Privacy Policy

1. Introduction

CareBot ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the CareBot mobile application and related services (the "Service").

By using CareBot, you consent to the data practices described in this policy. If you do not agree, please do not use the Service.

2. Information We Collect

2.1 Information You Provide

Data Type	Purpose
Account Information Name, email address, password	Account creation, authentication, and communication
Profile Information Age, gender, interests, occupation, location	Personalizing your AI companion experience
Conversations Messages you send and receive	Providing the chat service and conversation history
Personal Context Information you share about yourself	Helping AI companions provide more relevant responses
Language Preference Your preferred chat language	Communicating with you in your language

2.2 Information Collected Automatically

Data Type	Purpose
Device Information Device type, operating system, app version	Ensuring compatibility and debugging issues
Usage Data Feature usage, session duration, interaction patterns	Improving the Service and user experience
Push Notification Tokens Device identifiers for notifications	Delivering push notifications you have opted into

2.3 Information We Do NOT Collect

• We do not collect precise GPS location data
• We do not access your contacts, photos, or other device data
• We do not use tracking cookies or cross-app advertising identifiers

3. The CareBot Memory System

CareBot features an enhanced memory system that helps your AI companions remember important details from your conversations, such as your preferences, goals, and life events. This creates a more personal and supportive experience over time.

How Memories Work

• Extraction: Key information is automatically identified from conversations using AI
• Storage: Memories are stored securely and associated with your account
• Retrieval: Relevant memories are used to provide context in future conversations
• Validation: Cross-persona validation prevents memory conflicts and hallucinations

Memories are never shared between different users. Each user's memory is private and isolated.

4. How We Use Your Information

We use your information to:

• Provide the Service: Power AI conversations, maintain conversation history, and deliver personalized experiences
• Improve the Service: Analyze usage patterns to fix bugs, improve features, and enhance the user experience
• Communicate with You: Send push notifications you have opted into, service updates, and important account notices
• Ensure Security: Protect against unauthorized access, fraud, and abuse
• Process Payments: Manage subscriptions through the Apple App Store (payment processing is handled entirely by Apple)

5. AI Processing and Third-Party Services

5.1 Azure OpenAI

CareBot uses Microsoft Azure OpenAI Service to generate AI responses. When you send a message:

• Your message and relevant conversation context are sent to Azure OpenAI to generate a response
• Microsoft does not use your data to train or improve their AI models (as per Azure OpenAI data processing terms)
• Data is transmitted securely via encrypted connections (TLS)

For more information, see Microsoft's Azure OpenAI Data Privacy documentation.

5.2 Hosting and Infrastructure

CareBot's backend services are hosted on Microsoft Azure. Your data is stored in Azure data centers with enterprise-grade security, encryption at rest, and compliance with industry standards.

5.3 Apple App Store

Subscription payments are processed by Apple through the App Store. We do not have access to your payment method details. Apple's privacy practices are governed by their own privacy policy.

6. Data Storage and Security

6.1 Security Measures

• All data transmitted between your device and our servers is encrypted using TLS
• Passwords are hashed using bcrypt with industry-standard salt rounds
• Authentication uses JWT (JSON Web Tokens) with secure expiration policies
• Security middleware (Helmet, CORS) protects against common web vulnerabilities
• Conversation ownership is verified on every request to prevent unauthorized access
• Access to admin and debug endpoints requires authenticated admin credentials

6.2 Data Retention

• Account data: Retained for as long as your account is active
• Conversations: Retained for as long as your account is active. You can delete individual conversations from history
• Memories: Retained for as long as your account is active. You can delete individual or all memories anytime
• Notification logs: Automatically cleaned up after 90 days
• Deleted accounts: All data is permanently deleted upon account deletion

7. Data Sharing

We do not sell your personal data.

We may share your information only in these limited circumstances:

• Service Providers: With Microsoft Azure (hosting and AI processing) as described above, strictly to provide the Service
• Legal Requirements: If required by law, legal process, or governmental request
• Safety: To protect the rights, safety, and property of CareBot, our users, or the public
• Business Transfer: In connection with a merger, acquisition, or sale of assets (you would be notified beforehand)

8. Your Rights and Choices

You have the following rights regarding your personal data:

8.1 Access and Control

• View your data: Access your profile, conversations, and memories through the app
• Edit your data: Update your profile information and edit stored memories at any time
• Delete your data: Delete individual conversations, memories, or your entire account
• Export your data: Download your conversations from the conversation history

8.2 Notifications

You can control push notifications through:

• The app's notification settings in your Profile
• Your device's system notification settings

8.3 Account Deletion

You can permanently delete your account and all associated data through the Profile screen in the app. This action is irreversible and will delete:

• Your profile and account information
• All conversation history
• All stored memories
• All notification preferences and history

9. European Users (GDPR)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

• Legal Basis: We process your data based on your consent (account creation), contractual necessity (providing the Service), and legitimate interests (improving the Service and security)
• Data Portability: You have the right to receive your data in a structured, commonly used format
• Right to Erasure: You can request complete deletion of your data at any time
• Right to Restrict Processing: You can request that we limit how we use your data
• Right to Object: You can object to processing based on legitimate interests
• Supervisory Authority: You have the right to lodge a complaint with your local data protection authority

To exercise any of these rights, please contact us at support@carebot.me.

10. Children's Privacy

CareBot is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we discover that a child under 13 has provided us with personal information, we will delete it promptly. If you believe a child under 13 is using CareBot, please contact us at support@carebot.me.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the app or by other means before the changes take effect. We encourage you to review this policy periodically.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

• Email: support@carebot.me
• Website: https://carebot.me

We will respond to your inquiry within 30 days.