This privacy policy applies to the CareCircles app (hereby referred to as "Application") for mobile devices, which was created by Circle Apps LLC (hereby referred to as "Service Provider") as a Free service for schools and educational institutions. The Application is intended for use "AS IS".

Effective Date: April 23, 2025

1. Overview

CareCircles is designed with a privacy-first approach. The application does not collect or store personal data on its own servers. Instead, it facilitates access to data already managed and controlled by the educational institutions that use the app. All access is restricted to verified school users with proper authorization.

2. Information We Access and How

2.1 Authentication Data

CareCircles requires users to sign in using Google Workspace credentials provided by their affiliated school. We do not store these credentials. Authentication is managed through secure OAuth 2.0 mechanisms provided by Google.

2.2 Institution-Controlled Data

The app accesses school-managed data stored in the institution's environment. Schools maintain ownership and full control over this data. CareCircles does not replicate or permanently store any part of this information.

Types of data accessed from the school systems may include:

User identifiers (name, school provided email address).
List of students who have medical conditions.
Student data:
Student Name.
Medical condition details.
Medical emergency medical action plan.
Emergency contact information.

2.3 Access to Sensitive Data

In specific use-cases, the application allows verified school staff (such as teachers) to view student medical condition plans stored within the institution’s environment. This sensitive health information is never stored, processed, or transmitted by CareCircles outside of the institution’s environment. All access to this data is read-only, on-demand, and requires appropriate authorization by the institution.

2.4 Optional User Feedback

Users can submit bug reports, feature suggestions, or other feedback using our in-app feedback system, which is integrated with a third-party service, Wiredash. Submitting feedback is optional and anonymous unless voluntarily identifying details are provided. This data is used exclusively for improving user experience and app functionality.

3. Data Security and Protection

We take the protection of user data seriously. The following measures are implemented to ensure data confidentiality and integrity:

All data communication is encrypted using HTTPS (TLS 1.3 or higher).
Backend APIs are protected with Secure Authentication; only verified users can initiate secure requests.
The app enforces biometric authentication (such as fingerprint or facial recognition) to provide an additional layer of local security on supported devices.
No data is written to third-party servers outside the control of the user's institution.

4. Access and Control

Only verified staff members from schools that partner with CareCircles can access the application. Schools maintain user access lists and are responsible for authorizing or revoking access rights. If a user's access is removed from the institution's verified user list, their ability to log in will be automatically revoked.

5. Data Retention

Since CareCircles does not store personal information, there is no internal retention of user or school data. Any logs created by the app for performance or debugging purposes are temporary, anonymized, and purged regularly.

6. Children's Privacy

CareCircles is intended for institutional use by verified adult users (teachers and school staff). It is not targeted at children and does not knowingly collect information from individuals under the age of 13.

7. Third-Party Services

The Application uses third-party services that may collect and process limited data in accordance with their own Privacy Policies. These include:
 

• Google Play Services: Used for app distribution and performance monitoring. Google may collect device and usage information.
   

• Wiredash: Used for collecting user feedback such as bug reports and feature suggestions. Wiredash may collect non-personally identifiable device information and any data the user voluntarily provides.
  You are encouraged to review the terms of these services as they govern the use of certain features within the Application.
   

8. Changes to This Policy

This Privacy Policy may be updated from time to time for any reason. The Service Provider will notify you of any changes to the Privacy Policy by updating this page with the new Privacy Policy. You are advised to consult this Privacy Policy regularly for any changes, as continued use is deemed approval of all changes.

This privacy policy is effective as of 2025-04-23.

9. Contact Us

If you have any questions about this Privacy Policy, your data, or our practices, please contact us at:

CareCircles App
Email: hello@carecircles.co
Website: https://carecircles.co