Privacy Policy
Last updated: 25 April 2026
1. Who we are
CareFam is operated by NextCode (sole proprietor: Hiroki). Address on request. Contact: info@usmc.jp. The European representative for GDPR Art. 27 can be appointed on request before public release in the EEA.
2. Data we collect
Account: an Apple-relayed e-mail and a stable Apple identifier when you sign in with Apple. Care content: family group name, patient profile (name or alias, year of birth, allergies, attending physicians), medications and dosing schedule, hospital visits and free-text notes, daily condition logs (symptoms, mood, blood pressure, weight, photographs you choose to attach). Location is used only when you tap a hospital pin to draw the map; coordinates are not stored on our servers. Device data: model, OS version, language, time zone and crash logs in aggregate form.
3. How we use it
Strictly to deliver the in-app features you see, to authenticate you, to keep your family group in sync, and to manage your subscription via Apple. We do not profile you, we do not sell data, we do not run third-party advertising and we do not use analytics SDKs that build user profiles.
4. Legal basis (GDPR)
Art. 6(1)(b) performance of the contract for app features and subscription. Art. 6(1)(a) consent for any optional photos you attach. Art. 9(2)(a) explicit consent for health-related content you choose to log.
5. Storage and transfers
Content is stored in Supabase, region eu-central-1 (Frankfurt, Germany). Crash logs are processed by Apple. We do not transfer personal data outside the EEA except via Apple’s own infrastructure under the EU-US Data Privacy Framework.
6. Sharing
Inside a family group every approved member can see the same patient data — that is the point of the app. Outside the group, nobody. We do not share your data with advertisers, brokers or social networks.
7. Retention
Active accounts: as long as you use the app. After you tap Delete account: 30 days of soft-delete, then full erasure including backups. Subscription receipts are kept 7 years for tax purposes (Italian, Spanish and Japanese law).
8. Your rights
Under GDPR Art. 15-22 and equivalent laws (Japan APPI, California CCPA) you can access, rectify, erase, restrict, export and object. Write to info@usmc.jp from the address linked to your Apple ID and we answer within 30 days. You can lodge a complaint with your national data protection authority — Garante (IT), AEPD (ES), PPC (JP).
9. Children
CareFam is not directed at people under 18. The patient (the person being cared for) may be a minor only if a legally responsible adult creates and operates the group. We do not knowingly collect data from users under 18.
10. Cookies
This website uses no cookies and no analytics. The app uses only the keychain entry that Apple generates for Sign in with Apple.
11. Changes
We notify material changes by in-app banner and by e-mail at least 30 days in advance.
12. Contact
info@usmc.jp — we read every message in English, Italian, Spanish and Japanese.