We collect three categories of data so we can run CareSync for you.
We use the data above to run and improve CareSync. Specifically: to provide the core service, send you authentication emails and medication/appointment reminders, deliver in-app and optional browser push notifications when you have opted in, process subscription payments, and prevent abuse or fraud. You can adjust notification preferences at any time in your account settings.
We rely on legitimate interest to provide the service you signed up for (sending you reminders, storing the family information you entered, processing your subscription). For non-essential notifications like browser push and marketing-style emails, we rely on your consent, which you can withdraw at any time from your notification preferences.
Active accounts retain data for as long as the account exists. If you delete your account, personal data is removed within 30 days. We retain billing records only as long as required by tax and financial record-keeping laws (typically seven years in the US), and we retain them in a form that is not linked back to your day-to-day use of CareSync. Family members you remove from your care circle are also deleted immediately.
We do not use any advertising networks, retargeting pixels, or data-broker services. CareSync does not sell your data.
Your family and care data is shared only with people you explicitly invite into your care circle. We do not sell, rent, or trade your personal information, and we do not share it with marketing partners. We will only disclose data to authorities when compelled by valid legal process.
We use one first-party session cookie to keep you signed in. We use a Polsia analytics pixel to count aggregate signup and activation events — those counters are anonymous and never used to identify individual users. There are no advertising cookies and no third-party tracking on CareSync.
When you add a family member to CareSync, you confirm that you have the right to share that person's caregiving information with us. CareSync is a caregiver's tool — it assumes the person entering data is authorized to do so for the people they add.
You can access and download all data we hold about you from the Settings page ("Export my data"). You can correct any inaccurate information directly through the relevant screen. You can delete your account at any time from Settings, which initiates the 30-day personal-data removal described above. You can opt out of non-essential notifications from the notification preferences panel.
To exercise any of these rights, or to ask a question about your data, contact caresync-4@polsia.app.
CareSync is not directed to children under 13 for primary accounts. Care-recipient data — minors or adults — is entered by an authorized caregiver rather than by the person themselves. If you believe we have collected information from a child under 13 in error, contact caresync-4@polsia.app and we will delete it.
We protect your data with transport-layer encryption (TLS) in transit, encryption at rest on the hosted Postgres instance, bcrypt password hashing for account credentials, httpOnly SameSite=lax session cookies, and per-row access controls scoped to your account. No system is perfectly secure, but we commit to notifying affected users of any material breach without unreasonable delay.
If we make material changes to this policy, we will notify active users via an in-app message and update the "Last updated" date below. Continued use of CareSync after a change indicates acceptance of the revised policy.
Questions, requests, or concerns about this policy: caresync-4@polsia.app.