Privacy Policy

Last updated: July 24, 2026
Data controller: Cuidose S.L., Barcelona, Spain — contact: privacy@cuidose.app

Cuidose helps families coordinate medication for an older relative. There are two kinds of users: the caregiver (who creates an account and configures everything) and the senior (who uses a paired phone and never creates an account). This policy covers both.

What we collect

Caregiver account — when you sign in with Google, Apple, or email we store: your email address, display name, optional profile photo, and sign-in provider. If you add a phone number as the emergency contact, we store it too.

Care data you enter — the senior profile's display name (e.g. "Mom") and optional birth date; medications (name, dosage, schedule, instructions, pill appearance, stock counts); appointments and calendar events; the emergency contact's name and phone number.

Health-related data — dose logs: whether a scheduled dose was recorded as taken, snoozed, skipped, or missed, and when. This is health data. We treat it with the strictest care: it is used only to show adherence to the family members you invited and to send you the alerts you configured. We never use it for advertising and never sell or share it with third parties for their own purposes.

Device and technical data — push-notification tokens (to deliver sync nudges and alerts), device platform (iOS/Android), the time the senior's device last connected, your app language, and crash/usage diagnostics via Firebase Crashlytics and Firebase Analytics.

The senior's phone — authenticates anonymously; the senior never provides an email, password, or name. The pairing link/QR contains a random one-time token, valid for 24 hours.

What we do NOT do

• No advertising, no ad networks, no tracking for ads.
• We do not sell your data — ever.
• No social features outside your own family group.
• The senior device cannot modify care data; it only records dose outcomes and a "last seen" timestamp.

Where your data lives

Data is stored in Google Firebase (Firestore, Authentication, Cloud Messaging), operated by Google LLC, acting as our processor. Data may be processed on servers in the European Union and the United States; transfers outside the EU rely on the EU-U.S. Data Privacy Framework and Standard Contractual Clauses. Medication reminders themselves are stored on the phone and work without any connection.

Who can see what

Only members of your family group (the caregivers you invite) can see the senior's care data. Our staff do not access your data except when strictly necessary to fix a problem you report, and always under confidentiality.

Legal bases (EU/EEA users)

• Performance of a contract: providing the service you signed up for.
• Consent: health-related dose logs (you may withdraw consent by deleting the senior profile or your account).
• Legitimate interest: service security, abuse prevention, crash diagnostics.

Retention and deletion

Care data is kept while the family account is active. Deleting a senior profile (Settings → Delete) permanently removes the profile, all medications, dose history, events, and revokes the paired device — immediately and irreversibly. To delete your caregiver account and all associated data, contact privacy@cuidose.app; we complete deletion within 30 days.

Your rights

Depending on where you live (GDPR, CCPA, etc.) you may have the right to access, correct, export, restrict, or delete your data, and to lodge a complaint with your supervisory authority. Write to privacy@cuidose.app and we will respond within the legally required period.

Children

Cuidose is not directed at children under 16 and we do not knowingly collect data from them.

Changes

We will notify you in the app of material changes to this policy before they take effect.