Privacy Policy

Last updated: September 23, 2026
Data controller: Cuidose S.L., Barcelona, Spain — contact: [email protected]

Cuidose helps families coordinate medication for an older relative. There are two kinds of users: the caregiver (who creates an account and configures everything) and the senior (who uses a paired phone and never creates an account). This policy covers both.

What we collect

Caregiver account — when you sign in with Google, Apple, or email we store: your email address, display name, optional profile photo, and sign-in provider. If you add a phone number as the emergency contact, we store it too.

Care data you enter — the senior profile's display name (e.g. "Mom") and optional birth date; medications (name, dosage, schedule, instructions, pill appearance, stock counts); appointments and calendar events; the emergency contact's name and phone number.

Health-related data — dose logs: whether a scheduled dose was recorded as taken, snoozed, skipped, or missed, and when. This is health data. We treat it with the strictest care: it is used only to show adherence to the family members you invited and to send you the alerts you configured. We never use it for advertising and never sell or share it with third parties for their own purposes.

Device and technical data — push-notification tokens (to deliver sync nudges and alerts), device platform (iOS/Android), the time the senior's device last connected, your app language, and crash/usage diagnostics via Firebase Crashlytics and Firebase Analytics.

Messages and read receipts — short messages a caregiver sends to the senior's phone, who sent them, and when each one reached the phone and was seen. From the senior's phone we also store whether it allows notifications, whether Critical Alerts (iPhone) are on, and the app version, so caregivers can tell whether reminders will ring.

The senior's phone — authenticates anonymously; the senior never provides an email, password, or name. The pairing link/QR contains a random one-time token, valid for 24 hours.

What we do NOT do

• No advertising, no ad networks, no tracking for ads.
• We do not sell your data — ever.
• No social features outside your own family group.
• The senior device cannot modify care data; it only records dose outcomes, a "last seen" timestamp, whether it can alert (notifications, Critical Alerts), and when a caregiver's message was delivered and seen.

Where your data lives

Data is stored in Google Firebase (Firestore, Authentication, Cloud Messaging), operated by Google LLC, acting as our processor. Data may be processed on servers in the European Union and the United States; transfers outside the EU rely on the EU-U.S. Data Privacy Framework and Standard Contractual Clauses. Medication reminders themselves are stored on the phone and work without any connection.

Who can see what

Only members of your family group (the caregivers you invite) can see the senior's care data. Our staff do not access your data except when strictly necessary to fix a problem you report, and always under confidentiality.

Legal bases (EU/EEA users)

• Performance of a contract: providing the service you signed up for.
• Consent: health-related dose logs (you may withdraw consent by deleting the senior profile or your account).
• Legitimate interest: service security, abuse prevention, crash diagnostics.

Retention and deletion

Care data is kept while the family account is active. Deleting a senior profile (Settings → Delete) permanently removes the profile, all medications, dose history, events, and revokes the paired device — immediately and irreversibly. To delete your caregiver account and all associated data, contact [email protected]; we complete deletion within 30 days.

Your rights

Depending on where you live (GDPR, CCPA, etc.) you may have the right to access, correct, export, restrict, or delete your data, and to lodge a complaint with your supervisory authority. Write to [email protected] and we will respond within the legally required period.

Children

Cuidose is not directed at children under 16 and we do not knowingly collect data from them.

This website and cookies

This website (cuidose.app) sets no cookies and uses no analytics, advertising or tracking of any kind, and it loads nothing from other companies. The only things it keeps are the language you pick and whether you have closed the notice that explains this, both in your browser's local storage (cuidose_lang, cuidose_notice_seen). They never leave your device and are strictly necessary to show the page the way you asked, so no consent is needed. The site is served by Firebase Hosting (Google), which, like any web server, briefly processes your IP address to deliver the page.

Changes

We will notify you in the app of material changes to this policy before they take effect.