Privacy Policy

1. Information We Collect

Care Taker may collect information that you provide directly, information generated through use of the app, and information required to provide requested services, including:

• Name, profile details, profile image, email address, phone number, and login/account information
• Health conditions, medicine information, medicine schedules, reminders, appointments, and other health-related information entered or generated in the app
• Prescriptions, medicine images, food images, laboratory/health reports, PDFs, and other files or content submitted by you for analysis
• AI analysis inputs and outputs associated with your submitted content
• Device identifier and technical/device information used to support account, security, notifications, and application functionality
• App settings, language preferences, notification preferences, and other application configuration information
• Location information, including fine/coarse device coordinates and the reverse-geocoded address, city, state, and country, when location access is requested and permitted
• Payment/order-related information required to identify and reconcile transactions, such as order identifiers and the phone number or other identifiers supplied during a payment flow

Care Taker does not require location access for every feature. If a feature requests location, the app will explain the purpose before requesting permission. You may deny or later withdraw device location permission, although location-dependent features may then be unavailable.

2. How We Use Your Information

We use information only for purposes reasonably connected with the Care Taker services you request, including:

• Creating and maintaining your account and profile
• Providing medicine, food, health-report, reminder, notification, and care-management functionality
• Processing submitted prescriptions, medicine images, food images, PDFs, and health reports for requested AI analysis
• Using location information to determine your approximate/current location and reverse-geocode coordinates into an address, city, state, and country where required by a requested feature
• Providing relevant recommendations, content, maps/location features, and service functionality
• Processing and reconciling payments, orders, subscriptions, or analysis charges
• Maintaining account security, preventing misuse, troubleshooting, and protecting the reliability of our services
• Sending requested notifications and service communications
• Responding to customer support, privacy, and account requests
• Improving application performance, reliability, and user experience

3. Data Protection

We use reasonable technical and organizational safeguards appropriate to the nature of the information we process. These measures may include access controls, authentication controls, least-privilege access, protected server/database environments, encrypted connections such as HTTPS/TLS for data transmitted between supported components, controlled credentials/secrets, logging and monitoring, and measures designed to prevent unauthorized access, alteration, disclosure, or destruction.

No internet-based service can guarantee absolute security. If we become aware of a security incident affecting your information, we will take reasonable steps to investigate, mitigate, and provide notifications where required by applicable law.

4. Sharing of Information

Care Taker does not sell, rent, or trade personal information. Information may be disclosed to processors and service providers only as reasonably necessary to operate features you request, maintain the application, process transactions, or comply with law. Depending on the feature and configuration, these providers may include:

• Backend hosting/API and database providers: hosting, storage, API delivery, caching, security, and application infrastructure.
• Google Maps/Geocoding services: processing location coordinates to provide maps or reverse-geocoded address, city, state, and country information when a location feature is used.
• Google Gemini: AI processing of user-submitted images, PDFs, prescriptions, food/medicine content, health reports, and related information when Gemini is the selected AI provider.
• OpenAI: AI processing when an applicable Care Taker service is configured to use OpenAI instead of or in addition to another AI provider.
• Cashfree and payment/UPI services: payment processing, order creation, payment status, reconciliation, and transaction-related services.
• Notification providers: delivery of push notifications, reminders, and service notifications to your device.
• Web/content providers: delivery of external or third-party informational content, links, recommendations, or service data where a feature requires it.

Care Taker receives only the payment/order information needed for its application records and reconciliation, such as order identifiers, payment status, transaction references, amount, timestamps, and relevant phone/account identifiers. Payment credentials, UPI authentication, card credentials, bank authentication, and other sensitive payment details are handled by the applicable payment provider or financial institution and are not stored by Care Taker unless expressly stated in a specific payment flow.

Information may also be disclosed where required by applicable law, court order, regulatory requirement, fraud/security investigation, or to protect the rights, safety, and security of Care Taker, its users, or others.

5. Cookies & Analytics

Care Taker may use analytics, logs, device information, and technical data to understand application performance, troubleshoot errors, maintain security, and improve user experience. Where third-party analytics or technical services are enabled, their processing is limited to the applicable service purpose and their own terms and privacy practices.

