Privacy Policy

Who we are (data controller)

Caregiver (the “Service”, at caregiverapp.online) is operated by Petros Chatzianastasiou, an individual based in Greece (the “data controller”, “we”, “us”). For any privacy question or to exercise your rights, contact us at hello@caregiverapp.online.

What we collect

• Account data — your name, email address, and a securely hashed password.
• Care information you enter — the people (or pets) you care for, their medications and schedules, dose logs (including who logged each dose and when), appointments, tasks, contacts and daily check-in notes. Some of this is health-related information (see below).
• Household & membership — the households (“care circles”) you create or join and the other members you invite.
• Payment data — if you subscribe to a paid plan, payments are handled by Stripe. We receive a subscription status and a customer/subscription reference; we do not receive or store your full card number.
• Technical data — a strictly-necessary session cookie, and standard server logs (e.g. IP address, browser type) used for security and to run the Service.
• Reminders — if you turn on notifications, your browser's push subscription for the devices you choose.
• Feedback — if you send a bug report or feature request, the message plus your name, email and plan for follow-up.

Health-related information and your explicit consent

Medication names, schedules, dose logs, check-ins and similar entries can reveal information about a person's health. Under the GDPR this is a “special category” of data (Article 9). We process it only on the basis of your explicit consent, which you give when you create an account and enter this information, solely to provide the coordination features you're using.

Where you enter information about another person (for example a parent or child), you confirm you are authorised to do so and to share it with the household members you invite. You can withdraw consent at any time by deleting the information or your account (see “Your rights”). Caregiver is a coordination tool, not a medical device or medical record — it does not diagnose, does not check drug interactions, and does not recommend dosages.

How we use your data (legal bases)

• To provide the Service — performance of our contract with you (GDPR Art. 6(1)(b)).
• To process health-related entries — your explicit consent (Art. 9(2)(a)).
• To keep the Service secure and working — our legitimate interests (Art. 6(1)(f)), e.g. rate-limiting, preventing abuse, and diagnosing problems.
• To take payment for paid plans — performance of our contract, via Stripe.
• To send transactional email (account confirmation, password reset, invites) — to provide the Service.

We do not use your data for advertising and we do not sell it.

Who we share it with

We share data only with the service providers (“processors”) needed to run Caregiver:

• Cloudflare, Inc. — hosting, database and transactional email delivery.
• Stripe, Inc. — payment processing for paid plans.
• Members you invite — everyone in a household can see that household's care information. Only invite people you want to have access.

We may also disclose data if required by law, or to protect the rights and safety of users.

International transfers

Some providers (e.g. Stripe) may process data outside the European Economic Area, including in the United States. Where that happens, transfers are covered by appropriate safeguards such as the European Commission's Standard Contractual Clauses.

Cookies

Caregiver uses a single strictly-necessary cookie to keep you signed in (ctk_session). Because it's essential to provide a service you've asked for, no consent banner is required. If you subscribe, Stripe's checkout may set its own cookies on Stripe's pages. We do not use advertising or third-party analytics cookies.

How long we keep it

• Account & care data — until you delete the information or your account.
• History (dose logs, check-ins, activity) — your plan sets a history window (currently 14 days on Free, 1 year on Plus/Family, 3 years on Pro/Pro+). Older history may be removed to honour that window.
• Security logs & rate-limit records — kept only briefly.

Your rights

Under the GDPR you have the right to:

• Access the personal data we hold about you;
• Rectify inaccurate data (you can edit most of it directly in the app);
• Erase your data — use Settings → Account → Delete account, or contact us;
• Restrict or object to certain processing;
• Data portability — request a copy of your data;
• Withdraw consent at any time (this doesn't affect processing already carried out);
• Complain to your data protection authority — in Greece, the Hellenic Data Protection Authority (dpa.gr).

To exercise any right, email hello@caregiverapp.online.

Children

Caregiver is intended for adults (16+). It is not directed at children, though an adult may record care information about a child they are responsible for.

Changes to this policy

We may update this policy as the Service evolves. We'll change the “last updated” date above and, for significant changes, let you know in the app.