CareConnect AI — Privacy Policy

1. Who we are

CareConnect AI is operated by CareConnect AI, a UK-based sole trader, registered with the Information Commissioner's Office (ICO registration number: pending).

2. What data we collect

• Account data: name, email address, language preference.
• Care circle data: names and contact details of linked seniors and caregivers, and their relationship to each other.
• Health-related data: medication names, dosages, schedules, appointment details, dose confirmation history, and adherence records. This is “special category data” under UK GDPR.
• Technical data: device type, log data, error reports, used to keep the service running.

3. Why we collect it and our legal basis

We process this data to provide medication and appointment reminders, caregiver alerts, and adherence tracking. Because medication data is special category (health) data, we rely on your explicit consent, given at sign-up, as our legal basis under UK GDPR Article 9. You can withdraw consent at any time by deleting your account.

4. Who we share it with

We do not sell your data. We use the following processors to run the service:

• Lovable / Supabase — application hosting and database storage.
• Stripe — for handling paid subscriptions (only billing details, not medication data).

We have data processing agreements in place with these providers, including Standard Contractual Clauses where data is processed outside the UK/EEA.

5. How long we keep it

We keep your data for as long as your account is active. If you delete your account, we delete your data within 30 days, except where we're required to keep records for legal or fraud-prevention reasons.

6. Your rights

Under UK GDPR, you have the right to: access your data, correct it, delete it, restrict or object to processing, and export it. To exercise any of these, contact us at privacy@careconnectai.co.uk. You also have the right to complain to the ICO (ico.org.uk) if you believe we've mishandled your data.

7. Security

We use encryption in transit and at rest, and access controls, to protect your data. No system is 100% secure, and we encourage you to use a strong, unique password.

8. International transfers

Some of our service providers may process data outside the UK/EEA. Where this happens, we rely on Standard Contractual Clauses or equivalent safeguards.

9. Children

CareConnect AI is not intended for use by children under 18 without a parent or legal guardian managing the account on their behalf.

10. Changes to this policy

We may update this policy as the product evolves. We'll notify users of material changes.

11. Contact

Questions about this policy or your data: privacy@careconnectai.co.uk