Location data: When a location-enabled feature requires it, Care Taker may request Android fine and/or coarse location permission. With your permission, the app may obtain device coordinates and use reverse geocoding to determine an address, city, state, and country. Location is optional for features that do not need it, and you may deny or withdraw device permission. Where server-side storage is required, coordinates and the resulting address, city, state, and country may be stored with the relevant account/service record.

Location data is retained only while reasonably necessary for the feature, account/service record, security, legal, or dispute-resolution purposes described in this policy, and is deleted or anonymized when no longer required, subject to backup and legal retention requirements.

6. User Rights

You may have the right to:

• Access information associated with your account
• Correct or update inaccurate profile information
• Withdraw consent for optional processing through the relevant in-app setting, device permission control, or by contacting us
• Deny or withdraw device location permission through Android settings
• Decline an AI analysis before submitted content is transmitted to the AI provider
• Request deletion of your account and associated personal information, subject to information that must be retained by law or for legitimate security, fraud, payment, dispute, or backup purposes
• Contact support regarding privacy, consent, access, correction, deletion, or grievance matters

By using features that require personal information, you acknowledge the applicable in-app notice and provide consent where consent is the applicable legal basis. For optional processing, Care Taker will request affirmative consent where required. Withdrawal of consent does not affect processing that occurred lawfully before withdrawal and may not stop processing that is permitted or required without consent under applicable law.

7. Health Scans & AI Processing

Care Taker allows you to voluntarily submit prescriptions, medicine images, food images, laboratory/health reports, PDFs, and related information for AI-assisted analysis. These submissions may contain health information and other personal information.

When you request an AI analysis, the submitted content and information necessary to perform that analysis may be transmitted from Care Taker's backend to the selected AI processing provider. Care Taker currently uses Google Gemini for AI analysis. An OpenAI configuration may also be available or enabled for applicable services. The provider's role is to process the submitted content and return an AI-generated analysis or result requested by the app.

• AI processing is performed to provide the analysis or related feature requested by you.
• AI-generated results are not guaranteed to be accurate and are not medical diagnoses, professional medical advice, or a replacement for a qualified healthcare professional.
• The AI provider may process submitted content under its applicable terms and privacy practices. You should review the provider's current policies before submitting sensitive information.
• Care Taker will not intentionally use submitted health scans for advertising or sell them to advertisers.

8. Payment Information

Care Taker may provide payment/order details to the applicable payment processor to initiate or verify a transaction. Depending on the payment flow, Care Taker may receive and retain information such as your account/user identifier, phone number, order ID, payment/order reference, amount, status, and timestamps needed to provide the purchased service and maintain transaction records.

Cashfree, UPI, banks, and other payment applications or financial institutions involved in the selected payment method may independently process payment credentials and authentication information. Care Taker does not request or store your UPI PIN, card PIN, bank password, or similar authentication secret.

9. Data Retention

Care Taker retains personal and health-related information only for the periods described below, unless a longer retention period is required by applicable law, legal proceedings, accounting requirements, fraud prevention, security, or dispute resolution.

• Account/profile data: Retained while your account remains active. After account deletion, personal account information is deleted or anonymized within 30 days, except information that must be retained for legal, security, fraud-prevention, payment, or dispute-resolution purposes.
• Health reports/scans: Retained while your account remains active or while required to provide the requested service. After account deletion or a valid deletion request, such data is deleted or anonymized within 90 days, except where longer retention is required or permitted by applicable law.
• AI analysis records: Retained for up to 90 days for providing the requested AI-assisted functionality, maintaining relevant service records, and security purposes, after which they are deleted or anonymized unless longer retention is required by applicable law.
• Location data: Retained for up to 30 days after it is no longer required for the applicable location-enabled feature or service record, unless longer retention is required for legal, security, or dispute resolution purposes.
• Payment/order records: Retained for up to 7 years, or for the period required by applicable accounting, tax, financial, legal, fraud-prevention, or dispute-resolution requirements, whichever is longer where legally required.
• Backups: Deleted or anonymized information may remain in protected backup systems for up to 90 days before the applicable backup is automatically overwritten or securely deleted.

