Privacy Policy
Last updated: 21 September 2026
Caredo keeps your health information on your phone. This page explains exactly what is stored, where it goes, and what never leaves your device.
Who is responsible
This app is published by Vanshika Enterprises, operating from India. For any privacy question or request, email apexstrategies23@gmail.com.
What Caredo stores, and where
| Information | Where it is kept | Does it leave your phone? |
|---|---|---|
| Medicines, schedules, dose outcomes, stock counts, refills | Encrypted file storage on your phone (AES-256-GCM), with the key held in the Android Keystore | No. There is no upload path for this information. |
| Family profiles, relationships, blood group, allergies, care notes, emergency contacts | The same encrypted storage on your phone | No. |
| Medical records and any files you attach to them | The same encrypted storage on your phone | No. |
| Your chosen language, colour theme, text size and app-lock setting | Android protected storage on your phone | No. |
| Reminder times | The Android notification system on your phone | No. Reminder notifications deliberately omit medicine names, so a name cannot appear on your lock screen. |
| Your Google account identity, if you sign in | Google Firebase Authentication | Yes — but only your sign-in identity. No health information is attached to it or sent with it. |
What we never collect
- We operate no server that receives your health information, and we have no ability to read your records.
- No analytics or tracking SDK is present in the app.
- Your location is never requested, read or transmitted.
- Your contact list is never read in bulk. See below.
- Photographs of medicine labels are never uploaded. See below.
Reading medicine labels with the camera
When you photograph a medicine label, the text is recognised entirely on your phone using Google's ML Kit text recognition, which runs offline. The image is not uploaded to us or to anyone else, and it is not retained after the draft is created. Nothing recognised is saved until you review it and confirm.
If you choose the optional Google Lens route for a label Caredo cannot read, that opens the separate Google app, which has its own privacy policy. You then copy the text across yourself. Caredo does not send the image there.
Choosing a family member from your contacts
The "Fill from my contacts" button opens your phone's own contact chooser. Caredo does not hold the Android contacts permission and cannot read your address book. Only the single contact you select is returned, and only their name and phone number. Nothing is stored until you save the form.
The emergency feature
Caredo does not call anyone and does not send messages. The emergency sheet opens your dialer with the emergency number filled in, or your WhatsApp with your message filled in. You press call or send. We cannot dispatch emergency services and cannot guarantee that any message arrives.
The emergency number defaults to 112, India's emergency number, and you can change it. Your help message and emergency contacts are stored on your phone like all other records.
Signing in with Google
Signing in is used to identify which encrypted records on this phone are yours. Google Firebase Authentication receives your Google account identity under Google's privacy policy. We receive an account identifier and the email address attached to the account. Your medicines and health records are not uploaded as part of signing in, and signing in is not a backup.
Advertising
Caredo is free. An optional banner advertisement appears on the Support page only. Advertising is provided by Google AdMob, which may collect information such as an advertising identifier and approximate location under Google's policy. Before any ad is requested you are shown a consent choice, and you can change it at any time from the Support page.
Advertisements are requested as non-personalised. No advertisement is shown on the emergency screens or while you are confirming a dose, and no health information is ever passed to the advertising system.
Information you deliberately export
Two features send information out of the app, each only when you ask:
- Encrypted backup. Protected with a password you choose (PBKDF2-SHA256, 600,000 iterations). You pick where it is saved. We never receive it, and we cannot recover it if you forget the password.
- PDF summary. Generated on your phone for printing or saving. It is not encrypted, so treat the resulting file like any other medical paper.
Once a backup or PDF leaves Caredo, it is outside the app's protection and governed by wherever you put it.
How long information is kept
Your records stay on your phone until you delete them or uninstall the app. Android's automatic cloud backup and device-transfer are deliberately disabled for Caredo, so your encrypted records are not copied into your Google account. Because of this, uninstalling loses your records unless you made a backup first.
Your choices and rights
- Delete everything on the device. Settings → delete local records. This erases the encrypted files and the encryption key. It cannot be undone, and copies you exported earlier are not affected.
- Delete your account. See the account deletion page.
- Turn reminders off at any time in Settings.
- Withdraw advertising consent from the Support page.
- Take your information with you using the encrypted backup.
If you are covered by the GDPR, the UK GDPR, or India's Digital Personal Data Protection Act, you may request access, correction, deletion or a copy of your information. Because health records never reach us, the fastest route is the in-app controls above; for anything relating to your sign-in identity, email us and we will respond within 30 days.
Children
Caredo is intended for people aged 18 and over. It is not directed at children and we do not knowingly collect information from them. A parent may of course record a child's medicines within their own household profiles; those records stay on the parent's phone like any other.
A note on medical safety
Caredo organises the instructions you enter and confirm. It does not give dosage or treatment advice, does not diagnose, and is not a medical device. Always follow your doctor or pharmacist.
Changes to this policy
If this policy changes materially, the updated date above changes and the new version appears here before the change reaches the app.
Contact
Vanshika Enterprises
Email: apexstrategies23@gmail.com