Privacy Policy

CarePulseAI · com.carepulseai.app · Last updated 7 August 2026

CarePulseAI is not a medical device. It supports communication with your nurse and helps you track your own health. It does not diagnose, treat or prevent disease, and nothing in it replaces professional medical advice. In an emergency, contact your doctor or local emergency services.

Who we are

CarePulseAI connects patients in India with nurses for ongoing health support. This policy explains what we collect, why, and what control you have. Contact us at kumaranthiru80@gmail.com.

What we collect

Data	Why
Name and email address	To create your account and let your nurse identify you.
Google account information (name, email, Google account ID)	Only if you choose Sign in with Google. We receive your name, email address and a Google account identifier. We never receive your Google password, and we do not read your Gmail, contacts, Drive or any other Google service.
Health information (vitals, conditions, allergies, medical documents)	To provide care. Visible to you and to the nurse assigned to you, and to no other patient or nurse.
Messages	Chat between you and your nurse, or you and our support team.
Payment records	Subscription and payment history. We never see or store your card number, UPI PIN or bank credentials — those go directly to our payment provider.
Device notification token	To send you a notification when your nurse calls or messages you.

Who we share it with

We do not sell your data. We never share health information for advertising. These are the only third parties involved:

Service	What it receives
Supabase	Hosts our database and files. Stores everything listed above.
Google Sign-In	Verifies who you are, if you use it. Google's own privacy policy applies to your Google account.
Google Gemini (AI)	The questions you type into AI Coach and Food Check, and food photos you send. Used to generate a reply. Not used to identify you.
Firebase Cloud Messaging	Your device notification token, so calls and messages can reach you.
Agora	Carries voice calls between you and your nurse. Calls are not recorded.
Razorpay	Processes subscription payments. Your card and UPI details go straight to Razorpay and never reach us.
Google AdMob	Shows ads to nurses only. Patients never see ads, and no patient data is used for advertising.
YouTube	Supplies exercise and wellness videos. Watching one is subject to YouTube's own policy.

Your health data stays between you and your nurse

Your records are visible only to you and the nurse assigned to you. Other nurses cannot see them. Administrators can access accounts for support and safety, but cannot edit clinical records. These limits are enforced by the database itself, not only by the app.

Your rights

Access — see your data at any time in the app.
Correct — edit your profile and health information.
Delete — Profile → Delete my account, or see the account deletion page for full details of what is removed and what is retained.
Withdraw consent — deleting your account withdraws it entirely.

How long we keep it

Your data is kept while your account is open. When you delete your account it is removed immediately, except payment and subscription records, which we are required to retain for tax and accounting purposes and because nurses are paid from them. Those retained records have your personal details stripped out. See the deletion page.

Security

Data is encrypted in transit and at rest. Access is controlled per user at the database level. No system is perfectly secure, but we limit access to the minimum each person needs.

Children

CarePulseAI is not intended for anyone under 18. We do not knowingly collect data from children. If you believe a child has an account, contact us and we will remove it.

Changes

If we change this policy we will update the date above and, for anything significant, tell you in the app.