CareSteps Privacy Policy

Draft. CareSteps is in testing; this policy will be finalized before the app is released. Effective date: [FILL IN when published].

Who we are

CareSteps is made by Lukla Logic LLC. Contact: support@luklalogic.ai.

The short version

You can use CareSteps with or without an account.

• Without an account, everything you enter stays on your iPhone. We can't see it.
• With an account (Sign in with Apple or Sign in with Google), you work inside a company: the agency or team you care for clients with. Your clients' records and photos are stored on our server so they sync to your other iPhones, and the people in your company can see them according to their role (below). Nobody outside the company can, and we use the records only to sync them to the people who may see them.

There are no ads, analytics or tracking in either case.

What the app stores

• Client profiles you enter: names, dates of birth, addresses, diagnoses, risks, emergency contacts, medical information (conditions, allergies, medications), behavioural notes and communication needs.
• Activity logs: date, duration, competency and satisfaction scores, level of assistance, notes and photos.
• Incident reports, including photos, the people notified and follow-up notes.
• Reminders and whether they were completed.
• Your name as the caregiver, and your settings.

On your iPhone this is kept in the app's private storage with iOS data protection. Your iPhone's own backups (iCloud Backup or a computer backup) may include it, under Apple's or your computer's protection.

Accounts

If you sign in:

• Sign in with Apple: Apple gives us an account identifier and an email address. If you choose "Hide My Email", it's an Apple relay address. We don't ask Apple for your name. We also keep a token from Apple so we can disconnect CareSteps from your Apple ID when you delete your account.
• Sign in with Google: Google gives us an account identifier, your email address and your name and profile picture as recorded by Google. We use only the identifier and email.
• We use your data only to run the account and the company, and to sync records to the people who may see them. We don't sell it, share it for advertising, or use it to train anything.

Companies, roles and who sees what

A company is created by the person who becomes its Owner, and others join with an invite code or link that an Owner or Admin makes. An invite code works once, expires after 7 days, can be cancelled, and is stored only as a one-way hash. Each person in a company has one role:

• Owner (one per company) and Admin: see every client in the company and all of their records, add and archive clients, see who is on the team and who is assigned to which client, and manage invites and members (only the Owner invites admins or changes roles).
• Caregiver: sees only the clients an Owner or Admin has assigned to them, and their records. Archived clients are read-only and hidden from caregivers.
• Everyone in the company sees the company's details and the team list (each person's name in the company and role).

Client records are stored in the company, not in the caregiver's own account. If you leave a company, or an Owner or Admin removes you or unassigns a client, you lose access to those records and the app removes them from your iPhone. The records stay with the company. Deleting a company (the Owner only) deletes its records and photos.

Company details we collect when an Owner creates or edits a company: its name, phone number and time zone (required), and optionally email, address, license number and a logo. Members of the company can see them. A caregiver's name in a company is whatever they enter when they join; they can change it.

Our server is run by Supabase, Inc. (database, file storage and sign-in), acting as our processor under its data processing terms. Records, photos and company details are sent over an encrypted connection (HTTPS) and stored encrypted at rest. The server is in the United States (AWS us-east-1). Apple and Google handle the sign-in itself under their own privacy policies.

Records saved by an earlier version of CareSteps under a single caregiver's account are moved into a company the caregiver chooses; the earlier copy is then deleted from the server.

Permissions

• Camera: only when you choose to take a photo for a log, incident, activity or profile. Photos stay in the app (and sync to your company if you're signed in). They aren't added to your photo library.
• Photos: you pick photos with the system picker; the app only receives the photos you choose.
• Notifications: to remind you about medications and care tasks. They're scheduled on your iPhone. The notification shows the task and the client's first name. Notification text is never sent to our server.
• Face ID / passcode: if you turn on the app lock. Apple handles the check; the app never sees your face data.

When data leaves your iPhone

• When you're signed in, to sync with your company (above), where its members see it according to their role.
• When you send it yourself: exporting a report (PDF, JSON or CSV) and sharing it through the iOS share sheet, or calling or texting a contact through your phone. Where it goes then is up to you and the app you share it with.

Deleting your data

• Settings → Delete Account (signed in) deletes your account: your sign-in, your membership in every company and your client assignments, the Apple token (CareSteps is disconnected from your Apple ID), and any earlier-version records still under your account. Records you made in a company belong to the company and stay in it for the other members. If you are the only member of a company, deleting your account deletes the company with its clients' records and photos. If you own a company that has other members, you must first transfer ownership or delete the company. The records are then removed from this iPhone. This can't be undone.
• Settings → Sign Out removes the companies' records from this iPhone after they've synced; they stay in the company.
• An Owner can delete a company at any time: its clients' records, photos, members and invites are deleted from our server, and members' iPhones drop it the next time they connect.
• Without an account, deleting the app removes everything.

Server backups made by Supabase are overwritten within [FILL IN: the plan's backup retention, e.g. 7 days].

Children

CareSteps is a tool for adult caregivers and isn't designed for children under 13.

Your rights

You can see, export (Settings → Export All Data) and delete your data in the app at any time. For any other request, email support@luklalogic.ai and we'll answer within 30 days.

Not a medical device

CareSteps helps you keep records. It doesn't give medical advice, and it isn't a replacement for your organisation's official record system or for emergency services.

Changes

If this policy changes, the new version will be posted here with a new effective date.