CareLoop — Privacy Policy
CareLoop is built by Glippin Toys, LLC. It's one shared place for your family's medications and doctor visits. Because that is health information, this policy is written to be blunt about what we hold and what we never do with it.
Summary
- Your account is anonymous. No name, email, or phone number is ever collected to use CareLoop. You're signed in with a random device-bound ID.
- The content you type is health information and we treat it that way. Family member names, medications, appointments, and visit recaps are stored encrypted in transit and at rest, visible only to the family accounts you invite — and, per entry, only to the people you choose.
- No advertising, no third-party trackers, no analytics on your health content, and we never sell data.
- Voice and photos stay on your device. Visit recaps are transcribed by your phone's own speech recognition; pill-bottle photos are read by on-device text recognition. Neither audio nor photos are uploaded to us.
- Delete everything, in-app, anytime. Settings → Delete account & data.
What we store
| Data | Why | Retention |
|---|---|---|
| Anonymous account ID (Firebase Anonymous Auth) | Ties your family's data to your devices without knowing who you are | Until you delete your account |
| Family member profiles, medications, appointments, dose check-offs, and visit recaps you enter | The entire point of the app — shared with your invited family per your sharing settings | Until you delete them or your account |
| The name you optionally choose (e.g. "Dad") for sharing labels | So family members can pick who sees what by name | Until you change or delete it |
| Subscription status (via RevenueCat) | Unlock CareLoop Pro; tied to your anonymous ID | Until you delete your account |
What leaves your device, and to whom
- Google Firebase (our infrastructure) stores the content above, encrypted, in the United States.
- openFDA and NIH RxClass — when you view a medication's official label information, the medication's name only is sent to these free U.S. government services. Nothing about who takes it is included.
- RevenueCat processes subscription state. Payment itself is handled entirely by Apple or Google — we never see payment details.
- That's the whole list. No ad networks, no data brokers, no social SDKs.
Sharing inside your family
Family data is visible only to accounts that join with your invite code. Every entry can be set to Everyone, Only me, or specific people; these choices are enforced by server-side security rules, not just hidden in the interface.
What we never do
- No selling, renting, or sharing of your information for marketing.
- No AI is used on your health content, and CareLoop never generates medical advice. Label information shown in the app is official FDA text, verbatim, with its source.
- No aggregation of your health data. If we ever build opt-in, anonymized community features, they will be off by default and this policy will be updated first.
Legal notes
CareLoop is a consumer app, not a healthcare provider, and is not a HIPAA covered entity — which is exactly why we spell out our actual practices above rather than borrowing that acronym. We honor applicable consumer health-data laws, including the FTC Health Breach Notification Rule and state health-privacy laws such as Washington's My Health My Data Act. CareLoop is not a medical device and does not provide medical advice; always follow your doctor's and pharmacist's instructions.
Data deletion & contact
Settings → Delete account & data permanently removes your account and, if no one else shares your family, all of its health data. Questions or requests: support@glippintoys.com.