- Everything you write is saved on your phone first. If you never turn on family sharing, nothing ever leaves the device.
- We do not sell your data. We do not show adverts. We do not use an analytics SDK. Nothing here feeds an advertising profile.
- We collect the minimum needed to make the app work: your account, the household record you create, and the technical logs needed to keep sync running.
- You can export everything you have written as a JSON file, and you can delete your account and its data from inside the app.
1. Who we are
FamiCare is a caregiving app built for one family at a time. It is developed by an independent developer based in the United Kingdom. For the purposes of the UK GDPR and the EU GDPR, the developer is the data controller for the personal data described in this notice.
If you have a question about anything here, or you want to exercise a right described in section 9, write to famicare.health.app@gmail.com.
2. What FamiCare does with your data
FamiCare is offline-first. Every medicine, dose, note, photo, contact and document is written to a database on your own phone first. The app works fully with no signal. If you turn on family sharing and invite another person, the household record is then replicated to a small server so the other devices in your household can see the same day.
There are only two paths by which data ever leaves your phone:
- Family sharing, if you switch it on and invite someone. What gets shared is the household record: the people you care for, their medicines and doses, the care log, the rota, the ledger, the document vault. You can switch this off at any time in Settings, and remove a member at any time.
- Account operations, which are handled by our authentication and sync server whenever you sign in with an email magic link or a password, or when the app checks whether your session is still valid.
If you never sign in and never turn on sharing, FamiCare never contacts a server, and we never receive any of your data.
3. What we actually collect
3.1 Account information
When you sign in, our authentication provider (Supabase) stores:
- Your email address.
- A hashed password, if you set one (we never see your password in plain text).
- A user identifier and session token issued by the authentication service.
- Server-managed metadata: which household you currently belong to, and what role you hold in it.
3.2 Household record
If family sharing is on, the following is replicated to our sync server so other members of your household can see it. This list is deliberately exhaustive so there are no surprises:
| What | Examples |
|---|---|
| The person you care for | Name, date of birth, NHS number, allergies, blood type, GP details, mobility and diet notes |
| Household members | Display name, role, relationship, optional phone and email |
| Medicines | Name, strength, dose, times, stock count, prescriber, instructions |
| Dose log | What was taken, skipped, refused or missed, and when |
| Care log | Notes, moods, falls, handovers, appointment summaries |
| Vitals | Blood pressure, pulse, weight, temperature, blood sugar, oxygen saturation |
| Tasks and rota | Assignments, shift times, swap requests |
| Contacts | GP, pharmacy, district nurse, family |
| Ledger | Expenses, who paid, who owes whom |
| Documents | Metadata for prescriptions, care plans, POAs, ID copies (the file itself is stored as described below) |
| Legal records | Power of attorney, advance decisions, DoLS status, where the will is kept |
| Care hours | Time each carer spent |
| Audit trail | Who recorded each dose and when |
3.3 Photos and files
Care-entry photos, receipts, and document scans are stored on your phone. They are uploaded to our storage server only if photo upload is switched on for your build and you have attached them to a shared entry. Files are held in a private bucket that only members of your household can reach. A private care entry (marked "Only me") is never uploaded — not its text, not its photos, not even a tombstone.
3.4 Technical information
While sync is enabled, our server records the minimum required to keep it working:
- A randomly generated install identifier, so rows written by this phone can be attributed to this phone for conflict resolution. This is not your advertising ID and does not follow you across apps.
- Timestamps of sync operations and a request counter used to rate-limit abuse.
- Standard server logs from our hosting provider (Supabase), including IP address and request metadata, retained for a short period for security and reliability.
FamiCare itself writes an in-memory log of recent technical events. It is capped at 500 entries, lives only until you close the app, and is only ever transmitted if you explicitly tap "Share diagnostics" from Settings.
3.5 Payments
If you buy a subscription or a one-time purchase, the transaction is handled by Google Play or the Apple App Store. We never see your card details. A payment processor (RevenueCat) receives an anonymous customer identifier and the purchase record so we can check whether your account is entitled to Premium features. RevenueCat does not receive any health data, any care notes, or any medicines.
