CarePack

Privacy Policy
Last updated: October 1, 2026

This Privacy Policy explains how CarePack collects, uses, stores, shares, and protects personal information when you use the CarePack application, website, and related services.

Your privacy matters.

CarePack is designed to help families and caregivers organize sensitive caregiving and health-related information. CarePack does not sell personal health information and does not use health information stored by users for targeted advertising.

1. Information We Collect

We may collect information you provide directly to CarePack, including:

2. Information About Other People

CarePack may allow an adult user to enter information about a child, dependent, family member, or another individual receiving care.

If you provide information about another person, you are responsible for ensuring that you have appropriate authorization or another lawful basis to provide and share that information through CarePack.

3. Technical and Usage Information

CarePack may collect limited technical information necessary to operate, secure, maintain, and improve the service.

This may include device information, application activity, authentication events, security logs, diagnostics, crash information, and similar technical data.

4. How We Use Information

CarePack may use information to:

CarePack does not use health information stored by users to make medical decisions on their behalf.

5. Sensitive Health Information

CarePack may contain health-related and caregiving information because users choose to enter that information into the service.

We treat health-related information as sensitive and limit its use to purposes reasonably necessary to provide, secure, support, and maintain CarePack, except where another use is authorized by the user or required by law.

6. No Sale of Personal Health Information

CarePack does not sell personal health information.

CarePack does not provide personal health information to advertisers for targeted advertising and does not use health information stored by users to build advertising profiles.

7. Care Team Sharing

Information within a Pack may be visible to other authorized users who have been invited to participate in that Pack.

The Pack owner is responsible for deciding whom to invite and for removing access when a person should no longer have access.

Users should invite only people they trust to receive and handle sensitive information appropriately.

8. Service Providers

CarePack may use third-party service providers to support functions such as hosting, databases, authentication, communications, subscriptions, analytics, security, and technical operations.

These service providers are required to protect user information in a manner consistent with this Privacy Policy and applicable law, and may process information only as necessary to provide services to CarePack.

Examples of the types of providers CarePack uses include cloud hosting, database, authentication, and file storage providers; the Apple App Store and Google Play, together with a subscription management provider, for purchases; push notification and email delivery providers; and an artificial intelligence provider for optional photo scanning, described below.

8a. Optional AI-Assisted Photo Scanning

CarePack offers an optional feature that reads a photo you choose — such as a medication label, a health insurance card, or a provider's card — and fills in the related fields for you to review.

When you use this feature, the photo you selected is sent to OpenAI, our artificial intelligence provider, solely to read the text in the image and return the extracted details to CarePack. The photo may contain health, medication, or insurance information.

CarePack asks for your permission in the app before the first photo is sent. If you do not give permission, the feature is not used and you can enter the information yourself. Under OpenAI's API data policies, information sent through its API is not used to train its models.

Information returned by the AI may be incomplete or inaccurate. Always review it before saving.

Care Circle safety and content moderation

To keep Care Circle safe, photos shared in Care Circle — and any comment sent with them — are checked by an automated safety service before they are shared with other members. For this purpose the image and comment are sent to OpenAI's content moderation service, which only classifies whether the content is objectionable (for example, violent, sexual, or hateful). Images that do not pass are deleted and are not shared. Under OpenAI's API data policies, information sent through its API is not used to train its models.

Care Circle messages are also checked for objectionable language before they are posted. If you report a message or photo, CarePack keeps a copy of the reported content, who reported it, and why, so that we can review the report. If you block another user, CarePack stores that block so their Care Circle messages and notifications are hidden from you.

9. Security

CarePack uses reasonable administrative, technical, and organizational safeguards designed to protect information against unauthorized access, loss, misuse, alteration, or disclosure.

CarePack also uses account authentication and may use additional protections such as an application PIN.

However, no application, device, network, database, or electronic storage system can be guaranteed to be completely secure.

10. Data Retention

CarePack may retain information for as long as reasonably necessary to provide the service, maintain account and security records, comply with legal obligations, resolve disputes, prevent fraud, and protect the integrity of CarePack.

Retention periods may vary depending on the type of information and the reason it is maintained.

11. Account and Data Deletion

You can delete your CarePack account at any time from within the app (My Packs → Delete Account), or by contacting privacy@carepack.app.

Deleting your account removes your account and profile, removes you from Packs owned by others, and permanently deletes the Packs you own — including their information and photos — for all of their members.

Certain information may remain temporarily in backups, security records, transaction records, or other systems when retention is reasonably necessary for legal, accounting, fraud-prevention, security, dispute-resolution, or technical purposes.

Deleting a CarePack account cannot necessarily remove information previously copied, photographed, downloaded, or otherwise retained independently by another authorized user.

12. Security Incidents

If CarePack becomes aware of a security incident involving personal or health-related information, CarePack will investigate and take reasonable corrective action.

Where required by applicable law, CarePack will provide required notices to affected individuals, regulators, or other appropriate parties.

13. HIPAA and Consumer Health Information

CarePack is primarily designed as a consumer caregiving coordination service.

The presence of health-related information in CarePack does not necessarily mean that all information stored in CarePack is governed by the Health Insurance Portability and Accountability Act of 1996 ("HIPAA").

Depending on CarePack's activities and applicable law, other federal or state privacy and consumer-health requirements may apply.

CarePack will comply with applicable legal obligations concerning personal and consumer health information.

14. Children

CarePack is not intended for children under 13, and we do not knowingly collect personal information from children under 13 who create accounts. If we learn that a child under 13 has created an account, we will delete it. Parents or guardians who believe this has happened can contact privacy@carepack.app.

Users between 13 and 17 years old may use CarePack only as caregivers invited to a Pack, with the permission of a parent or legal guardian. Owning a Pack or purchasing a subscription requires being at least 18.

An authorized adult may maintain information about a minor as a Pack Member when the adult has appropriate authority or another lawful basis to do so.

15. Legal Requirements and Safety

CarePack may preserve or disclose information when reasonably necessary to comply with applicable law, respond to valid legal process, prevent fraud or abuse, protect CarePack systems, protect users or others, or establish or defend legal claims.

16. Business Transfers

If CarePack or the business operating CarePack is involved in a merger, acquisition, restructuring, financing, sale of assets, or similar transaction, information associated with CarePack may be transferred as part of that transaction, subject to applicable law and existing privacy commitments.

17. Your Privacy Rights

Depending on where you live, applicable law may provide rights relating to your personal information, including rights to request access, correction, deletion, or information about certain processing activities.

CarePack may need to verify your identity before completing certain requests in order to protect users and prevent unauthorized access or deletion.

18. Changes to This Policy

CarePack may update this Privacy Policy as features, technology, business practices, or legal requirements change.

Material changes may be communicated through CarePack, email, the CarePack website, or another appropriate method.

19. Contact

For privacy questions, account requests, or data-related requests, contact:

CarePack Privacy
privacy@carepack.app

For general support:

support@carepack.app

20. Terms of Use

Use of CarePack is also governed by our Terms of Use.