Privacy Policy

App: CaresFor (Google Play package com.northlo.caresforfree)

Developer: Northlo

Effective date: September 11, 2026

This Privacy Policy explains how Northlo (“we”, “us”) accesses, collects, uses, stores, shares, and deletes personal and sensitive user data in the CaresFor mobile application and related services.

1. Developer contact

Privacy questions and data requests: info@caresfor.app

Support and account deletion: info@caresfor.app

Mailing identity: Northlo, Nova Scotia, Canada

2. Account and data deletion

Request deletion of your CaresFor account and associated data

In the app: open Settings and tap Delete Account.
On the web: email info@caresfor.app from the address on your account with the subject “Delete my CaresFor account”.

After we verify the request, we delete the account and associated personal data. We do not merely freeze or disable the account. Some records may be retained only if required by law, security, or fraud prevention, and only for as long as that requirement lasts.

3. Information we collect

Depending on how you use CaresFor, we may collect:

Account information: name, email address, username, password (stored as a hash), phone number, and email verification status.
Profile information: photo, biography, address, city, region, postal code, country, date of birth, and optional health-program identifiers such as a Medicare number if you enter one.
Health and care information you or your care circle enter: medications and schedules, vitals, notes, tasks, calendar events, care-feed updates, comments, and photos related to care.
Care-circle relationships: which family members, friends, and caregivers can view or contribute to a patient’s care space.
Device and app information: push-notification tokens, device identifiers used to keep you signed in, app version, and approximate usage data needed to operate the service.
User-generated media: camera or photo-library images you choose to upload for profiles, notes, medications, or care-feed updates. We do not access your camera or photos unless you grant permission and select content to upload.

We do not collect precise GPS location. Microphone access may be present on some Android builds because of included platform libraries; CaresFor does not use the microphone to record audio for our service.

4. How we use information

Create and authenticate your account
Coordinate care among people you invite to a care circle
Send medication, task, and appointment reminders you enable
Deliver in-app care-feed updates and push notifications you choose to receive
Store photos and files you upload so authorized care-circle members can view them
Provide customer support and security (including preventing abuse)
Operate, maintain, and improve the app

We do not sell personal or health data. We do not use your health or care data for third-party advertising.

5. How we share information

We share data only as needed to provide CaresFor:

Your care circle: information you enter in a care space is visible to the caregivers, family, and other members you authorize.
Service providers that process data on our instructions:
- Microsoft Azure — hosting, database, and file storage
- Google Firebase Cloud Messaging — push notifications on Android
- Apple Push Notification service — push notifications on iOS
- Expo — app updates for the CaresFor client
- SendGrid — transactional email such as invites and password resets
Legal requirements: if required by law, court order, or to protect the rights, safety, or security of users or the public.

6. Permissions

Internet: to sign in and sync care data
Camera and photos: only to capture or upload images you choose for notes, medications, profiles, or care-feed updates
Notifications: to send reminders and care-activity alerts you enable

7. Security

We transmit data over HTTPS and store passwords as one-way hashes. Files are stored in access-controlled cloud storage. Care data is scoped to your account and authorized care-circle members. No method of transmission or storage is 100% secure.

8. Data retention

We keep account and care data while your account is active. After account deletion, we delete associated personal data except where a limited legal, security, or backup copy must be retained for a short period and then removed.

9. Your rights

Subject to applicable law (including PIPEDA in Canada), you may request access, correction, a portable copy, or deletion of your personal data by emailing info@caresfor.app. You can also use the account-deletion options in section 2.

10. Children

CaresFor is a caregiving coordination tool. It is not directed to children under 13, and we do not knowingly collect personal information from children under 13 for their own accounts. If you believe we have collected such information, contact info@caresfor.app and we will delete it.

11. International processing

We may process data in Canada and in other countries where our service providers operate, including the United States. Those providers are used only to operate CaresFor as described above.

12. Changes

We will post updates to this page and change the effective date when this policy changes. Continued use of CaresFor after an update means you accept the revised policy.