4. What we do NOT collect
For clarity, FamiCare does not and will not:
- Show adverts, or embed an advertising SDK.
- Use a crash-reporting or analytics SDK that could receive health-adjacent data (see our internal design rule ADR-009).
- Read your contacts, your SMS, your call log, or your photo library beyond the specific file you choose to attach.
- Access your precise location.
- Sell, rent, or share your data with data brokers, marketers, or insurers.
- Use your data to train machine-learning models.
5. Where your data is stored
On your phone, the app database lives in the app's own private storage, protected by your device's own encryption (file-based encryption on modern Android and iOS). Our server-side storage is hosted by Supabase, on infrastructure operated by Amazon Web Services. Data is encrypted in transit (TLS) and encrypted at rest by the hosting provider. Depending on where you are, your data may be transferred to and stored in the European Union, the United Kingdom, or the United States. Where a transfer outside the UK/EEA takes place, it relies on the UK Government's International Data Transfer Agreement or the European Commission's Standard Contractual Clauses, together with the hosting provider's safeguards.
6. How long we keep it
- On your phone: until you delete it in the app, or uninstall the app.
- On the server: until you delete the household, leave the household, or delete your account. When you delete your account from inside the app, we delete your local data, your household memberships, your uploaded files, and your authentication record.
- Server access logs: retained by our hosting provider for a short, fixed period for security purposes, then discarded automatically.
- Backups: our hosting provider may keep encrypted snapshots for a limited period as part of its disaster-recovery commitments. These are not used to serve or restore individual accounts and are overwritten on their own schedule.
7. Your rights
Under the UK GDPR and the EU GDPR you have the right to:
- Access the personal data we hold about you.
- Correct anything that is wrong. In FamiCare you can edit almost everything directly; there is no need to write to us.
- Erase your data. The in-app delete button completes the erase locally and on the server.
- Portability. The app exports everything as a JSON file that you can read in any text editor.
- Object to or restrict processing. Turning off family sharing stops server-side processing for that household.
- Withdraw consent for special-category data at any time, by deleting it or turning off sharing.
- Complain to your local supervisory authority. In the UK that is the Information Commissioner's Office, ico.org.uk. In the EU, it is the authority of your member state.
There is no charge for exercising any of these rights, and we will respond within one month. If you cannot use the in-app tools for any reason, email famicare.health.app@gmail.com.
8. Children
FamiCare is intended for adult caregivers. It is not directed at children under 16, and we do not knowingly collect data from them. If you believe a child has created an account, please contact us and we will remove it.
9. Deleting your account and your data
You can delete everything from inside the app:
- Open Settings ▸ Data & Privacy.
- Tap Delete all records from this phone to clear the local copy. This removes the phone's data immediately.
- To remove your account and the server copy, use the Delete account option, which also signs you out and deletes your household memberships and uploaded files.
If you have left a household but your records still exist on the server under that household, ask the household owner to remove you, or write to us and we will complete the removal.
10. Security
Every row in the shared household is protected on the server by row-level security policies. Only members of your household can read your household's rows; membership is checked against the server's own membership table, not just the signed-in token. Passwords are stored hashed by our authentication provider, never by us. Optional in-app PIN lock stores only a salted hash on your device; the PIN itself never leaves the phone and is never synced.
No system is perfect. If you become aware of a vulnerability in FamiCare, please report it to famicare.health.app@gmail.com rather than publishing it, and we will work with you on a fix.
11. Not a medical device
FamiCare is a record-keeping and reminder tool. It does not diagnose, treat, monitor, or give medical advice, and it must not be relied on as a substitute for professional judgement. Always follow the instructions on the box and from your GP, pharmacist, or nurse.
12. Changes to this notice
If we make a material change — a new category of data, a new subprocessor, a change to how long we keep something — we will update this page and, where the change affects you personally, tell you inside the app before the change takes effect. The "Last updated" date at the top of this page always reflects the current version.
13. Contact
Email: famicare.health.app@gmail.com
Post: available on request for formal legal correspondence.