Privacy Policy

Last Updated: February 27, 2026

This Privacy Policy describes how Nana's Care Team ("we", "us", "our") collects, uses, and shares information when you use our mobile application and website (collectively, the "App").

1. Information We Collect

1.1 Information You Provide

When you use Nana's Care Team, you may provide:

Account Information:

• Email address
• Name
• Password (encrypted)

Care Recipient Information:

• Name and age
• Medications (names, dosages, frequencies, prescribers)
• Medical diagnoses and conditions
• Allergies
• Healthcare provider contact information
• Appointment schedules
• Care notes and observations
• Vital signs records
• Photos

Care Team Information:

• Names of caregivers
• Contact information (phone, email)
• Relationships to care recipient
• Caregiver schedules

1.2 Information Collected Automatically

We may automatically collect:

• Device information (type, operating system)
• App usage data
• Log data
• IP address

2. How We Use Your Information

We use the information we collect to:

• Provide and maintain the App
• Process your subscription payments
• Respond to your requests and support inquiries
• Send service-related communications
• Improve and develop the App
• Protect against fraud and unauthorized access
• Comply with legal obligations

3. Data Storage and Security

3.1 Where Data is Stored

Your data is stored securely using:

Service	Purpose	Location
Supabase	Database	United States
Netlify	Web hosting	United States
Stripe	Payment processing	United States

3.2 Security Measures

We implement reasonable security measures including:

• Encrypted data transmission (HTTPS/TLS)
• Secure password hashing
• Row-level security policies for data isolation
• Regular security updates

3.3 Data Isolation

Each care team's data is isolated. Users can only access data for care teams they belong to.

4. Data Sharing

4.1 Within Your Care Team

Information you enter may be visible to other members of your care team that you have invited.

4.2 Service Providers

We share data with service providers who help us operate the App:

• Supabase - Database hosting
• Netlify - Web hosting
• Stripe - Payment processing

These providers are contractually obligated to protect your data.

4.3 Legal Requirements

We may disclose information if required by law, court order, or governmental regulation.

4.4 No Sale of Data

We do NOT sell your personal information or health data to any third party.

5. Your Rights and Choices

5.1 Access and Correction

You can access and update your information within the App at any time.

5.2 Data Deletion

You may request deletion of your account and data by contacting support@nanascareteam.com. Upon deletion:

• Your account will be deactivated
• Your personal data will be deleted within 30 days
• Some data may be retained as required by law

5.3 Data Export

You may request an export of your data by contacting support@nanascareteam.com.

6. Children's Privacy

The App is not intended for use by children under 18 years of age. We do not knowingly collect personal information from children under 18. If we discover we have collected information from a child under 18, we will delete it promptly.

7. International Users

If you are accessing the App from outside the United States:

• Your data will be transferred to and processed in the United States
• By using the App, you consent to this transfer
• Data protection laws in the United States may differ from those in your country

7.1 European Users (GDPR)

If you are located in the European Economic Area, you have additional rights including:

• Right to access your data
• Right to rectification
• Right to erasure ("right to be forgotten")
• Right to data portability
• Right to object to processing

To exercise these rights, contact support@nanascareteam.com.

7.2 California Users (CCPA)

California residents have additional rights under the California Consumer Privacy Act:

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of sale of personal information (we do not sell data)
• Right to non-discrimination

8. Data Retention

We retain your data for as long as your account is active or as needed to provide services. After account deletion:

• Personal data is deleted within 30 days
• Some data may be retained for legal compliance, dispute resolution, or fraud prevention

9. Third-Party Links

The App may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the updated policy in the App
• Updating the "Last Updated" date
• Sending an email notification for significant changes

Your continued use after changes constitutes acceptance of the updated Privacy Policy.

11. Health Information Notice

11.1 Not a HIPAA Covered Entity

Nana's Care Team is designed for family caregivers and is not a healthcare provider. We are not a "covered entity" under HIPAA. However, we are committed to protecting the health information you enter.

11.2 Your Responsibility

You are responsible for:

• Ensuring you have authority to enter information about the care recipient
• Protecting your login credentials
• Deciding what information to share with care team members

12. Contact Us

For questions about this Privacy Policy or our data practices:

Email: support@nanascareteam.com

Location: Colorado, United States

13. Consent

By using Nana's Care Team, you consent to the collection, use, and sharing of your information as described in this Privacy Policy.