Privacy Policy

Introduction

At CareStory, we are committed to protecting your privacy and safeguarding your personal and health information. This Privacy Policy explains how we collect, use, store, and protect your information when you use the CareStory mobile application and related services.

By accessing or using CareStory, you consent to the data practices outlined in this Privacy Policy.

Information We Collect

Account Information

• Basic Details: Name, email address, mobile number and country code (if provided), date of birth, gender, blood group, and time zone (used to ensure reminders arrive at your local time).
• Login Credentials: If you sign up using email, we store your password and verify your email address using a one-time code.
• Third-Party Sign-In (Google or Apple): If you sign in using Google or Apple, we receive your name, email address, and an authentication token from the provider. If you use Apple's "Hide My Email" feature, we receive a private relay address instead of your personal email. We never receive or store your Google or Apple password.

Health Information

You may choose to upload and store:

• Medical reports
• Laboratory reports
• Diagnostic reports
• Medical history
• Family member health records
• AI-generated summaries of your uploaded reports

This information is collected only when you voluntarily upload or enter it into the app.

Device Information

To improve app performance, we may collect:

• Device model
• Operating system version
• App version
• Crash reports
• Diagnostic information

App Permissions

• Camera: Required to photograph medical reports, prescriptions, insurance documents, and profile photos.
• Photos / Media: Required to choose existing documents and photos from your gallery, and to save exported documents to your device.
• Notifications: Used to deliver medication reminders, insurance expiry alerts, and upload status updates.
• Biometric Authentication (Face ID / Touch ID / Fingerprint): Used to unlock the app. Biometric verification is performed locally by your operating system—CareStory never accesses or stores your biometric data.
• Apple Health / Health Connect: Used to display your health metrics directly within CareStory.

How We Use Your Information

We use the information we collect to provide, secure, and improve CareStory services. Specifically, we use your data to:

• Account Management: Create and secure your account, verify your email, and process your sign-in requests.
• Health Record Management: Store, organize, and display health records for you and your family, including organizing them on a chronological timeline.
• Document Processing & Automation: Automatically extract key details from prescriptions and insurance documents to eliminate manual data entry, and generate AI-powered summaries of your medical reports.
• Reminders & Alerts: Deliver medication reminders, insurance expiry notifications, and upload status updates.
• Health Integration: Display activity and wellness metrics synced directly from Apple Health or Health Connect.
• Support & Maintenance: Provide customer support, troubleshoot technical issues, maintain platform security, and prevent fraud or abuse.

Use of AI in App

Artificial Intelligence (AI) Usage: CareStory utilizes AI technology solely to provide specific features at your request:

• Document Recognition: To automatically read and extract details from scanned or uploaded prescriptions and insurance documents, reducing manual entry.
• Report Summarization: To generate concise summaries of your medical reports when you choose to summarize them.

Please note: AI-generated summaries are intended for informational purposes only. They do not constitute medical advice, diagnosis, or treatment and should not replace consultation with a qualified healthcare professional.

Data Security

We use industry-standard technical and organizational security measures to protect your personal and health information, including encryption in transit and, where applicable, encryption at rest, access controls, and regular security reviews.

Important: No method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security. We continuously work to strengthen our safeguards and will notify affected users in accordance with applicable law in the event of a data breach affecting their information.

Sharing Your Information

We do not sell or rent your personal or health information to anyone.

We work with a limited number of vetted service providers who help us operate CareStory. These providers are contractually restricted to using your information only to provide their services to us, and are prohibited from using it for their own marketing or other purposes. We may also share information:

• When required by applicable law or legal process
• To protect our legal rights, or to investigate fraud or security incidents
• With your explicit consent

Data Retention

We retain your information only for as long as necessary to provide our services or comply with legal obligations.

If you delete your account, we will delete or anonymize your personal information within a reasonable period, unless retention is required by law.

Your Rights

Depending on your location, you may have the right to:

• Access your personal information
• Update or correct inaccurate information
• Request deletion of your account and associated data

To exercise these rights, please contact us using the information in the Contact Us section below. We will respond within the timeframe required by applicable law.

Children's Privacy

CareStory is not intended for use by children under the age of 13 (or the minimum age required by local law) without the involvement of a parent or legal guardian. We do not knowingly collect personal information directly from children under 13. Parents or guardians may create and manage health records for dependent family members, including minors, using their own account.

If we become aware that a child under 13 has provided us with personal information without verifiable parental consent, we will take steps to delete that information.

Third-Party Services

CareStory may use trusted third-party service providers for:

• Secure cloud storage
• User authentication
• Analytics
• Crash reporting
• AI processing (where applicable)

These providers are authorized to process information only as necessary to provide their services and are contractually required to protect your information.

International Data Transfers

Your information may be stored and processed in countries other than your own. Where we transfer personal information internationally, we take steps designed to ensure it receives an adequate level of protection, consistent with applicable law.

Governing Law and Jurisdiction

This Privacy Policy shall be governed by and construed in accordance with the laws of India, without regard to its conflict of law principles. Subject to the paragraph below, any dispute, claim, or controversy arising out of or relating to this Privacy Policy, or CareStory's collection, use, or processing of your information, shall be subject to the exclusive jurisdiction of the competent courts at Ahmedabad, Gujarat, India, and you agree to submit to the personal jurisdiction of such courts.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be published within the application or on our website with an updated Effective Date, and, where required by law, we will provide additional notice.

Your continued use of CareStory after any updates constitutes acceptance of the revised Privacy Policy.

Contact Us

If you have any questions regarding this Privacy Policy or your personal information, please contact us:

CareStory Support

Email: support@carestory.app

Medical Disclaimer

CareStory is designed to help users securely store medical records and generate AI-assisted summaries of uploaded reports. The information and AI-generated insights provided by the app are intended for informational purposes only and should not be relied upon as medical advice, diagnosis, or treatment.

Always seek the advice of a qualified healthcare professional regarding any medical condition or healthcare decision.