Privacy policy
Last updated Oct 14, 2026
What Care holds
The profiles you make, which is a name, how that person is related to you, and anything else you choose to add such as a date of birth, sex, blood group or a photo. The documents you add, kept exactly as they arrived. What is read off those documents: values, units, dates, medication names and the advice printed on them. Your settings, which is whether the app lock is on and which notifications you asked for. Your email address, which is how you sign in and how Care reaches you. Your own name, which is what Care calls you and how your account is found if you write to Care. A code that lets Care send notifications to this phone. Anything you send with Report a problem, including screenshots you attach.
Where your records are held
Your documents and what is read from them are held on servers Care rents, so they are there when you open the app on a new phone.
Services that work for Care
Care relies on a small number of outside companies to run. Each handles only what its job needs: one holds the database and the stored files, one reads page images to find what is printed on them, one sends sign in and Report a problem emails, one delivers notifications to your phone, and one receives crash reports. None of them is given your records to sell, and none of them shows your records to anyone.
How you sign in
You sign in with your email address, or with a Google or Apple account, in which case Google or Apple tells Care who you are, including your name. If you set a password, it is held scrambled and cannot be read back.
When you write to Care
If you email Care, that email is held so somebody can answer it. Write only what is needed to explain the problem. A document or a result sent to Care in an email is held the same way any email is, which is not the same as the way your records are held in the app, so send one only if you mean to.
What never leaves your phone
Unlocking is answered by your phone, which tells Care yes or no. Care never sees a face or a fingerprint and never stores or sends anything about one. Reminders are scheduled on the device itself. Your sign in is held in the phone's own secure storage.
How reading works
A document you add is turned into page images and read automatically by an outside service working for Care, and what is printed on it is copied rather than interpreted. Page images leave your phone for this and for nothing else, and that service does not use them to train its models or to improve its own products. Reading can be wrong, which is why the original is always kept unchanged and every value can be checked against the page it came from.
What Care never does
Your records are never sold or rented. No analytics service is given anything from a medical document. Records of what the system did name the document, never what it said. Care uses an outside service to find faults: that something failed, on which screen, and on what kind of phone. That service is never given a document, a value, a medication name, or anything else read off a page, and it does not store where a report came from.
Who can see your records
Only you. Care's own systems, and the services that work for Care, hold and read your records only to run the app: to show them back to you and to find a value in them. Nobody at Care goes looking through them, and there is no feature anywhere in Care that shows one person's records to another. If you send a document or a brief out of the app yourself, it leaves Care, and where it goes next is outside this policy and outside Care's reach.
Keeping and removing
An archived profile is kept for 30 days. A deleted document is kept for 7 days. After that both are removed. Deleting your account removes every profile, document and value held under it. The original of a document is kept unchanged for as long as you keep the document. Deleting a document, or your account, also removes everything read from it. If you cannot use the app, email help@careforus.app from the address you sign in with to ask for your account and everything in it to be deleted. After an account is deleted, Care keeps only a short note that it was deleted, so the deletion can be finished, and its own record of running costs. Neither contains your name, your records, or anything about your health.
Taking your records out
Every document you add can be opened and sent on from the app, exactly as it arrived. Taking everything out in one go is not something Care can do today. Until it can, every document can still be taken out one at a time.
Records about other people
Care exists to hold records on behalf of other people, including children. Add records only for yourself or for someone you look after or who asked you to. The records belong to the person they describe, not to the account holding them. A child who grows up is entitled to their own records.
Who Care is for
Care is made for an adult holding records, including records about a child. It is not made for children to use, and an account should not be opened by one.
Keeping it safe
Records travel over an encrypted connection. You can turn on the app lock so Care asks your phone to unlock before it opens. No system is completely secure and Care does not claim otherwise. If records were ever reached by somebody who should not have reached them, you will be told what happened and what was affected, as soon as it is understood well enough to be described.
If this changes
If this policy changes in a way that affects you, Care will say so in the app before the change takes effect. Carrying on using Care after that means the changed policy applies to you.
Who runs Care
Care is made and run by NOTYET (SMC-PRIVATE) LIMITED. For anything about your records or this policy, write to help@careforus.app, or use Report a problem in Settings.