Private by default. Revocable at any time.

CareStori is operated by Cindy M Gerard (trading as CareStori), the seller of the CareStori subscription. For the personal information described in this notice, Cindy M Gerard is the data controller — meaning we decide why and how that information is used.

You can reach us any time through the CareStori contact page.

• Account information (name, email address, sign-in credentials) — to create and secure your account. Legal basis: performance of our contract with you.
• Care content you enter (care profiles, care notes, Care Moments, photos, contacts, schedules) — to provide the service to you and the people you invite. Legal basis: performance of our contract with you.
• Invitation and membership data (who you invited, their permissions and access windows) — to operate sharing. Legal basis: performance of our contract.
• Support messages — to answer you. Legal basis: legitimate interests in supporting our customers.
• Usage, device and log data (IP address, browser type, error logs) — for security, fraud prevention, and improving the product. Legal basis: legitimate interests.
• Marketing emails, if you opt in — legal basis: your consent, withdrawable at any time.

Please do not enter information you don't need to share. CareStori is a coordination tool, not a clinical record system.

Our order process, billing, tax, invoicing, and refunds are handled on our behalf by our payment provider, Stripe, which acts as merchant of record for our orders.

When you subscribe, your payment details are collected and processed by Stripe — not by us. We never see or store your full card number. We share your name, email address, and subscription details with Stripe so it can take payment, manage your subscription, calculate applicable sales tax and VAT, and issue invoices. Stripe acts as an independent controller for that purpose; see Stripe's privacy policy.

• People you invite — family, friends, and caregivers, limited to what you allow them to see.
• Service providers / subprocessors — hosting, database, file storage, email delivery, and error monitoring providers acting on our instructions.
• Stripe — our payment provider and merchant of record, described above.
• Professional advisers — legal and accounting, where necessary.
• Authorities — where we are required to do so by law.

We do not sell personal information or use private CareStori content for advertising.

We keep your account and care content for as long as your account is open. If you delete individual content or a CareStori profile, we remove it from the live service promptly and purge it from encrypted backups within 30 days.

If you delete your account, we delete or anonymise your personal information within 30 days, except records we must retain for legal, tax, or accounting reasons — typically invoice and transaction records kept for up to 7 years. Security and access logs are retained for up to 12 months.

Depending on where you live, you have the right to request access to your personal information, correct it, delete it, receive a portable copy, restrict or object to certain processing, and withdraw consent where processing is based on consent.

If you are in the UK or EEA, you also have the right to lodge a complaint with your local data protection supervisory authority. If you are a California resident, you have the right to know, delete, and correct your personal information, and to not be discriminated against for exercising those rights — we do not sell or share personal information for cross-context behavioural advertising.

To exercise any of these rights, contact us through the CareStori contact page. We respond within one month.

We and our service providers are based in, or process data in, the United States. Where personal information is transferred out of the UK or EEA, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an applicable adequacy decision.

CareStori uses essential cookies and similar browser storage to keep you signed in and to keep the service secure. These cannot be switched off without breaking sign-in. We do not use advertising cookies. If we add analytics cookies, we will ask for your consent first and you will be able to change your preference at any time.

Only the account owner and people they choose to invite can access a CareStori.

Each invited family member, friend, or caregiver has their own access. The account owner controls what each person can see and whether they can contribute.

Some information may be shared with family, such as Care Moments, photos, and family updates, while more private care details can remain limited to the people directly helping with care.

CareStori profiles and shared content are not publicly listed or intended for public search.

The account owner can change or remove someone's access at any time.

They can:

• remove a person from the CareStori
• change what that person can see
• remove posting permissions
• end temporary caregiver access early

Temporary caregiving permissions automatically stop when the person's scheduled care time ends.

The Care Schedule helps invited people know who is caring and when.

The account owner decides whether family members can see the shared schedule.

Family-facing schedule information is limited to useful coordination details, such as who is caring and the general time of care. Administrative permissions and account information remain private.

Care Moments and photos are stored privately and are shown only to people who have permission to see them.

Access to stored photos uses protected, time-limited links rather than public file URLs.

Photos taken with the in-app camera are captured in the app and are not saved to the caregiver's personal photo library.

Because devices and browsers vary, we cannot guarantee that a photo can never be copied by someone with permission to view it. We design the experience to discourage saving and sharing outside CareStori.

Not everything entered into CareStori has to be shared with the whole family.

Care notes and more sensitive care information can be limited to the account owner and authorized members of the care team.

Family access should not automatically reveal every private care detail.

We do not sell personal information or use private CareStori content for targeted advertising.

You can remove individual content, remove a CareStori profile, or delete your account.

When content or an account is deleted, CareStori will remove the associated information according to its data-retention and backup practices.

CareStori uses authenticated accounts, permission checks, and protected storage to limit access to personal information.

Temporary caregiver permissions are checked against the person's CareStori account and the time they are authorized to provide care.

Write to us any time through the contact page and a person will answer.