Privacy Policy
Effective April 21, 2026 · Last updated September 26, 2026
1. Who We Are
CareMaple Inc. (“we,” “our,” or “us”) is a family care coordination platform accessible at caremaple.com. It is an organisational tool that helps families and professional caregivers manage tasks, appointments, documents, and care records. It is not a medical provider, insurer, or clinical service.
For privacy questions, contact us at: support@caremaple.com
2. Information We Collect
a) Account & Profile Information
When you sign up, we collect your email address, first and last name, and a securely hashed password. You may optionally add a phone number and address to your profile.
b) Care Circle Data
Information you enter about the person receiving care (the care recipient), including their name, medical notes, diagnoses, medications, allergies, emergency contacts, and insurance details. This information is entered voluntarily and is only accessible to members of that Care Circle.
c) Care Activity
Tasks, appointments, journal entries, and documents you create within a Care Circle. This includes care notes, task completion records, appointment dates, uploaded files, and any media you attach.
d) Audit & Activity Log
A permanent, tamper-proof record of all care actions taken within each circle. This log is a core product feature — it cannot be deleted, as it serves as a legal-grade evidence trail.
e) Technical & Usage Data
Your browser timezone (used to display times correctly), IP address (processed by our infrastructure provider), and general usage patterns. We do not use third-party analytics trackers.
f) Payment Information
If you subscribe to a paid plan, payment is processed by Stripe. We never store your credit card number. Stripe provides us with a subscription status token only.
g) Optional AI Care Plan Extraction
If you choose to use AI care plan extraction and explicitly confirm that you are authorized to share the document, we send that document to Anthropic solely to extract care information for your review.
3. How We Use Your Information
- To operate the CareMaple platform and provide the features you use
- To send care reminders, task alerts, and appointment notifications you have enabled
- To generate Proof of Care reports and weekly summaries on your request
- To process your subscription and manage billing
- To respond to support requests you send us
- To detect and prevent abuse or security incidents
- To extract care information from a document only when you choose the optional AI feature and give explicit consent
We do not use your care data for advertising, profiling, or sale to third parties — ever.
4. Who Can See Your Data
CareMaple uses a role-based access system. Only members you invite to a Care Circle can view that circle's data. Within a circle, what each member can see and do is determined by the role you assign them (Owner, Family, Agency, Caregiver, or Viewer).
CareMaple staff do not access the contents of your Care Circles except in limited circumstances: to investigate a security incident, respond to a legal obligation, or resolve a technical issue you have reported.
5. Third-Party Services We Use
| Provider | Purpose | Location |
|---|---|---|
| Supabase (AWS) | Database and file storage | Canada |
| Vercel | Web hosting and CDN | Global (US primary) |
| Resend | Transactional email delivery | United States |
| Stripe | Payment processing | United States |
| Anthropic | Optional AI care plan document extraction after your explicit consent | See provider privacy policy |
| OpenStreetMap / Nominatim | Map tiles and address geocoding when you use those features | See provider privacy policy |
| Apple Push Notification service / Firebase Cloud Messaging | Optional push notification delivery | See provider privacy policy |
CareMaple's primary database and file storage are in Canada. Data may also be processed by the third-party providers listed above when you use their related features.
6. Data Retention
We retain your data for as long as your account is active. If you delete your account, your personal profile and care circle data will be deleted. The audit log (care activity history) is permanently immutable by design — it cannot be deleted because it serves as a legal evidence trail. Any data in the audit log is anonymised upon account deletion (your personal identifier is removed).
7. Your Rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate data (edit your profile at any time)
- Delete your account and personal data (available in Settings)
- Export your care data (Proof of Care and weekly summary reports)
- Object to certain uses of your data
- Withdraw consent at any time
To exercise any of these rights, contact us at support@caremaple.com. We will respond within 30 days.
8. Children's Privacy
CareMaple is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, contact us immediately and we will delete it.
CareMaple may be used to coordinate care for a child (e.g., a child with a disability). In such cases, the adult account holder is responsible for the information entered about the child.
9. Security
We implement industry-standard security practices including: encrypted connections (HTTPS/TLS), database-level row security policies, role-based access controls, and a permanent audit trail. Uploaded documents are stored in a private, access-controlled storage bucket with signed URLs for download.
No system is perfectly secure. If you discover a security concern, report it to support@caremaple.com.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top. For significant changes, we will notify you by email. Continued use of CareMaple after changes constitutes acceptance of the updated policy.
11. Contact Us
For any privacy-related questions, requests, or concerns:
CareMaple Inc.
Email: support@caremaple.com
Website: caremaple.com