Version 3.0 · Effective August 1, 2026
Privacy Policy
Care Chronicles is a care-record organization service available to customers in Canada and the United States through carechronicles.com. This policy describes how Care Chronicles handles personal information.
Information we handle
We handle account details, authentication and security logs, subscription status, support requests, and the communications, contacts, documents, voice memos, reminders, and Care Circle information users choose to store. Stripe receives payment information directly; Care Chronicles does not store full payment-card numbers.
Purposes and authority
We use information to provide, secure, maintain, support, and bill for the service; deliver account notices; create user-requested exports; prevent abuse; and meet legal obligations. A user storing another person's information is responsible for having the authority or consent required to do so.
Sharing and service providers
Care-record information is shared with Care Circle members according to permissions assigned by a record Manager. Providers supporting VPS hosting, email delivery, malware scanning, and Stripe billing process information only as needed to provide those services. We may disclose information when required by law, to protect rights or safety, or during a business reorganization subject to appropriate safeguards. We do not sell personal information.
Location, safeguards, and incidents
Information may be processed where Care Chronicles and its providers operate. We use encrypted connections, password hashing, optional two-factor authentication, access controls, malware scanning, activity records, and encrypted backups. No service can guarantee absolute security. Contact us promptly if you suspect unauthorized access.
Retention
Active user data is retained until the user deletes the relevant record or account, unless a longer period is required for legal, fraud-prevention, dispute, or security purposes. Encrypted disaster-recovery backups are retained for up to 14 days. Expired sessions and authentication tokens are removed automatically.
Access, correction, export, withdrawal, and deletion
Users can review and correct records, download PDF or ZIP exports, leave a Care Circle, remove members, change the Manager, delete care records, and delete an eligible account through the product. Privacy requests may also be sent to the address below. We may verify identity and authority before fulfilling a request.
Children and care recipients
Care Chronicles accounts are intended for adults capable of entering a contract. Information about a child or other care recipient may be stored only by a person with appropriate authority or consent.
Changes and complaints
Material policy changes will be dated and communicated through the service or account email when appropriate. Questions, complaints, and access requests may be sent to privacy@carechronicles.com. Product support is available at support@carechronicles.com.