Privacy Policy

Our plain-language promise: Your family's health information is some of the most personal there is. Here's exactly what we collect, how we protect it, and what we'll never do — in plain words.

What we collect

• Account info: your email and login.
• The health information you choose to log: notes, vitals, symptoms, medications, bathroom logs, and any photos you attach to an entry.
• A little usage data (like when the app is opened) to keep it running well. This never includes your loved one's health details.

What we never do

• We never sell your data. Not to anyone, ever.
• We don't show ads, and we don't share your information with advertisers or data brokers.
• We don't use your health information to market to you.

Who can see the information

Only the caregivers you invite and give access to. This isn't just a promise — it's enforced by our system on every request, which checks that you're allowed to see a given loved one's information before showing it (this is called row-level security). We've also limited our own internal admin view so that identifiable patient health details aren't exposed to staff.

How we protect it

• Your data is encrypted in transit and at rest (bank-level encryption).
• Photos you attach are stored in a private location — never public. They're viewable only through short-lived secure links, and only by caregivers with access to that loved one.
• When you share a doctor-ready summary, it uses a secure, expiring link that you can turn off anytime — and turning a link off deletes the shared copy. The link itself never contains names or health details.

If something goes wrong

We build carefully, but no system is perfect. If your information is ever accessed, used, or disclosed without authorization, here's what we'll do:

• We'll notify you by email without unreasonable delay, and no later than 60 days after we discover it.
• We'll tell you what happened, what information was involved, when it happened, what we're doing about it, and what steps you can take.
• We'll notify the Federal Trade Commission and any state authorities as required by law, within the timeframes the law sets.
• If the incident affects 500 or more people, we'll also provide notice to media as required.

You can always reach us at support@pocketcaregiver.com with questions about an incident.

Companies that help us run PocketCaregiver

We keep this list short on purpose. Each of these vendors is under contract to protect your information and is prohibited from using it for their own purposes:

• Supabase — database, authentication, and file storage. United States.
• Stripe — payment processing. Stripe receives your billing details. Stripe never receives your loved one's health information.
• Lovable — application hosting and delivery. Serves the application and static assets for pocketcaregiver.com; does not receive your loved one's health information beyond what's necessary to deliver the app to your browser.

We do not sell or share your information with anyone else. If we add or change a vendor that handles health information, we'll update this list.

About photos

Wound photos and other images are among the most sensitive information in the app, and we treat them that way.

By uploading a photo, you're confirming you have the care recipient's permission, or the legal authority to act on their behalf.

Photos are stored in a private location — never publicly accessible. They're viewable only through short-lived secure links, and only by caregivers you've given access to. When you delete an entry, its photos are deleted with it.

How long we keep it

• Your history stays available based on your plan (Free: last 30 days · Basic: last 1 year · Plus: unlimited). Older entries on lower plans are hidden, not deleted, and reappear if you upgrade.
• Bathroom logs follow the same plan history window as everything else — older entries are hidden on lower plans, never deleted, and reappear if you upgrade.
• If a loved one passes away, their full history stays available to you forever (memorial exception).
• You can delete your data anytime, and it's gone.

Your choices and rights

You can access or delete your information whenever you want, right from the app — on every plan, including Free. Exporting a copy of your records is included on Basic and Plus. If you need help with a privacy request, email us and a real person will help.

Your rights under state privacy laws

Several states have passed laws giving you specific rights over health information collected by apps like ours. Depending on where you live, these may include the right to know what we've collected, to get a copy, to have it deleted, to withdraw consent to collection, to appeal a denial of any of these requests, and to not be discriminated against for exercising those rights.

If you live in Washington State. PocketCaregiver treats the health information you log about yourself or a loved one as "consumer health data" under Washington's My Health My Data Act, and applies these commitments to every user, everywhere, not only Washington residents:

• We collect consumer health data only with your consent, and only to provide the tracking, reminder, and organizing features you've asked for.
• We do not sell consumer health data, and we do not share it with any third party for advertising, marketing, or any purpose beyond running the app, without your separate, explicit, opt-in authorization.
• We do not use geofencing (location-based tracking or targeting) around medical facilities, and we do not use it to identify, track, or target anyone based on an attempt to seek health care.
• If you withdraw consent or ask us to delete your data, we will do so within the timeframe Washington law requires, and we will instruct any vendor who processed that data on our behalf to do the same.
• You may designate an authorized agent to exercise these rights on your behalf.
• If we deny any request, you may appeal by emailing support@pocketcaregiver.com, and we will respond within the timeframe the law requires.

To exercise any of these rights, email support@pocketcaregiver.com. A real person will help, and we'll respond within the timeframe your state's law requires. We won't charge you, and we won't treat you differently for asking.

Children

PocketCaregiver is for adults (18+) tracking adult care recipients. We don't knowingly collect information from or about children. (We plan to build proper, privacy-first support for tracking children in the future; until then, please don't use the app for a minor.)

Who we are (the "data controller")

The company responsible for your data is Nerd Nurse AI, operating as PocketCaregiver. If you have a privacy question or request — including to export or delete your data — email us at support@pocketcaregiver.com and a real person will help.

Changes

If we change this policy in a meaningful way, we'll let you know.

Contact

support@pocketcaregiver.com

The English version of this policy governs if there is any conflict with a translation.