Privacy Policy

This Privacy Policy explains how personal information is handled when you use yourCare Organiser.

yourCare Organiser is designed to help individuals, families, carers and eligible organisations organise care-related information while giving users control over the information they choose to enter, store and share.

Because information entered into the service may include health and care-related information, privacy, security, data minimisation, purpose limitation and user control are important principles in the operation of the service.

This Privacy Policy should be read together with the Terms & Conditions and any additional privacy or consent information presented when a particular feature is used.

The information processed depends on the features you choose to use. It may include:

• Account information: your name, email address, account identifier, selected role and authentication-related information.
• Profile and preference information: accessibility settings, notification preferences, Quiet Mode, text-size preferences and other settings you choose.
• Care-organisation information: tasks, appointments, notes, care plans, briefs and similar records.
• Health and care-related information: medication information, readings, symptoms, chronic-care information, menopause-related information and other health-related information you choose to enter.
• Care Circle and consent information: invitations, sharing permissions, consent records and related coordination information.
• Subscription information: plan, entitlement, purchase and renewal-related information.
• Support information: information you provide when requesting help, submitting feedback or communicating about the service.
• Security and audit information: records needed to authenticate users, protect accounts, investigate misuse and maintain application security.
• Technical information: limited device, browser, network, request or diagnostic information where necessary for operation, security or troubleshooting.

Health and care-related information may constitute sensitive or special-category personal data under applicable data-protection law.

Such information is processed only where there is an appropriate lawful basis and, where required, an additional legal condition permitting the processing of sensitive or special-category data.

You control which optional health and care information you choose to enter into the service.

You should not enter another person's sensitive information unless you are authorised and legally permitted to do so.

Information may be collected:

• when you create or update an account;
• when you enter, upload, dictate, edit, save or delete information;
• when you create tasks, appointments, notes, readings, care plans or other records;
• when you manage Care Circle or sharing permissions;
• when you purchase, restore or manage a subscription;
• when you contact support or provide feedback; and
• automatically where limited technical processing is necessary for authentication, security, service operation or diagnostics.

Personal information may be processed where necessary to:

• create, authenticate and maintain your account;
• provide the functions you request;
• store and organise information you choose to record;
• support reminders, planning and care organisation;
• enable authorised Care Circle and sharing functions;
• provide AI-assisted or automated features you choose to use;
• administer subscriptions and recognise subscription entitlements;
• provide customer support;
• protect against fraud, abuse and unauthorised access;
• maintain security, reliability and service operation;
• comply with applicable legal obligations; and
• establish, exercise or defend legal rights where necessary.

Where the GDPR or equivalent European data-protection law applies, processing relies on an appropriate legal basis depending on the purpose and circumstances.

These bases may include performance of a contract, compliance with legal obligations, legitimate interests where appropriate and consent where consent is required or appropriate.

Where health or other special-category information is processed, an appropriate additional legal condition will be relied upon where required by law.

Where processing depends on consent, consent may be withdrawn for future processing subject to applicable law.

yourCare Organiser is designed so that care information is not automatically shared merely because another person or organisation uses, supports or sponsors the service.

Where sharing functionality is available, information is shared according to the permissions and actions associated with that feature.

Users should review both the intended recipient and the information before authorising a share.

Where supported, sharing permissions can be changed or revoked. Revocation affects future access through the service but cannot necessarily undo information already lawfully received by an authorised recipient.

Some features may use artificial intelligence, automated systems or deterministic processing to assist with organisation, classification, drafting, summaries or similar supportive tasks.

Where information must be transmitted to an external processing provider to provide a selected feature, only information reasonably necessary for that purpose should be transmitted, subject to the applicable technical configuration, legal basis and safeguards.

AI-generated material may contain errors or omissions and should be reviewed before it is saved, shared or relied upon.

AI-assisted features are not medical diagnosis, medical advice, emergency services or a substitute for qualified professional care.

yourCare Organiser uses RevenueCat infrastructure to support subscription purchasing and entitlement management.

Subscription-related information may include an application user identifier, product identifier, purchase status, entitlement information, renewal information and transaction information required to provide or restore paid access.

RevenueCat may process end-user subscription and transaction information on behalf of its customers as a data processor.

Full payment-card details are handled through the relevant secure payment infrastructure and do not need to be stored directly by yourCare Organiser in order to recognise subscription entitlements.

