Privacy Policy
Last updated: 6 October 2026
In short: CareNod helps families check that a parent is okay. We collect only what's needed for that, store it in the European Union, never sell it, and delete location history after 30 days. Location sharing and medicine reminders are off until the person using them turns them on. You can download or delete your data at any time in the app.
1. Who we are
CareNod ("we", "us") is operated by [OPERATOR LEGAL NAME], [POSTAL ADDRESS]. We are the data controller for the personal data described here.
Contact for anything about privacy: privacy@carenod.com.
EU representative (GDPR Article 27): [EU REPRESENTATIVE NAME AND ADDRESS].
2. What we collect and why
| Information | Why we use it | Legal basis (GDPR) |
|---|---|---|
| Email address, display name, timezone | To sign you in with a one-time code, show your name to your family circle, and time check-ins correctly | Contract |
| Family circle membership and invites | To connect you with the family members you choose | Contract |
| Check-ins ("I'm OK"), with time | To let your family know you're okay, and alert them if a check-in is missed | Contract |
| SOS alerts, with your location at that moment | To alert your family when you ask for help, and show them where you are | Contract; your explicit request |
| Location history (only if you turn on sharing) | To show your family where you are, and alert them if your phone hasn't moved for a long time | Consent |
| Phone status: battery level, charging, last seen, app version | To warn your family if your phone is about to run out, and to show that CareNod is working | Contract |
| Medicines, doses and times taken (only if you turn on reminders) | To remind you, and tell your family if a dose may have been missed | Explicit consent (Art. 9(2)(a)) |
| Alerts and who responded | So your family can see what happened and avoid duplicate calls | Contract |
| Device push token | To send alerts to your phone | Contract |
| Consent records | To prove what you agreed to and when, and respect withdrawals | Legal obligation |
| Subscription status (for Premium) | To give your family circle the features it paid for | Contract |
We do not use your information for advertising, we do not sell or rent it, and we do not build profiles of you. CareNod does not use advertising or analytics trackers in the app.
3. Location and health information
Location
Location sharing is off until the person being looked after turns it on, on their own phone, after a plain explanation. Family members cannot turn it on for them. While location is shared, Android shows a permanent notification. CareNod collects location while the app is running, including when it is in the background, but does not use Android's "background location" permission. Turning sharing off stops collection and immediately hides past locations from the family.
When you press SOS, the location at that moment is shared with your family circle even if ongoing sharing is off, because you asked for help. This is stated next to the SOS button.
Medicines (health information)
Medicine reminders are off until you turn them on and agree to us processing this health information. Medicine names are never shown in notifications on your family's lock screens. If you turn reminders off, your medicine list and dose history are deleted.
CareNod is not a medical device and does not give medical advice. It is not an emergency service: in an emergency, always call your local emergency number.
4. Who can see your information
- Your family circle: only people you or your family invited with a one-time code. People looking after you can see your check-ins, alerts, phone status, and (if you allow it) your location and medicines. You can see who is in your circle at any time.
- Our service providers, only to run CareNod (see below).
- Authorities, only if the law requires it.
Strangers, other families and other users can never see your information. This is enforced by our database's security rules, not just by the app.
5. Service providers
These companies process data for us under data processing agreements:
| Provider | What for | Where |
|---|---|---|
| Supabase | Database, sign-in, app back end | European Union |
| Google (Firebase Cloud Messaging) | Delivering push notifications | Global; EU–US Data Privacy Framework |
| Google Play | Taking payment for Premium | Global; EU–US Data Privacy Framework |
| RevenueCat | Managing Premium subscription status | USA; Standard Contractual Clauses |
| Resend | Sending sign-in codes by email | EU region |
| Cloudflare | Website hosting and email forwarding | Global; EU–US Data Privacy Framework |
| [MAP PROVIDER] | Map images shown to family members | [REGION] |
Where data leaves the EU, it is protected by the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses.
6. How long we keep it
| Information | Kept for |
|---|---|
| Location history | 30 days by default (the person sharing can choose 1–90 days), then deleted automatically |
| Medicine dose history | 90 days; everything deleted when reminders are turned off |
| Alerts | 90 days |
| Unused invite codes | Expire after 7 days; deleted 30 days later |
| Account, check-ins, circle membership | Until you delete your account |
| Waitlist email | Until you ask us to remove it, or 12 months after launch |
When you delete your account, your personal data is erased from our database straight away, and we ask our subscription provider to delete your customer record. Encrypted backups are overwritten within [BACKUP RETENTION, e.g. 7 days].
7. Your rights
You can, at any time:
- Download your data: in the app, Settings → Download my data.
- Delete your account and data: in the app, Settings → Delete my account.
- Withdraw consent: switch off location sharing or medicine reminders in Settings. This doesn't affect anything done before you withdrew it.
- Correct your information, or object to or restrict how we use it, by emailing privacy@carenod.com.
- Complain to your data protection authority. We'd appreciate the chance to help first.
We reply within one month. We may need to confirm your identity first.
8. Security
All connections are encrypted. Data is encrypted at rest. Access is restricted by row-level security rules, so each person can only reach the data they're entitled to, and only the operator can access the database directly. No system is perfectly secure; if a breach affects you, we'll tell you and the authorities as the law requires.
9. Website and waitlist
If you join our waitlist, we store your email address, whether you look out for a parent or would use CareNod yourself, your country (from your browser's language setting), and the time you joined. We use it only to tell you when CareNod launches, based on your consent. Every email includes a way to unsubscribe, or write to privacy@carenod.com.
Our website doesn't use cookies or analytics. Cloudflare, which hosts it, processes basic request data (such as IP addresses) to deliver the site and protect it from attacks.
10. US state privacy rights
If you live in a US state with a consumer privacy law (for example California, Colorado, Virginia or Washington), you have rights to know, access, correct and delete your personal information, and to opt out of its sale or use for targeted advertising. We do not sell personal information or use it for targeted advertising.
Consumer health data (for example under Washington's My Health My Data Act): medicine information, and location used to help keep someone safe, may count as consumer health data. We collect it only with your consent, use it only to provide CareNod, never sell it, and you can withdraw consent and delete it at any time as described above.
To exercise your rights, use the in-app options or email privacy@carenod.com. We won't treat you differently for doing so.
11. Children
CareNod is for adults. It isn't intended for anyone under 16, and we don't knowingly collect children's data.
12. Changes and contact
If we make important changes, we'll tell you in the app and ask you to agree again before they apply. The date at the top shows the latest version.
Questions? Email privacy@carenod.com.