Privacy policy
Last updated August 20, 2026
Set legal_entity and legal_jurisdiction in
_config.yml before this page goes live. This policy describes
CareDuo's actual data handling accurately, but it needs a real, contactable
legal entity behind it, and a lawyer should read it before launch.
This policy explains what CareDuo collects, why, and what happens to it. It covers the CareDuo iPhone app and this website.
CareDuo shares health-adjacent information between people by design. That is the product, and this page sets out the limits of that sharing.
The short version
- CareDuo collects the medication information you enter and a record of which doses were taken, skipped or missed.
- That information is visible to you and to any caregiver you invited and can remove.
- CareDuo does not collect location data.
- CareDuo does not sell personal data, and has no advertising, insurer, employer or pharmacy integrations.
- You can delete your account and your data.
Who we are
CareDuo is operated by [legal entity name: set legal_entity in _config.yml].
For privacy questions, write to contact@deductify.org.
What CareDuo collects
Account information
When you sign in with Apple, CareDuo receives an account identifier and, if you choose to share it, an email address. Apple's Hide My Email relay works normally. CareDuo never receives your Apple password.
Medication and dose information
What you enter and what you confirm:
- medication names, dosages, notes and schedules;
- dose records: taken, skipped or missed, the scheduled time and the time you confirmed;
- optional supply counts and refill thresholds.
This is health-related information. It is stored because the app cannot do its job without it, and it is shared only inside a Care Circle you control.
Care Circle membership
Who is in a Care Circle, and the invitations that put them there. Invitation codes are stored hashed, never in a form that could be read back out.
Device information for notifications
A push notification token per device, so caregiver alerts can reach you. Tokens are readable only by the account that owns them and are removed when you sign out.
Diagnostics
Crash reports and basic usage events, used to find defects and understand which parts of the app are used. These do not contain medication names.
What CareDuo does not collect
- Location. None, at any level of precision.
- Contacts, photos, messages, or other apps' data.
- Health data from Apple Health, which CareDuo does not currently read or write.
- Advertising identifiers. There is no advertising in CareDuo.
How the information is used
Only to operate the app:
- scheduling and delivering reminders;
- recording doses and showing history and adherence;
- showing a caregiver the day of the person who invited them;
- sending missed-dose alerts and refill reminders;
- keeping accounts secure and diagnosing faults.
CareDuo does not use your medication or dose information to build advertising profiles, and does not sell it.
Who it is shared with
People you invited
Caregivers in your Care Circle see your medications, your dose records and your adherence. They see nothing else about you. You can remove a caregiver at any time, which ends their access immediately.
An invitation only takes effect when the other person accepts it on their own device.
Service providers
CareDuo runs on Google Firebase (authentication, database, cloud functions, push delivery, crash reporting and analytics), and uses Apple's push notification service to deliver notifications. These providers process data on CareDuo's behalf under their own security commitments.
Nobody else
CareDuo does not share your information with insurers, employers, advertisers, data brokers, pharmacies or healthcare providers. If a legal obligation ever compelled disclosure, we would comply only to the extent required.
Where data is stored
On Google Cloud infrastructure. Data may be processed in countries other than your own; where required, transfers rely on the safeguards those providers offer.
How long it is kept
- Medication and dose records: while your account exists, so history stays available.
- Invitations: expire after a few days and are deleted after use.
- Device tokens: removed at sign-out or when the device stops registering.
- Diagnostics: retained on a rolling basis by the diagnostic provider.
Deleting your data
Deleting your account removes your medications and dose history, and ends caregivers' access to it.
Dose records inside a Care Circle are shared records: deleting your account removes them for everyone in the circle. To delete your account, use the app's account settings or write to contact@deductify.org.
Your rights
Depending on where you live, you may have rights to access, correct, export or delete your personal data, to object to certain processing, and to complain to a data protection authority. Write to contact@deductify.org and we will respond within the period the law requires.
Children
CareDuo is not directed at children and is not intended for anyone under 16. We do not knowingly collect information from children. If a child's information has been provided, write to us and it will be removed.
This website
This site sets no analytics or advertising cookies and embeds no third-party trackers. It is served as static files by GitHub Pages, which logs requests for operational and security purposes.
Not medical advice
CareDuo helps people remember and record medication that has already been prescribed. It does not provide medical advice, diagnose conditions, check drug interactions or recommend dosages, and it is not a substitute for professional care or an emergency service.
Changes
Material changes will be reflected here with a new "last updated" date, and significant ones announced in the app.