Service providers may be used where necessary to operate yourCare Organiser.

Depending on the production configuration and features used, these providers may support:

• authentication and account management;
• database and application infrastructure;
• hosting and deployment;
• subscription and payment processing;
• email or service communications;
• AI-assisted processing where enabled;
• security and reliability; and
• technical support.

Providers are expected to process personal information only for appropriate purposes and subject to applicable contractual, security and data-protection requirements.

yourCare Organiser does not sell personal health or care information as part of its ordinary service.

Health and care information is not intended to be disclosed to advertisers or data brokers for targeted advertising.

An employer, charity, healthcare organisation or other eligible organisation may provide sponsored access to the service.

Sponsoring an account does not, by itself, give the sponsoring organisation access to a user's private care information.

Where an organisational feature permits information sharing, access should occur only according to applicable permissions, legal basis and feature configuration.

Where you choose to request information about or connect with an independent in-person support provider, information reasonably necessary to fulfil that user-requested connection may be shared with the relevant provider.

Independent providers remain responsible for their own services and, where applicable, for their own processing of personal information.

Some technology or service providers may process information in countries other than the country in which you live.

Where European data-protection law applies and personal information is transferred internationally, appropriate legal safeguards will be used where required.

Technical and organisational measures are used to protect personal information against unauthorised access, disclosure, alteration, loss or destruction.

Measures may include authenticated access, access controls, encrypted network transmission, restricted database access, security policies, audit mechanisms and other safeguards appropriate to the service.

No online service can guarantee absolute security. Users should protect their account credentials and report suspected unauthorised access promptly.

The service is designed to process information reasonably necessary for the features selected by the user.

Users should avoid entering unnecessary sensitive information and should share only information relevant to the intended recipient and purpose.

Personal information is retained only for as long as reasonably necessary for the purpose for which it was processed, to provide the service, maintain security, comply with legal obligations or resolve legitimate disputes.

Different categories of information may require different retention periods.

Where information is deleted using an available application control, it may still be retained for a limited period where necessary for backup integrity, security, legal compliance or the establishment, exercise or defence of legal claims.

Where available in Settings, you can use the data-export function to obtain a copy of information associated with your account in the format provided by the application.

Statutory data-access and portability rights remain available independently of this convenience feature where applicable.

yourCare Organiser provides account and data-management controls intended to allow users to delete information and sign out through the application where that functionality is available.

Valid deletion requests may also be handled through the service's support or contact process where necessary.

When deletion applies, associated personal information will be deleted or anonymised as required, except where limited retention is necessary or permitted under applicable law.

Cancelling a recurring subscription and deleting an account are separate actions. An active recurring subscription may also need to be cancelled through the relevant subscription-management facility.

Depending on where you live and the law that applies, you may have rights concerning your personal information, including the right to:

• request access;
• request correction;
• request deletion where applicable;
• request restriction of processing;
• object to certain processing;
• receive certain information in a portable format where the right to data portability applies;
• withdraw consent where processing relies on consent; and
• lodge a complaint with a competent data-protection supervisory authority.

These rights may be subject to conditions or exceptions under applicable law.

AI-assisted drafting, organisation and similar support features are intended to assist users rather than make legally significant decisions about them.

Where applicable law provides rights concerning decisions based solely on automated processing that produce legal or similarly significant effects, those rights remain unaffected.

yourCare Organiser is not intended to encourage children to provide personal or health information without the involvement, supervision or authorisation required by applicable law.

Where a parent, guardian or authorised carer uses the service to organise information concerning a minor, that person is responsible for ensuring they are authorised and have an appropriate lawful basis to do so.

The web application may use technologies necessary for authentication, security, session continuity, user preferences and core application operation.

Where non-essential cookies or similar tracking technologies are introduced and applicable law requires consent, appropriate information and consent controls will be provided before those technologies are used.

This Privacy Policy may be updated to reflect changes to the service, technology, legal requirements or privacy practices.

The current version will display its latest update date.

Where applicable law requires additional notice or consent for a material change, the required process will be followed.

Questions, privacy requests or concerns about personal information may be submitted through the contact or Help Centre functionality made available by yourCare Organiser.

Additional legally required controller identity, business contact or data-protection information may be provided through the applicable Legal Notice, Impressum or other legal information associated with the service.