Carelov Privacy Policy

1. Overview

This Privacy Policy explains what information Carelov ("we," "us," "our") collects when you use carelov.app and our iOS and Android apps (the "Service"), how we use it, and your choices.

2. Information We Collect

2.1 Information you provide directly:

• Account information: name, email address, phone number, password
• Care pool information: the Care Recipient's name, the facility name and location, monthly cost amount, and (if entered) the Care Recipient's other income sources used to calculate the contribution gap
• Contributor information: name, email, phone number, and the payment method you add through Stripe (Carelov does not see or store your full card or bank account number — see Section 3)
• Facility information: business name, address, and banking details submitted during Stripe's facility onboarding process (Carelov does not store full banking credentials — these go directly to Stripe)
• Communications you send us, such as support requests

2.2 Information collected automatically:

• Device information (device type, operating system, app version)
• Usage data (pages viewed, features used, approximate session length)
• IP address and general location (city/region level, derived from IP)
• Crash and error logs, used to improve app stability

2.3 Information from third parties:

• Stripe provides us with payment status information (such as whether a charge succeeded or failed) but not your full payment credentials
• If you sign in using Google or another identity provider, we receive the basic profile information you authorize (name, email)

3. What We Do Not Collect or Store

Carelov does not store full credit card numbers, bank account numbers, or routing numbers. These are collected directly by Stripe through Stripe's secure, PCI-compliant systems. Carelov receives only a token reference and limited metadata (such as card type and last four digits) needed to display your payment method in the app.

We do not collect medical records or treatment information about the Care Recipient. We do collect care-cost-related information you choose to enter (such as facility name and monthly cost) for the purpose of operating the care pool.

4. How We Use Your Information

We use the information we collect to:

• Operate care pools: calculate contribution amounts, process payments through Stripe, and send facility payouts
• Send transactional notifications (payment confirmations, failed payment alerts, upcoming charge reminders)
• Provide customer support
• Maintain platform security and prevent fraud
• Improve the Service, including through aggregated and de-identified analytics
• Comply with legal obligations, including those related to payment processing and anti-fraud requirements

We do not sell your personal information to third parties.

5. How We Share Information

We share information with:

• Stripe, to process payments, verify facility identity, and facilitate payouts. Stripe acts as an independent processor and is also subject to its own privacy policy at stripe.com/privacy.
• Service providers who help us operate the platform, such as cloud hosting (Supabase), email delivery (Resend), and crash reporting tools, under contractual confidentiality obligations.
• Other users of the same care pool, to the extent necessary for the pool to function — for example, an Organizer can see which Contributors have paid, and Contributors can see the facility name and monthly cost the pool is built around.
• Legal and safety reasons, where we believe disclosure is required by law, necessary to protect the rights or safety of any person, or necessary to investigate fraud.
• A successor entity, in the event of a merger, acquisition, or sale of assets, subject to the same privacy commitments described here unless you are notified otherwise.

6. Data Retention

We retain account and transaction information for as long as your account is active and for a reasonable period afterward as needed to comply with legal, tax, and accounting obligations, resolve disputes, and enforce our agreements. You may request deletion of your account as described in Section 9.

7. Data Security

We use industry-standard safeguards, including encryption in transit (TLS) and at rest, and access controls limiting who can view personal information. No system is perfectly secure, and we cannot guarantee absolute security.

8. International Data and Cross-Border Payments

Because Carelov supports families and facilities in different countries (for example, a contributor in the United States and a facility in Mexico), your information and payment data may use the Service, you consent to this transfer.

9. Your Choices and Rights

• Access and correction: You can review and update most account information directly in the app.
• Account deletion: You may delete your account from within the app (Settings → Delete Account) or by contacting support@carelov.app. We will delete or anonymize your personal information except where retention is required for legal, tax, or dispute-resolution purposes.
• Notification preferences: You can manage email and SMS notification preferences in account settings.
• California residents: Depending on your state of residence, you may have additional rights under laws such as the California Consumer Privacy Act, including the right to know what personal information we have collected and the right to request deletion. Contact us at support@carelov.app to exercise these rights.
• EU/UK residents: If applicable data protection law gives you rights such as access, correction, deletion, restriction, or portability, you may exercise them by contacting support@carelov.app.

10. Children's Privacy

Carelov is not directed to children under 18, and we do not knowingly collect personal information from children. If you believe a child has provided us information, contact us so we can delete it.

11. Cookies and Tracking

Our website uses cookies and similar technologies to operate core features and understand usage. You can manage cookie preferences through the consent banner shown on first visit, or through your browser settings. See Section 13 for more detail.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the app or by email before they take effect.

13. Contact Us

Questions about this Privacy Policy or your data can be sent to support@carelov.app.

Carelov uses Stripe to process payments. Stripe's handling of payment data is governed by Stripe's own privacy policy at stripe.com/privacy.