CareAI Privacy Policy (English)

Effective date: 2026-01-22
Version: 1.2
Last Updated: January 22, 2026

Governing Language: In case of discrepancy between translations, the English version prevails.

This Privacy Policy explains how CareAI collects, uses, shares, and protects personal data when you use the CareAI Service.

1. Scope

This policy applies to CareAI users, including Seniors, Family/Guardians, and Doctors/Professionals, and any use of the Service.

2. What we collect

We may collect the following categories of data:

2.1 Account and profile data

Name, email address, role type (Senior/Family/Doctor)
Optional identification number and country code (if required by the Service)
Relationship links (e.g., a Senior linked with Family/Doctor accounts)

2.2 Health and care-related data (if you provide it)

Medication schedules and reminders
Basic wellbeing logs (e.g., hydration/steps if enabled)
Care notes you enter into the app
Chat content and medication inquiries: When you use CareAI's chat features to ask questions about medications or health topics, we process your messages to provide informational responses. This includes questions submitted through the "Ask My Doctor" feature.
Distress signals and escalation events: If you express distress or safety concerns in chat, we may log escalation events to facilitate appropriate care team notifications. This data is used solely for safety facilitation purposes.

2.3 Communications

Messages or voice notes sent through the app (where applicable)
Support requests and feedback you submit

2.4 Device and usage data

Device identifiers, app version, crash logs, performance diagnostics
IP address and approximate location inferred from IP (for security and fraud prevention)

3. Legal bases and permissions

We process data to:

Provide the Service you request (account access, role-based dashboards, reminders).
Meet security and compliance requirements.
Improve reliability and performance (crash diagnostics, analytics).

Where required, we rely on your consent (e.g., notifications, microphone, contacts) and you can control permissions in device settings.

4. How we use your data

We use personal data to:

Create and manage accounts and roles.
Deliver reminders, schedules, and related notifications.
Enable care team features (when linking is supported).
Provide customer support and respond to inquiries.
Detect, prevent, and investigate fraud, abuse, or security incidents.
Maintain audit and operational logs for reliability.

Health-Related Features CareAI provides organizational and reminder features only. Any informational guidance shown in the app is optional, non-binding, and intended to help users manage their own routines. CareAI does not provide medical advice and does not replace guidance from qualified healthcare professionals.

5. Sharing and disclosures

We may share data:

With service providers that help us operate the app (e.g., hosting, authentication, database, crash reporting).
With care team members you explicitly link/invite, consistent with role-based access controls:
- Linked Doctors: If you are a Senior and have linked a Doctor account, your medication inquiries submitted through "Ask My Doctor" may be shared with that linked Doctor to facilitate communication. This sharing is limited to the inquiry content and related metadata (e.g., timestamp, medication query reference). The Doctor acts independently and is not an agent of CareAI.
- Linked Guardians: If you are a Senior and have linked a Guardian account, escalation events and distress signals may be shared with that Guardian to facilitate appropriate care coordination. This sharing is limited to safety-related events and does not include full chat history unless explicitly authorized.
- Purpose Limitation: All data sharing with care team members is for informational and safety facilitation purposes only. CareAI does not provide medical advice, diagnosis, or treatment through these features.
If required by law or a valid request by a competent authority.

We do not sell personal data, including health-related data. We do not publicly disclose your health information.

6. International transfers

If data is transferred outside the Kingdom of Saudi Arabia, we will take steps intended to protect data and preserve your rights, consistent with applicable requirements for cross-border data transfers. Ensure transfers do not impact national security or vital interests, and limit transfers to the minimum necessary for processing purposes.

7. Data retention

We retain personal data as long as needed to provide the Service and meet legal/security obligations. When no longer needed, we delete or anonymize it where feasible.

Data Retention Categories:

Doctor Inquiries: Medication inquiries submitted through "Ask My Doctor" are retained for as long as necessary to facilitate communication between you and your linked Doctor, or until you delete your account or request deletion of specific inquiries.
Escalation Events: Distress signals and escalation events are retained for safety audit and care coordination purposes. Retention periods may vary based on the severity and resolution status of the event.
Chat History: General chat conversations are retained according to your account settings and may be deleted upon account deletion or upon your request.

8. Security

We use administrative, technical, and organizational safeguards designed to protect personal data, including access controls, encryption in transit where supported, and audit logging.

No system is 100% secure. You should protect your account credentials and device.

9. Your rights and choices

Depending on applicable law and your context, you may have rights to:

Access your personal data
Correct or update inaccurate data
Request deletion (subject to legal/security retention obligations)
Withdraw consent (for permission-based processing such as notifications)

You can request assistance via: support@careai.app

10. Children

CareAI is intended for adult users and seniors. If the Service is used for a senior under guardianship, the responsible adult should manage account setup and permissions.

11. Changes

We may update this policy. The latest version will be available in the app with a revised effective date.

Change Log:

v1.2 (January 22, 2026): Added explicit coverage for health-related data processing, including chat content, medication inquiries, and distress signals. Clarified data sharing with linked doctors and guardians. Added data retention categories.
v1.0 (December 17, 2025): Initial version.

12. Contact

Privacy questions: support@careai.app