Carecord 隱私權政策
本隱私權政策適用於 Carecord 行動應用程式、網站與相關服務（以下稱「本服務」）。本服務以全球使用者為目標，但實際可用性、功能、語言、付款方式與法定權利可能因你所在地、平台規則或適用法律而有所不同。
Carecord 用於記錄與管理照護相關資訊。你可能會在本服務中輸入健康、醫療、用藥、生活照護、聯絡人或其他敏感資訊。請只在你有權提供資料，並已取得被照護者、監護人或其他相關人員必要同意時使用本服務。
本服務由 Carecord 提供。若你需要確認資料控制者、服務提供者或隱私聯絡窗口資訊，請透過本政策下方的聯絡方式與我們聯繫。
本服務不是醫療機構、醫療器材或緊急救護服務，內容僅供照護記錄與溝通參考，不構成醫療診斷、治療建議或專業意見。
1. 我們蒐集的資料
- 帳號資料：姓名、暱稱、電子郵件、電話號碼、登入方式、語言與地區設定。
- 照護資料：被照護者姓名、生日、身高、體重、照護紀錄、用藥、評估表、照片、附件、備註與你主動輸入的其他內容。
- 聯絡與分享資料：照護成員、關係、權限設定、邀請與共享紀錄。
- 付款與訂閱資料：訂閱狀態、購買紀錄與平台提供的交易識別資訊。我們不直接保存完整信用卡資料。
- 裝置與使用資料：裝置型號、作業系統、App 版本、IP 位址、錯誤紀錄、效能資料、推播權杖、廣告識別碼、分析事件或類似識別資訊。
- 權限與媒體資料：相機、相簿、通知、追蹤、檔案存取或你透過裝置權限選擇提供的照片、圖片、簽名、附件與檔案。
- 客服與回報資料：你與我們聯繫時提供的電子郵件、問題描述、截圖或相關附件。
2. 我們如何使用資料
- 提供、維護、同步與改善本服務。
- 建立帳號、驗證身分、管理登入與安全性。
- 保存照護紀錄、產生報表、支援分享與匯出功能。
- 處理訂閱、付款、發票、優惠、客戶支援與服務通知。
- 偵測錯誤、濫用、詐欺、安全事件與違反條款的行為。
- 進行匿名或彙整後的統計、產品分析與服務改善。
- 符合法律、監管、稅務、會計、爭議處理與平台審核要求。
3. 健康與敏感資料
你輸入的照護資料可能屬於健康資料、兒童資料、家屬資料或其他敏感個人資料。我們只會為提供本服務、依你的指示分享、符合法律義務或保護權利與安全而處理這些資料。
你應確認自己有權建立、保存、上傳、分享或刪除相關資料。若資料涉及兒童、長者、病患或其他第三人，你須依所在地法律取得必要同意或授權。
除非我們另以書面簽署適用的商業夥伴、資料處理或類似協議，本服務不設計作為受 HIPAA 或其他特定醫療機構法規約束的醫療機構系統、醫療器材或受監管臨床服務。
4. 處理資料的法律依據
在適用法律要求說明法律依據的地區，我們處理個人資料的依據可能包括：履行與你的服務契約、取得你的同意、遵守法律義務、保護你或他人的重大利益，以及基於提供、維護、安全防護、改善本服務與處理爭議的正當利益。若我們依同意處理資料，你可依適用法律撤回同意，但撤回不影響撤回前已完成處理的合法性。
5. 第三方服務與資料分享
我們不會出售你的個人資料。為提供本服務，我們可能與下列類型的服務供應商分享必要資料：
- 雲端主機、資料庫、儲存、備份與內容傳遞服務。
- 登入、推播、分析、錯誤追蹤、客服與電子郵件服務。
- Apple App Store、Google Play 或其他訂閱、付款、收據驗證與交易管理服務。
- 廣告或成效衡量服務，例如 Google AdMob、Firebase Analytics，或用於顯示廣告、限制濫用、計算獎勵與衡量成效的服務。
- 法律、會計、資安、合併收購、爭議處理或主管機關要求。
第三方服務會依其隱私政策處理資料。你也應檢視 App Store 與 Google Play 的隱私標籤或資料安全聲明，確保其與本政策一致。
6. 廣告、分析與追蹤
本服務可能使用分析、錯誤追蹤、遠端設定、推播與廣告相關工具。若所在地法律或平台規則要求同意，我們會在必要時請你授權，或提供作業系統與平台設定讓你管理追蹤、廣告個人化、推播與權限。
我們不會以金錢對價出售你的個人資料。但某些廣告、分析或成效衡量活動，在部分地區可能被視為「分享」、「定向廣告」或類似概念。你可以透過裝置設定、App 權限、平台廣告設定，或來信至 [email protected] 提出選擇退出或限制處理的請求。
7. 跨境傳輸
我們可能在你所在地以外的國家或地區處理、儲存或傳輸資料，包括我們或服務供應商營運、提供基礎設施或處理支援請求的所在地。跨境處理時，我們會採取合理的合約、技術與組織措施保護資料。
8. 資料保存與刪除
我們會在提供服務、履行法律義務、解決爭議與維護安全所需期間保存資料。帳號刪除後，我們會依合理流程刪除或匿名化資料；但備份、稽核、交易、資安、法律或爭議處理所需資料可能保留較長期間。
你可於 App 內提出帳號刪除，或參考刪除帳號說明。若你無法登入或需要行使資料權利，也可以透過本政策的聯絡方式提出請求。
9. 你的權利與選擇
依你所在地法律，你可能有權要求存取、更正、刪除、匯出、限制處理、反對處理、撤回同意、停用行銷或提出申訴。你也可以在 App、裝置或平台設定中管理通知、相機、相簿、廣告追蹤與其他權限。
如需行使權利，請來信至 [email protected]。為保護帳號安全，我們可能需要驗證你的身分與請求權限。
若你所在地法律提供額外權利，例如反對出售或分享個人資料、限制使用敏感個人資料、拒絕定向廣告，或向資料保護機關申訴，我們會依適用法律處理。
10. 兒童與未成年人
本服務不是設計給未成年人自行註冊使用，也不以兒童作為主要使用者。若你為兒童或未成年人建立照護紀錄，請確認你是其父母、監護人、照護者或已取得必要同意的人。
若你未達所在地法律要求的最低年齡，請勿自行註冊或提供個人資料。若我們得知未成年人未經必要同意自行提供資料，或你認為相關資料係未經授權提供，請與我們聯繫，我們會依適用法律處理刪除、限制或其他必要措施。
11. 資安措施
我們採取合理的技術與組織安全措施保護資料，例如傳輸加密、存取控管、權限管理、備份、監控與供應商管理。但沒有任何網路服務能保證絕對安全，請妥善保管你的帳號、密碼與裝置。
12. 政策更新
我們可能因法規、平台要求或服務調整更新本政策。重大變更時，我們會以本頁公告、App 通知或其他合理方式告知。更新後繼續使用本服務，即表示你接受更新內容。
