Operator: JNJ
In short
- When you use CareRing on your own, your medicines and records stay on your phone. Nothing is sent to a server.
- If you turn on family sharing, your dose records (taken, skipped, scheduled time) go through our server to the family members you choose.
- Medicine names are not sent by default. They are sent only while Show medicine names too is on for someone, and deleted from the server when you turn it off.
- Medicine notes never leave your phone.
- No ads, no location, no contacts, no photos.
1. What we process and why
| Data | When | Why | Kept |
|---|---|---|---|
| Medicine names, notes, schedules, dose records | While you use the app (on your phone) | Reminders and history | Until you delete them or the app. Excluded from phone backups |
| Account details (Google: user ID and email; Apple: user ID; Kakao: member number, and email if you agreed) | When you sign in for family sharing | Confirming your account | Until you delete the account |
| Dose records (result and scheduled time) | While family sharing is on | Showing them to the family you chose | Until you delete the account. Scheduled times are cleaned up after 90 days |
| Medicine names | Only while Show medicine names too is on | Showing them to that person | Deleted as soon as you turn it off |
| Group name, members, sharing consent | While you use a family group | Managing who can see what | Until you delete the account |
| Push token | When you receive family alerts | Delivering family alerts | Deleted on sign-out or after 60 days unused |
| Subscription status (whether subscribed, end date, trial or not, store) | When you subscribe to or try CareRing Plus | Giving Plus to you and your family group | Until you delete the account. We never receive payment details or receipts |
2. Service providers
| Provider | What they do | What they never get |
|---|---|---|
| Supabase (servers in Seoul) | Stores accounts and family sharing data | Medicine notes, names you haven’t shared |
| Google Firebase Cloud Messaging | Delivers family alerts (fixed text with no details) | Who, which medicine, which dose |
| Google Sign-In | Confirms sign-in | Health information |
| RevenueCat | Checks store subscriptions and passes on their status | Health information, name, email |
| Sign in with Apple (iPhone) | Confirms sign-in | Health information, name, email |
| Kakao Login (Korea, Android) | Confirms sign-in | Health information |
International transfers: server data is stored in Seoul. Only family alerts leave the country, as below.
| Recipient | Country | Data | Purpose | When and how | Kept |
|---|---|---|---|---|---|
| Google LLC | United States | Push token, fixed alert text with no details | Delivering family alerts | When an alert is due, over an encrypted connection | Deleted when you sign out or after 60 days unused |
| Apple Inc. (iPhone only) | United States | Push token, fixed alert text with no details | Delivering family alerts to iPhone | When an alert is due, through Google over an encrypted connection | Same as above |
| RevenueCat, Inc. | United States | Account ID (or a random ID), subscription status | Checking subscriptions | When you subscribe or the app checks your subscription, over an encrypted connection | Until you delete the account |
Without family sharing or a Plus subscription nothing is sent abroad. To stop it, sign out or delete your account.
3. Sharing with others
We never sell your data or use it for ads. Records are visible only to the family members you choose, and only while you choose. We disclose data only where the law requires it, and only as far as required.
4. Get, correct or delete your data
- Get your records: Export my records on the My medicines screen saves everything as a CSV file.
- Stop sharing: turn off the switch for a person on the Family screen and it stops at once.
- Delete your account: tap Delete account on the Family screen to delete all your data on the server. See Deleting your account.
- Data on your phone: deleting the app removes it all.
5. What stays for a short time
- Server backups: deleted automatically within 7 days.
- Records shown on a family member’s phone: removed the next time that phone connects, and locked after 24 hours even if it doesn’t.
6. How we protect it
- All traffic is encrypted (HTTPS). Server rules limit each account to the rows it may see.
- Alarms, the lock screen and notifications show the type (pill, eye drops) instead of the medicine name.
- Server data is not end-to-end encrypted. The operator accesses it only when needed to fix a problem or handle a deletion request, and keeps no copies of record contents.
7. Children
Children under 14 (or the minimum age where you live) can’t sign in for family sharing. Solo alarms and records send nothing to a server, so anyone can use them. If we learn an account belongs to a child under that age we delete it, and a parent or guardian can ask for deletion at the email above.
8. Contact
Privacy officer: Kim Younghun, contact@carering.net
9. Changes
We announce changes in the app and on this page 7 days before they take effect.