Privacy Policy

1. Information We Collect

We collect the following types of information:

• Account information: Name, email address, phone number, and password when you create an account.
• VIP information: Name, phone number, timezone, medication names, dosages, schedules, and pharmacy details entered by caregivers.
• Compliance data: Dose acknowledgment timestamps, missed dose records, and compliance history.
• Photos: Medication reference photos and dose verification photos when photo evidence is enabled.
• Device information: Push notification tokens and device type for delivering alerts.
• Usage data: Login timestamps, feature usage patterns, and error logs for service improvement.

2. How We Use Your Information

• Sending medication reminders via push notification, email, and SMS.
• Tracking dose compliance and generating reports for caregivers.
• Sending escalation alerts when doses are missed.
• Delivering weekly compliance summary emails.
• Providing account management and customer support.
• Improving the Service and fixing bugs.

3. Information Sharing

We do not sell your personal information. We share data only in these circumstances:

• Between caregiver and VIP: Caregivers can view their VIP's medication schedules, compliance data, and photos.
• Service providers: We use third-party services to operate the platform: Supabase (database and authentication), Resend (email delivery), Twilio (SMS delivery), Firebase Cloud Messaging (push notifications), and Cloudflare (hosting and security).
• Legal requirements: We may disclose information if required by law, court order, or to protect the safety of our users.

4. Data Storage and Security

Your data is stored securely using Supabase (PostgreSQL with row-level security) hosted in the United States. We use encryption in transit (TLS) for all communications. Device credentials are stored as SHA-256 hashes. We implement industry-standard security practices but cannot guarantee absolute security.

5. Data Retention

We retain your data for as long as your account is active. Dose compliance records are retained for the duration of the VIP's account for historical reporting. Upon account deletion, we will delete your personal data within 30 days, except where retention is required by law.

6. Your Rights

You have the right to:

• Access your personal data by viewing your account and VIP profiles.
• Correct inaccurate data through the Settings page or by contacting us.
• Delete your account and associated data by contacting us.
• Opt out of SMS notifications by replying STOP to any message.
• Opt out of email notifications through the Settings page.
• Opt out of push notifications through your device settings.

7. Children's Privacy

The Service is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us immediately.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email. Your continued use of the Service constitutes acceptance of the updated policy.

9. Contact

Questions about this policy? Contact us at support@nursedottie.com.