13. 聯絡我們
若你對本政策或個人資料處理方式有疑問，請聯繫：[email protected]
Carecord Privacy Policy
This Privacy Policy applies to the Carecord mobile application, website, and related services (the "Service"). The Service is intended for users globally, but availability, features, languages, payment methods, and legal rights may vary depending on your location, platform rules, and applicable law.
Carecord helps users record and manage care-related information. You may enter health, medical, medication, daily care, contact, or other sensitive information. Please use the Service only when you have the right to provide the information and have obtained any required consent from the care recipient, guardian, or other relevant person.
The Service is provided by Carecord. If you need to confirm the data controller, service provider, or privacy contact information, please contact us using the contact information below.
The Service is not a healthcare provider, medical device, or emergency service. Content in the Service is for care records and communication only and is not medical diagnosis, treatment advice, or professional advice.
1. Information We Collect
- Account information, such as name, display name, email address, phone number, login method, language, and region settings.
- Care information, such as care recipient details, birthday, height, weight, care logs, medication, assessments, photos, files, notes, and other content you choose to enter.
- Contact and sharing information, such as care members, relationships, permission settings, invitations, and sharing records.
- Payment and subscription information, such as subscription status, purchase history, and transaction identifiers provided by app stores or payment providers. We do not directly store full credit card numbers.
- Device and usage information, such as device model, operating system, app version, IP address, crash logs, performance data, push tokens, advertising identifiers, analytics events, or similar identifiers.
- Permission and media information, such as camera, photo library, notification, tracking, file access, photos, images, signatures, attachments, and files you choose to provide through device permissions.
- Support information, such as email address, issue descriptions, screenshots, or attachments you provide when contacting us.
2. How We Use Information
- To provide, maintain, sync, and improve the Service.
- To create accounts, authenticate users, manage login, and protect security.
- To store care records, generate reports, support sharing, and enable export features.
- To process subscriptions, purchases, invoices, offers, customer support, and service notices.
