CareCheck is committed to protecting your privacy. This policy explains how we collect, use, and safeguard your personal data in accordance with Thailand's Personal Data Protection Act (PDPA).

1. Information We Collect

1.1 Information You Provide Directly

• Email and password (when signing up or logging in)
• Care contacts: Names, relationship types (e.g., parent, sibling, friend) and check-in frequency goals
• Check-in history: Date and time of each check-in, and optional notes
• Comments and feedback

1.2 Automatically Collected Information

• Usage data: Features used, time spent in the app
• Device data: Operating system, device model
• Subscription data: Premium purchase records

2. How We Use Your Information

We use your data to:

• Display check-in streaks and last-contact dates for each person you care for
• Send daily reminders when you haven't checked in as planned
• Provide and improve the app experience
• Communicate about your account and updates
• Manage and verify Premium subscriptions

3. Sharing Data with Third Parties

We do not sell your personal data. We may share data with the following service providers:

• Supabase — database storage and processing
• Google Sign-In — authentication
• Google Play / Apple App Store — subscription processing

These services have their own privacy policies.

4. Data Retention

We retain your personal data for as long as necessary to provide the service, until you delete your account, or as required by law.

5. Your Rights Under PDPA

Under Thailand's Personal Data Protection Act, you have the right to:

• Access: Request to view your personal data
• Rectify: Request correction of inaccurate data
• Erase: Delete your account and all data directly from the Account page in the app
• Object: Object to data processing
• Withdraw consent: Withdraw consent at any time
• Data portability: Request a copy of your data in a readable format

6. Data Security

Your data is stored on Supabase servers with encryption at rest and in transit. We use Row-Level Security (RLS) policies to ensure you can only access your own data.

7. Policy Changes

We may update this policy from time to time. Changes take effect immediately upon publication on this page.