Privacy Policy

Last Updated: June 2026

1. About This Policy

CareLink is operated by Surekha Jivani. This policy explains how we collect, use, store and protect your personal and health information in accordance with the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs).

2. Information We Collect

• Account information: email address, name, password (encrypted)
• Health information: medication names, dosages, frequency, duration, number of repeats
• Prescription images: photos or screenshots of prescriptions you upload for scanning
• Medication logs: date and time each dose is marked as taken
• Device information: push notification token, device timezone
• Caregiver relationships: which caregiver is linked to which patient

3. How We Use Your Information

• To display your medications and send dose reminders
• To notify your linked caregiver when doses are taken or missed
• To send refill reminders before your medication runs out
• To scan and extract medication details from prescription images
• To detect potential drug interactions and display warnings
• To generate medication history reports you can share with your doctor

4. Prescription Image Scanning (AI)

When you scan a prescription, the image is temporarily transmitted to Anthropic’s Claude AI (claude.anthropic.com) for text extraction only. Anthropic does not store or train on your prescription images. Once scanning is complete, only the extracted text is saved to your account. The original image is stored securely in your CareLink account.

Anthropic’s privacy policy: www.anthropic.com/privacy

5. Third Party Services

We use the following services to operate CareLink:

• Supabase (supabase.com) — database and authentication, servers located in AWS ap-southeast-2 (Sydney, Australia)
• Anthropic Claude API — prescription image scanning only
• Firebase Cloud Messaging (Google) — push notifications
• Vercel — app hosting and API
• Expo — mobile app platform

Each service has its own privacy policy. We only share the minimum data necessary for each service to function. We do not sell your data to any third party. Ever.

6. Caregiver Access

If you link a caregiver to your account:

• Your caregiver can see your medication list and dose history
• Your caregiver is notified when you take or miss a dose
• Your caregiver can scan prescriptions on your behalf
• You can remove your caregiver at any time from Profile settings
• Caregivers cannot access your prescription images

7. Data Storage & Security

• All data is encrypted in transit (HTTPS/TLS)
• Passwords are hashed and never stored in plain text
• Database access is protected by Row Level Security (RLS) — each user can only access their own data
• Push notification tokens are stored securely and used only to send CareLink notifications
• Prescription images are stored in a private, access-controlled storage bucket

8. Data Retention & Deletion

• You can delete your account at any time from Profile → Delete Account
• Deletion permanently removes all your personal data, health information, prescription images, and medication logs
• Backup data may be retained for up to 30 days after deletion for disaster recovery purposes, after which it is permanently destroyed

9. Your Rights (Australian Privacy Principles)

Under the Privacy Act 1988 you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Make a complaint about how we handle your information
• Request deletion of your information

To exercise any of these rights, contact us at supportcarelink@gmail.com

10. Data Breach Notification

In the event of an eligible data breach affecting your information, we will notify you and the Office of the Australian Information Commissioner (OAIC) within 30 days, as required by the Notifiable Data Breaches scheme.

11. Children

CareLink is not intended for use by children under 18. We do not knowingly collect personal information from children. If a caregiver is managing medications for an elderly family member, the caregiver is responsible for ensuring appropriate use.

12. Encryption

CareLink uses standard encryption (HTTPS/TLS) for all data transmission. We do not implement any custom or non-standard encryption beyond industry-standard protocols. This app does not use encryption that requires export compliance reporting under US Export Administration Regulations.

13. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes via the app or email. Continued use of CareLink after changes constitutes acceptance of the updated policy.

14. Contact & Complaints

Privacy Officer: Surekha Jivani
Email: supportcarelink@gmail.com

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):
Website: www.oaic.gov.au
Phone: 1300 363 992