Data Act, and applies these commitments to every user, everywhere, not only Washington residents:

• We collect consumer health data only with your consent, and only to provide the tracking, reminder, and organizing features you've asked for.
• We do not sell consumer health data, and we do not share it with any third party for advertising, marketing, or any purpose beyond running the app, without your separate, explicit, opt-in authorization.
• We do not use geofencing (location-based tracking or targeting) around medical facilities, and we do not use it to identify, track, or target anyone based on an attempt to seek health care.
• If you withdraw consent or ask us to delete your data, we will do so within the timeframe Washington law requires, and we will instruct any vendor who processed that data on our behalf to do the same.
• You may designate an authorized agent to exercise these rights on your behalf.
• If we deny any request, you may appeal by emailing support@pocketcaregiver.com, and we will respond within the timeframe the law requires.

To exercise any of these rights, email support@pocketcaregiver.com. A real person will help, and we'll respond within the timeframe your state's law requires. We won't charge you, and we won't treat you differently for asking.

Children

PocketCaregiver is for adults (18+) tracking adult care recipients. We don't knowingly collect information from or about children. (We plan to build proper, privacy-first support for tracking children in the future; until then, please don't use the app for a minor.)

Who we are (the "data controller")

The company responsible for your data is Nerd Nurse AI, operating as PocketCaregiver. If you have a privacy question or request — including to export or delete your data — email us at support@pocketcaregiver.com and a real person will help.

Changes

If we change this policy in a meaningful way, we'll let you know.

Contact

support@pocketcaregiver.com

The English version of this policy governs if there is any conflict with a translation.