After the applicable retention period expires, Care Taker will delete or anonymize the information so that it can no longer reasonably be associated with the user, except where retention is required by law or otherwise legally permitted.

10. Account Deletion

Account deletion is available directly within the Care Taker app. You can delete your account at any time using the account deletion feature provided in the app. You may also submit an account deletion request through our website.

When you request account deletion, Care Taker will take reasonable steps to remove or anonymize personal information associated with your account from active production systems within the applicable data retention period described in Section 9, including profile information and user-generated records that are not required to be retained.

Information that must be retained for legal, payment/accounting, security, fraud-prevention, dispute-resolution, or other lawful purposes may be retained for the applicable period specified in Section 9. Data in backups may remain for up to 90 days before being automatically overwritten or securely deleted.

Where the app stores information locally on your device, account deletion does not necessarily remove every local file automatically. You should also remove the app or clear its local application data if you want locally cached files, images, or settings removed from the device.

11. In-App Privacy Disclosures

Care Taker provides feature-specific disclosures in addition to this Privacy Policy. Before requesting location permission, the app should explain in plain language why location is needed and whether the feature is optional. Before sending an image, PDF, prescription, food/medicine scan, or health report to an external AI service, the app should explain that the content will be transmitted to the selected AI provider, identify the provider where reasonably practicable, explain the purpose, and obtain affirmative consent where required.

These disclosures are intended to give you meaningful information before the relevant data is collected or shared. Device runtime permission prompts are additional technical permissions and do not replace the in-app privacy disclosure or consent process.

12. Security & Protection of Health Data

We use reasonable technical and organizational safeguards appropriate to the nature of the information we process. These may include access controls, authentication controls, least-privilege access, protected server/database environments, encrypted connections such as HTTPS/TLS for supported data transmission, controlled credentials/secrets, logging and monitoring, and measures designed to prevent unauthorized access, alteration, disclosure, or destruction.

No internet-based service can guarantee absolute security. If we become aware of a security incident affecting your information, we will take reasonable steps to investigate, mitigate, and provide notifications where required by applicable law.

13. User Responsibility & Limitation of Liability

Care Taker is designed to help users manage reminders, health-related information, schedules, and personal care activities. The application is intended for informational and organizational purposes only and should not replace professional medical advice, diagnosis, or treatment.

• Users are responsible for verifying medicine schedules, reminders, appointments, and health-related information entered into the app.
• Care Taker does not guarantee the accuracy, completeness, or uninterrupted availability of reminders, notifications, or data.
• The company, its owners, employees, affiliates, or developers shall not be responsible for any direct, indirect, incidental, medical, financial, or personal loss resulting from misuse of the app, missed reminders, incorrect information entered by users, delayed notifications, technical issues, or decisions made based on app data.
• Users are solely responsible for consulting qualified healthcare professionals regarding medical conditions, medicines, treatment, or emergency situations.
• Care Taker shall not be held responsible for damages caused by device issues, internet problems, operating system limitations, third-party service failures, or incorrect use of the application.
• By using Care Taker, users agree that they use the application at their own discretion and responsibility.

14. Changes to Privacy Policy

Effective Date: August 26, 2026

Last Updated: August 26, 2026

We may update this Privacy Policy occasionally to reflect changes to the application, processing activities, service providers, or applicable legal requirements. Updates will be reflected on this page with a revised effective/last-updated date. Where required, we will provide an appropriate notice and obtain consent for material changes that require consent.

This Privacy Policy is intended to provide clear notice about how Care Taker handles personal information, including location information and health-related content, and is designed to operate consistently with applicable privacy requirements, including the Digital Personal Data Protection Act, 2023 (DPDP Act), and rules or regulations applicable to the processing of personal data in India, as they become applicable.

16. Contact Us & Grievance Channel

If you have any questions regarding this Privacy Policy, contact us:

• Email: shukr.codenova.tech@gmail.com
• City: Gwalior, Madhya Pradesh, India