Privacy Policy

Last updated: August 2026

CareHub helps families organize an aging parent's documents, health, and day-to-day care. We know how sensitive that information is, and protecting it is the core of how we build. This policy explains, in plain language, what we collect, how we use it, and the choices you have.

Information we collect

We collect the information you and your family choose to put into CareHub — such as documents, contacts, calendar events, care needs, account references, and Emergency Card details — along with the account information needed to sign you in (for example, the email tied to your sign-in provider). We also process health information and, where you enable it, location, but only under the consent rules below.

How we use it

We use your information solely to provide CareHub: to store and sync your family's records across devices, to power features like search and care-gap reminders, and to support and secure your account. We do not use your family's content to build advertising profiles, and we do not train advertising or third-party models on it.

We never sell your data, and there are no ads

We never sell or rent your family's information, and CareHub contains no advertising. The subscription is how CareHub is funded. We do not put personal information into analytics or crash-reporting tools — only anonymous codes that help us diagnose problems — and push notifications are deliberately contentless (a lock-screen alert says you have a new message, never what it's about).

Sharing within your family is consent-first

CareHub is built for families to share, but sensitive sharing is controlled by the person it concerns. Health and location are shared with other family members only after the subject's own explicit, recorded consent — a caregiver or account owner can never enable sharing on someone else's behalf. While location is being shared, the person sharing it sees a persistent indicator and can turn it off at any time. Where someone genuinely cannot manage their own account, sharing must rest on documented authority such as a power of attorney or guardianship, and the subject's own choice always takes precedence.

How we protect it

Your information is encrypted in transit and at rest, using both Google-managed and customer-managed encryption keys, and access is controlled per family. The copy stored on your device is encrypted as well. We build to HIPAA-grade standards on BAA-covered cloud infrastructure. We deliberately do not store account passwords, PINs, or security codes — the Accounts directory records only where accounts are and who can reach them. Guided remote view is end-to-end encrypted and never recorded.

Service providers

We rely on a small set of infrastructure providers — such as Google Cloud and Firebase for hosting, storage, authentication, and push delivery, and Stripe for payment processing — who process data on our behalf under appropriate agreements. Payment card details are handled by our payment processor; we do not store full card numbers.

Your choices and rights

You can view, edit, and delete the information you add to CareHub, and you can turn off health or location sharing at any time. You may request a copy of your information or ask us to delete your account by emailing hello@care-hub.app. CareHub is intended for adults; it is not directed to children.

Changes to this policy

If we make material changes to this policy, we will update the date above and, where appropriate, notify you in the app. Questions are always welcome at hello@care-hub.app.