Legal
Privacy Policy
Last updated: 15 October 2026. This policy explains what personal data CareOS (CareOS Family, CareOS Pro and the CareOS mobile app) collects, why, how it is protected, who it is shared with, and how you can access or delete it. Questions: aryan@careos.co.in.
1. Who we are
CareOS is operated by Aryan Kumar (Osaka, Japan), the controller of the personal data described here. Contact: aryan@careos.co.in.
2. Data we collect
- Account data: name, email address, sign-in identifiers, language and settings.
- Care information you add: details about the people you care for (name, phone number, languages, routines, medications, notes), documents you upload, and updates from caregivers or agencies you invite.
- Calls: for check-in calls you schedule, the call transcript and summary; and an audio recording only when the person called has given recording consent. Real-time calls you start are not recorded.
- Google user data: only if you choose to connect your Google account (see section 4).
- Payments: handled by Stripe. We receive your plan, payment status and usage; we never receive or store full card numbers.
- Technical data: sign-in events, device and app version, and security logs, used to keep the service working and secure.
3. How we use data
- To provide CareOS: remember care information for you, place the calls you schedule or approve, show what happened, what needs attention and who is handling it.
- To run the AI assistant (Lily). AI drafts summaries, answers and suggested actions; people approve every care record and every real-world action (calls, messages, emails, calendar events). Medical information is general guidance, not a diagnosis; always consult a doctor.
- To bill for your plan and for the call minutes you use.
- To keep the service secure, prevent abuse and meet legal obligations.
We do not sell personal data, and we do not use it for advertising.
4. Google user data
Connecting Google is optional. You choose each permission separately and can disconnect at any time. What CareOS accesses and why:
| Permission | Data accessed | Why |
|---|---|---|
| Sign-in (openid, email) | Your Google account email and a stable account id | To sign you in and link the connection to your CareOS account. |
| Gmail read (gmail.readonly) | Email messages and their metadata | So the assistant can find care-related emails you ask about (appointments, bills, reports) and show them back to you with their source. Only you can see your Gmail content in CareOS. |
| Gmail send (gmail.send) | Permission to send an email you approved | To send an email from your account only after you review and approve its exact recipients and text. Nothing is ever sent automatically. |
| Drive files you pick (drive.file) | Only the files you select with the Google file picker | To import a document you chose (for example a prescription or report) into your care records after you confirm it. CareOS cannot see your other Drive files. |
| Calendar (calendar.readonly, calendar.events) | Calendar availability and events; creating events you approve | To plan around your schedule and add an appointment to your calendar only after you approve it. |
- Storage: Google data CareOS keeps (for example an email you asked about, or a file you imported) is encrypted at rest and visible only to you, unless you choose to add a specific item to a shared care record.
- AI processing: to answer your questions, relevant Google data may be processed by our AI provider (OpenAI) only to generate the response you asked for. It is not used to train AI models.
- No other use: we do not sell Google user data, do not use it for advertising, do not use it to train generalized AI or machine-learning models, and do not transfer it to others except as needed to provide the features above, for security, or to comply with law.
- Human access: no person at CareOS reads your Google data unless you ask us to (for support), it is needed for security or abuse investigation, or the law requires it.
- Disconnect and deletion: disconnecting revokes CareOS's access with Google and deletes the Google data CareOS stored for that connection. You can also remove access at myaccount.google.com/permissions.
CareOS's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
6. Where data is stored and how it is protected
Data is stored in the United States (Railway and AWS us-east-1) and may be processed by the providers above in other countries. Sensitive fields are encrypted at the application level before storage; files are encrypted before upload and stored with server-side encryption; connections use TLS. Access is limited by account permissions, and actions are logged. See also our security overview.
7. Retention and deletion
- We keep your data while your account is active.
- Call recordings are kept for up to 90 days by default, and are deleted sooner if consent is withdrawn.
- You can delete a document, a person's profile or your whole account in the app. Deleted data is removed from live systems promptly and from backups within 30 days.
- Disconnecting Google deletes the Google data stored for that connection.
8. Your rights and choices
You can access, correct, export or delete your data, withdraw consent (including recording consent) and disconnect Google at any time in the app, or by writing to aryan@careos.co.in. Depending on where you live (for example under Japan's APPI, India's DPDP Act, the GDPR or US state laws) you may have additional rights, including to complain to your data-protection authority.
9. Children
CareOS accounts are for adults. We do not knowingly collect data from children under 16 except as care information an adult account holder adds.
10. Changes and contact
We will post changes here and update the date above; for material changes we will notify account holders. Contact: aryan@careos.co.in.