- To detect errors, abuse, fraud, security incidents, and violations of our Terms.
- To perform anonymized or aggregated analytics and product improvement.
- To comply with legal, regulatory, tax, accounting, dispute, and platform review requirements.
3. Health and Sensitive Information
Care information you enter may be health information, child information, family information, or other sensitive personal information. We process it only to provide the Service, follow your instructions, comply with legal obligations, or protect rights and safety.
You are responsible for confirming that you have the right to create, store, upload, share, or delete the relevant information. If the information relates to a child, elder, patient, or other third party, you must obtain any consent or authorization required by applicable law.
Unless we separately sign an applicable business associate, data processing, or similar written agreement, the Service is not designed as a healthcare provider system, medical device, or regulated clinical service subject to HIPAA or similar healthcare institution-specific regulations.
4. Legal Bases for Processing
Where applicable law requires a legal basis, we may process personal information based on performance of our service contract with you, your consent, compliance with legal obligations, protection of vital interests, and our legitimate interests in providing, maintaining, securing, improving, and resolving disputes related to the Service. Where processing is based on consent, you may withdraw consent as allowed by applicable law; withdrawal does not affect processing that occurred before withdrawal.
5. Third-Party Services and Sharing
We do not sell your personal information. To provide the Service, we may share necessary information with the following types of providers:
- Cloud hosting, database, storage, backup, and content delivery providers.
- Login, push notification, analytics, crash reporting, support, and email providers.
- Apple App Store, Google Play, or other subscription, payment, receipt validation, and transaction management providers.
- Advertising or measurement providers, such as Google AdMob, Firebase Analytics, or providers used to show ads, prevent abuse, calculate rewards, and measure performance.
- Legal, accounting, security, merger and acquisition, dispute, or government authority requests.
Third-party providers process information under their own privacy policies. You should also make sure the App Store privacy label and Google Play Data safety disclosures remain consistent with this Policy.
6. Advertising, Analytics, and Tracking
The Service may use analytics, crash reporting, remote configuration, push notification, and advertising tools. Where required by law or platform rules, we will request consent or provide operating system and platform settings for managing tracking, personalized ads, push notifications, and permissions.
We do not sell your personal information for money. However, some advertising, analytics, or measurement activities may be considered "sharing," "targeted advertising," or similar concepts in some regions. You may opt out or request restrictions through device settings, app permissions, platform advertising settings, or by contacting [email protected].
7. International Transfers
We may process, store, or transfer information outside your country or region, including locations where we or our service providers operate, provide infrastructure, or handle support requests. We use reasonable contractual, technical, and organizational measures to protect information during cross-border processing.
8. Retention and Deletion
We retain information for as long as needed to provide the Service, comply with legal obligations, resolve disputes, and maintain security. After account deletion, we will delete or anonymize information through a reasonable process, but backups, audits, transactions, security logs, legal records, or dispute-related information may be retained longer.
You may request account deletion in the app or review the account deletion instructions. If you cannot sign in or need to exercise privacy rights, you may also contact us using the contact information in this Policy.
9. Your Rights and Choices
Depending on where you live, you may have rights to access, correct, delete, export, restrict processing, object to processing, withdraw consent, opt out of marketing, or lodge a complaint. You may also manage notifications, camera, photos, ad tracking, and other permissions in the app, device, or platform settings.
To exercise your rights, contact [email protected]. To protect account security, we may need to verify your identity and authority to make the request.
If your local law provides additional rights, such as the right to opt out of sale or sharing of personal information, limit use of sensitive personal information, reject targeted advertising, or complain to a data protection authority, we will handle those rights as required by applicable law.
10. Children and Minors
The Service is not designed for minors to register and use on their own, and children are not the primary intended users of the Service. If you create care records for a child or minor, you must be the parent, guardian, caregiver, or another person with required consent.
If you are below the minimum age required by your local law, do not register or provide personal information on your own. If we learn that a minor provided information without required consent, or if you believe information was provided without authorization, please contact us and we will take deletion, restriction, or other steps required by applicable law.
11. Security
We use reasonable technical and organizational measures to protect information, such as encryption in transit, access controls, permission management, backups, monitoring, and vendor management. No online service is completely secure, so please protect your account, password, and devices.
12. Changes
We may update this Policy due to legal, platform, or service changes. For material changes, we will provide notice on this page, in the app, or by other reasonable means. Continued use of the Service after an update means you accept the updated Policy.
13. Contact Us
Questions about this Policy or our privacy practices may be sent to [email protected].