Privacy Policy - Fam Care

 

Fam Care Privacy Policy

App: Fam Care  Provider: Rhythm Themes

In plain terms: your family's medication data never leaves this phone unless you email it yourself. Fam Care has no server, no account, and no way to see your information. Reminders and missed-dose alerts are sent from your own email account, directly to the one caregiver you choose.

This policy explains what Fam Care does and does not do with your information. We wrote it in plain language on purpose. If anything here is unclear, please contact us using the details at the bottom.

1. Who we are

Fam Care is a medication and care-tracking app provided by Rhythm Themes ("we," "us"). This policy applies to the Fam Care Android app. It does not apply to any third-party service you choose to connect the app to, such as your own email provider or Google Play.

2. The short version of how Fam Care is built

Fam Care is designed to be "privacy-first" as an architecture, not just a promise:

• There is no Fam Care server. We do not operate any backend that receives, stores, or processes your health data. There is no Fam Care account to create and no login.
• Your data is stored only on your device, in an encrypted database.
• Alerts are sent from your own email account directly to your caregiver. We are never in the middle and cannot read them.

3. Information stored on your device

The following is created by you and stored locally on your phone. We never receive it:

• The care recipient's profile (a display name and optional year of birth).
• Medications, dosages, forms, notes, and reminder schedules.
• Dose history (taken, missed, skipped) and refill quantities.
• Optional vitals/symptom notes (a Pro feature) such as blood pressure, glucose, weight, or mood, if you choose to record them.
• Your caregiver's name and contact details, and a locally generated pairing key.
• An audit log of alerts that were sent, containing only the short text that was actually sent.

This data is stored in an encrypted-at-rest database on your device. The encryption key is held in your device's hardware-backed keystore.

4. Your email credentials (for sending alerts)

To send email alerts, you provide the details of your own email account, including an app-specific password or SMTP password.

• These credentials are stored only on your device, encrypted using your device's hardware-backed keystore.
• They are never sent to us and are never written into a backup unless you create one yourself (see Section 8).
• They are used solely to connect to your email provider over a secure (TLS) connection to send an alert.

5. What the email alert feature actually does

When a dose is missed past its grace window, or a refill is running low, Fam Care composes a short message and sends it from your device, using your configured email account, directly to your caregiver's email address.

• Fam Care does not operate a relay or mail server. The message travels from your phone to your email provider to your caregiver.
• We cannot read the content, the recipient, the credentials, or any delivery information. None of it passes through us.
• Once an email is sent, it lives in your email account's "Sent" folder and in your caregiver's inbox, both of which are outside Fam Care's control and governed by those providers' own policies.
• As a manual fallback, you can also choose to send an alert yourself through WhatsApp, your SMS app, or another app via the standard Android share sheet. In that case, that app — not Fam Care — handles delivery.

6. Data that involves Google (and no one else)

We want to be exhaustive and honest here. The only third-party infrastructure involved is Google's, and only for the following:

• Google Play Billing (Pro purchases). If you buy a Pro subscription or the lifetime option, the purchase is processed entirely by Google Play. Google handles your payment details under Google's Privacy Policy. Fam Care only receives a confirmation of your entitlement status (whether you own Pro); we never receive or store your card number or payment information.
• Google Play Store distribution. When you download or update the app, Google Play collects standard information under its own policies. This is a function of the store, not of Fam Care.
• On-device QR scanning. Caregiver pairing uses your camera with Google's on-device barcode scanning. Images are processed on your device and are not stored or transmitted by Fam Care.

No advertising, no analytics, no tracking. Fam Care contains no advertising SDKs, no analytics SDKs, and no third-party trackers. We do not build a profile of you and we do not sell or share data for advertising.

7. How long we keep data (retention)

Because everything is local, retention is entirely in your hands:

• Your data remains on your device until you delete it in the app or uninstall Fam Care.
• Uninstalling the app deletes the local database and your stored email credentials.
• Emails you have already sent are not affected by uninstalling — they remain in the relevant email accounts.

8. Backups you create yourself

Fam Care lets you export an encrypted backup file and save it wherever you choose (for example, your own cloud drive, local storage, or an email to yourself).

• The backup is encrypted with a passphrase you choose, using strong encryption (AES-256-GCM with a passphrase-derived key).
• Once you save the file, its security is your responsibility — it is only as protected as the location you store it in.
• If you lose the passphrase, the backup cannot be recovered by anyone, including us. There is deliberately no recovery mechanism, because a recovery mechanism would require us to be able to decrypt your data — which we cannot and will not do.

9. Children's privacy

Fam Care is a general-audience utility intended for adults managing care for themselves or a family member. It is not directed to children, and we do not knowingly collect information from children. Because we do not operate a server and collect no data ourselves, we have no data about any user, including children. If you believe a child has used the app, simply deleting the app removes all local data.

10. Your rights and choices

• Access: all your data is visible to you within the app at any time.
• Deletion: you can delete medications, history, and other entries in the app, or remove everything by uninstalling.
• Alerts: you can turn off email alerts, change or remove your email credentials, and change your caregiver at any time in Settings.
• Because we hold no data about you, there is nothing for you to request from us — you are already in full control on your device.

11. Security

We use encryption at rest for the on-device database, hardware-backed keystore protection for credentials and keys, and TLS for email delivery and purchases. No method of storage or transmission is ever perfectly secure, but by keeping data on your device and out of any central server, we remove the single biggest target — a company database of family health information — from the picture entirely.

12. Changes to this policy

If we change this policy, we will update the effective date above and, for material changes, note it in the app's release notes. Continued use of the app after an update means you accept the revised policy.

13. Contact us

Questions about this policy or your privacy? Contact us at apps.rhythmthemes@gmail.com

Rhythm Themes