Caremint ("Caremint", "we", "us") provides a medication-reminder and health-tracking app (the "App"). This policy explains what data we collect, why, who we share it with, and your rights. It aligns with India's Digital Personal Data Protection Act, 2023 (DPDP Act) and, for users in the EEA and the UK, with the EU / UK GDPR where it applies.
a. Health & medication data (sensitive): medicines, dosages, schedules, dose history, refills, expiry dates, health measurements (blood pressure, glucose, weight, mood, etc.), appointments, diary notes, water intake, and — if enabled — menstrual cycle data (dates, flow, symptoms).
b. Account data: when you sign in — email, display name, and an account identifier, via Firebase Authentication (Google, Apple, or email/password).
c. Photos: when you use scan-to-add or expiry scan, the image of the medicine box is processed to extract text.
d. Contacts: if you add a caregiver from your contacts, the App reads contacts on your device to let you pick one. Contact details are not uploaded by this feature.
e. Diagnostics: crash reports, error logs, and basic device/OS info via Firebase Crashlytics.
f. Messaging/device identifiers: a push token (Firebase Cloud Messaging) and an app-integrity token (Firebase App Check).
g. Subscription data: purchase/subscription identifiers via RevenueCat and the app store. We never receive your card or UPI details.
We use your data to provide reminders/alarms/tracking, optional cloud backup & sync, caregiver monitoring (sharing your medicines and dose history with a caregiver you invite and approve), AI label reading, reliability (crash diagnostics), security (App Check), and subscription management.
We do not use your data for advertising, profiling, or automated decision-making with legal or similarly significant effects.
We do not sell your data or share it for advertising. We share only with:
Data is encrypted in transit (HTTPS/TLS). Cloud data is stored on Google's infrastructure and may be processed on servers outside India (e.g. the United States); by using cloud features you consent to such transfer. For personal data transferred out of the EEA/UK, our processors rely on Standard Contractual Clauses and equivalent safeguards. On-device data remains on your device. Firebase security rules restrict your data to you and the caregivers you approve.
On-device data is kept until you delete it or uninstall. Cloud data is kept while your account exists; when you delete your account or use "Erase all my data", we delete your cloud documents (caches may take a limited time to purge). Diagnostics follow Firebase Crashlytics defaults.
Caremint is not directed at children under 18 and we do not knowingly collect their data. A parent/guardian may use the App to manage a dependant's medication under their own account.
You may access, correct/update, and erase your data (Settings → "Erase all my data", account deletion, or uninstalling), and withdraw consent (sign out, revoke caregiver access, or stop using the scan) — the App keeps working locally.
If you are in the EEA/UK (GDPR) you additionally have the right to data portability, to restrict or object to certain processing, and to lodge a complaint with your local Data Protection Authority. In India, you may approach the Data Protection Board once operational.
We may update this policy; material changes will be reflected by the "Last updated" date and, where appropriate, an in-app notice.
For any privacy question, data request, or grievance, contact us at support@caremint.app. We aim to respond within the timelines required by law.
