Draft — not yet legally reviewed. This page describes, in plain language, how CareProof is intended to handle data. It is a placeholder for the real privacy policy, which should be reviewed by a lawyer before CareProof is used with real families — especially given the sensitive nature of the data involved (photos/video of vulnerable adults and children, health-adjacent notes).
Last updated: draft, not yet published.
Account information (name, email), task and scheduling data you configure, log entries caregivers submit (notes, structured fields like appetite/mood/sleep), and photos or video attached as proof of completed tasks.
The account owner (the paying family member or Power of Attorney) can see everything logged for their care recipient. Caregivers see their own task list and what they log. Family viewers see only entries the account owner has explicitly marked shareable — sensitive categories, including any injury or sore report, are never shown to family viewers regardless of other settings.
Media is stored in encrypted cloud object storage, accessible only to authenticated members of the relevant account. It is not shared with, sold to, or used to train any third party beyond what's needed to operate the storage and hosting infrastructure itself.
Account owners can request deletion of their account and all associated data. [Retention period and deletion process to be finalized.]
CareProof uses third-party infrastructure providers (hosting, database, object storage, payment processing, transactional email) solely to operate the service — not for advertising or resale of personal data.
Questions about this policy: careproofapp@proton.me