Privacy Policy

1. Information we collect

• Account information you provide: name, email, phone number, and your sign-in identifiers (e.g., Apple, Google, LINE).
• Care receiver information you enter: name, date of birth, photo, medical conditions, allergies, medications, blood type, and emergency contacts.
• Care records you enter: vital signs, mood entries, medication logs, checklists, shift schedules, and handoff notes.
• Phone-owner health data (optional): if you enable Apple HealthKit or Google Health Connect, we read the metrics you grant access to and store them tagged as your own data, not as the care receiver's.
• Usage and device data: app session activity, device model, OS version, crash logs, and anonymous analytics.

2. How we use information

• To run the app: store records, render the handoff board, generate doctor reports, and surface trends.
• To notify the people you authorize: optional daily summaries to LINE chats you connect, push notifications to your devices.
• To improve the product: aggregate analytics and crash diagnostics. We do not sell personal data.

3. Data ownership and separation

• Every health or care field is tagged as either "care_receiver" data or "phone_owner" data. The two never mix.
• Family members you invite to a care receiver only see that care receiver's data. Your personal HealthKit / Health Connect readings remain on your account.
• You can disconnect HealthKit / Health Connect at any time; we stop reading new data and existing phone-owner data is retained only on your own account.

4. Sharing with third parties

• LINE: when you connect LINE for notifications, we send a generated daily summary to the chats you choose. We do not share raw records with LINE.
• Apple HealthKit and Google Health Connect: we follow each platform's privacy rules and use only the permissions you grant.
• Doctor reports: when you generate a shareable doctor-report link, the recipient can view the care receiver's data through that link until you revoke it or it expires.
• Service providers: we host data on Amazon Web Services and use third-party services for crash reporting and analytics. They are bound to use the data only to provide their service to us.
• Legal: we may disclose data when required by law.
• We do not use advertising networks, and we do not show ads inside CareLogger.

5. Data retention and deletion

• We retain your data while your account is active.
• You can request account deletion from inside the app or by emailing us. We remove your data within 30 days of a confirmed deletion request, except where law requires us to keep records.

6. Security

We use TLS for data in transit and encryption at rest, and we restrict internal access on a need-to-know basis. No system is perfectly secure, and we cannot guarantee absolute security.

7. Children

CareLogger is not intended for children under 13. We do not knowingly collect personal data from children under 13.

8. Changes to this policy

We may update this policy as the product evolves. Material changes will be highlighted in the app or by email. Continued use after the effective date of an update means you accept it.