Privacy, in plain words.
We treat your information the way we want our own families’ information treated. This page says exactly what we collect, why, where it lives, who helps us run the service, and what you can do about it.
Who is responsible
CareDocks, PBC (“CareDocks”, “we”) is the controller for the personal information described here. Questions and requests: privacy@caredocks.com or cs@caredocks.com.
What we collect, and why
- Your account: name, email, and optionally a phone number, a home postcode and a photo — to run your account and show the people in your circle who you are. Basis: providing the service you asked for.
- What your circle creates: asks, updates, photos, documents, routines, messages, and the name, photo and notes about the person being cared for — so the people you invite can coordinate care together. Where this includes health-related details, you and the person concerned choose to share them, and we use them only to show them to the circle you invited.
- Professional profiles, jobs, applications and reviews (if you use them) — to connect families and carers. Reviews are moderated before they are published.
- Keeping the service safe: sign-in records, one-time links, rate-limit counters, and server logs — to protect accounts and keep things working. Basis: our legitimate interest in security. Push notifications are sent only if you switch them on.
- Optional: if you sign in with Google we receive your name, email and picture from Google. A map preview loads only when you tap it.
We don’t sell your information, we don’t show advertising, and we don’t use your data to train AI models.
Who can see what
Only members of a circle see that circle. The circle’s owner and co-leads manage membership and can mark some documents as leads-only. Professional profiles are visible to other members only after you publish them. CareDocks engineers access production data only to resolve a support request you raise or a security incident.
Where it lives and who helps us run it
Your data is stored encrypted on Google Cloud in Europe (application and database in Belgium, europe-west1; uploaded photos and documents in London, europe-west2). Encrypted backups are kept for 7 days with point-in-time recovery. Server logs are kept for 30 days.
Services that process data on our behalf: Google Cloud (hosting, database, storage, logs); Amazon Web Services and Resend (sending email); postcodes.io (looking up a UK postcode you enter); Cloudflare Turnstile (blocking bots at sign-up); Google (optional sign-in, and map previews you tap). Each receives only what its task needs.
Cookies and your browser
We set one strictly necessary cookie (__session) to keep you signed in. Drafts and display preferences stay in your browser’s local storage. There are no advertising or analytics cookies; our product analytics are first-party event counts tied to an internal account id, never your name or email.
How long we keep it
Your account and circle content: until you delete them. Backups: 7 days. Server logs: 30 days. One-time sign-in and invitation links: minutes to hours.
Your rights
- Export everything we hold about you from Settings → Your data, as a file you can keep.
- Correct your details at any time in Settings.
- Delete your account from Settings. We anonymise it immediately: your identifying details are removed and what you wrote is redacted. A few records stay in anonymised form so other members’ care history is not broken — the deletion screen lists them.
- You can also object to or restrict how we use your information, and you can complain to the UK Information Commissioner’s Office (or your local supervisory authority in the EU). We answer requests within one month.
If you are not a member
If someone has added your name or photo as the person being cared for, or invited you by email, write to privacy@caredocks.com and we will remove it.
If something changes
We’ll email everyone with an account before any change that meaningfully affects your privacy, in the same plain language.