Privacy policy

Effective September 30, 2026

Care is a student class project for the University of Michigan course SI 526, run by the Care student team (“we”, “us”). This page explains, in plain language, what information Care collects, how it is used, who can see it, and how to delete it. Questions: SI-526-Care@umich.edu.

What we collect

From Google, when you sign in. Care uses Google sign-in only, with Google's basic openid, email, and profile permissions. Google shares your name, email address, whether that address is verified, your profile picture link, and your Google account ID. Our sign-in provider, Supabase Auth, keeps these with your account. Care copies your name and email address into your family space so other members know who you are. It does not show your profile picture. We do not get access to your Gmail, contacts, calendar, Drive, or any other Google data.

What you and your family space enter.

• The family space name, and when the parent accepted the data notice.
• Care plans (name, usual rhythm, “good to know” notes) and their tasks.
• Visits: which day a plan was started and by whom, each task checked off with who checked it and when, and the handoff note with who wrote it and when.
• Invites: the email address a parent invites, who sent it, and when it was sent, accepted, or revoked. The invite link itself is stored only in a scrambled (hashed) form.

Technical basics. Signing in sets cookies that keep you signed in. Our hosting providers keep routine server logs (such as IP address, browser type, and request times) to run and secure the service. Care has no advertising, analytics, or tracking tools, and no tracking cookies.

How we use it

Only to run Care:

• to sign you in and know which family space you belong to;
• to show a family space's plans, visits, and notes to its members;
• to create and check invites, so only the invited Google account can join.

We do not sell your information, show ads, build profiles, or use your information for analytics or tracking. We do not send your information to AI or machine-learning services or use it to train models. The app sends no email. We do not read what you enter unless you ask us for help, we need to investigate a security problem or abuse, or the law requires it.

Google user data

We use the information we receive from Google (your name, email address, profile picture link, and account ID) only to sign you in and to identify you to the other members of your family space. We do not sell it, use it for advertising, or share or transfer it to anyone except the service providers below, and only as needed to run Care. Care's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Who can see your information

• Members of your family space. The parent and the caretakers they invite can see the family space's plans, tasks, visits, check-offs, handoff notes, and each other's names and email addresses. Only the parent can see the invites. Members of other family spaces cannot see any of it; the database enforces this, not just the app.
• Service providers. Supabase (database and sign-in hosting, in the United States) stores the data. Vercel hosts the website. They process data only to provide those services to us.
• If the law requires it. We would share information only if legally required to.

Please read: this is not a medical service

• Care is a student project. It is not HIPAA-compliant and not a medical service.
• You may enter real information, but you do so at your own risk.
• The data is hosted on a free plan with no backups. It could be lost.
• Only invite people you trust. Everyone in your family space can see its care plans.

Keeping and deleting your data

We keep your information until you delete it, or until we shut the service down (see Terms). Signing out does not delete anything.

Delete my account and data is in the account menu (the circle with your initial, top right). It takes effect immediately and cannot be undone:

• If you are a family space's only parent, that family space is deleted along with all of its plans, tasks, visits, check-offs, handoff notes, and invites, including what caretakers wrote there. Caretakers lose access.
• If you are a caretaker, you leave the family space. Check-offs, visits, and handoff notes you wrote stay in the family's visit history but are no longer linked to you; the app shows them as written by “a former member”. The record of the invite you accepted, which includes your email address, stays with the family space until it is deleted.
• In every case, your membership and your sign-in account (including the name, email, and profile details from Google) are deleted.

Removing Care's access in your Google account settings stops future sign-ins but does not delete your data. If you can't sign in and want your data deleted, email SI-526-Care@umich.edu. Our providers' routine logs expire on their own schedules.

Children

Care is for adults: parents and the caretakers they invite. It is not directed to children under 13, and children should not have accounts. Please don't create an account for a child. If you believe a child has signed up, contact us and we will delete the account.

Changes to this policy

If we change this policy, we will update this page and its effective date.

Contact

The Care student team (SI 526, University of Michigan): SI-526-Care@umich.edu.