Privacy Policy

Caremate is a private, offline-first personal health record published by Hexhound ("we", "us"). This policy explains what data the app handles, where it lives, and the limited cases in which anything leaves your device. We designed Caremate so your health information stays with you.

1. Who we are

The data controller for the purposes of the EU/UK GDPR is Hexhound. For any privacy question or request, contact us at [email protected].

2. Your health data stays on your device

Everything you record in Caremate — symptoms, medications, visit notes, lab results, attachments, photos, and any other entries — is stored in a local database on your device only. It is not uploaded to us and we cannot access it.

• On-device text recognition (OCR) and the optional on-device AI assistant run entirely locally on your device; the documents and text they process are not sent to us or to any server.
• If you uninstall the app without backing up, this data is permanently deleted from your device.

3. When data leaves your device — and only then

a) Backups you create. If you enable or run a backup, Caremate writes a backup file to a location you choose (for example your device storage or your own cloud-storage folder). We do not receive these backups; they go where you direct them and remain under your control.

b) "Share with your doctor". When you explicitly create a share, Caremate builds an export of the entries you selected, encrypts it on your device, and uploads only the encrypted file to Google Drive. The decryption key is placed in the share link itself (in the part after the #, which browsers never send to any server) — so only someone with the full link can open the export, and the hosting infrastructure only ever handles unreadable ciphertext. You can delete the shared file from your Drive at any time to revoke access.

c) Purchases. The optional one-time "remove ads" purchase is processed by Google Play Billing. We never see your payment details; Google reports only whether the purchase succeeded so the app can unlock the ad-free state.

4. Analytics and crash reporting

To keep the app stable and understand broad usage patterns, we use Google Firebase:

• Firebase Analytics — aggregate, non-identifying usage events (e.g. app opens, feature usage, approximate region, device type). This is not linked to your health records.
• Firebase Crashlytics — diagnostic reports if the app crashes (device model, OS version, and a technical stack trace) so we can fix bugs. Crash reports do not contain your health entries.

See Google's Firebase privacy information.

5. Advertising

Caremate shows ads through Google AdMob to support the free version. To serve ads, Google may process identifiers such as your advertising ID and general device/usage information. Ads are never targeted using the health information you store in the app — that data is not available to the ad system.

• Consent (EEA, UK, Switzerland). The first time you open the app in these regions, a Google consent form lets you accept or decline personalized ads. If you decline, you still see non-personalized ads. You can reopen these choices at any time from the app's privacy options.
• Remove ads. The one-time in-app purchase removes all ads.

See Google's AdMob & privacy information and Google's advertising policies.

6. What we collect — summary

7. Data retention

Your on-device data is retained until you delete it or uninstall the app. Analytics, crash, and advertising data are retained by Google according to their own policies. We do not operate a server that stores your personal data.

8. Deleting your data

You can delete your data at any time:

• Health records on your device. Delete individual entries inside the app, or remove everything at once by uninstalling Caremate or clearing its storage in your device settings. Because these records live only on your device, this erases them permanently.
• Backups and shares you created. Delete the backup file from wherever you saved it, and delete any shared file from your Google Drive to revoke access to that share.
• Analytics, crash, and advertising data held by Google. To request deletion of the diagnostic and advertising data associated with your device, email us at [email protected] and we will action the request with Google on your behalf. You can also reset or delete your advertising ID at any time in your device's ad settings.

9. Your rights

Depending on where you live (including under the EU/UK GDPR and US state privacy laws such as the California CCPA/CPRA), you may have rights to access, correct, delete, or restrict processing of your personal data, and to opt out of the "sale" or "sharing" of personal information.

• Because your health records live only on your device, you can access, export (via backup/share), or delete them directly in the app at any time.
• For personalized ads, use the in-app privacy options (EEA/UK/CH) or your device's ad-settings to reset or opt out of your advertising ID.
• For any other request regarding data handled by Google on our behalf, contact [email protected].

10. Children

Caremate is not directed to children under 13 (or the minimum age of digital consent in your country), and we do not knowingly collect data from them.

11. Changes to this policy

We may update this policy as the app evolves. Material changes will be reflected here with a new "last updated" date.

12. Contact

Questions or requests: [email protected].