1. Scope and sensitive information
Caremi is an educational wellbeing service for adults aged 18 or older. A wellbeing map can reveal personal circumstances, emotions, relationships and health-related information even when you do not state a diagnosis. We treat those reflections as sensitive; a pseudonymous identifier does not make them anonymous.
Share only what is needed for your reflection. Do not enter another person’s confidential information, medical records, government identifiers, payment-card details or passwords in the conversation. This service is not offered on behalf of a healthcare provider, and this notice does not represent Caremi as HIPAA-certified or as providing the confidentiality of a clinical relationship.
2. What is collected and why
Account: your chosen name, email, authentication identifier and verification/session status allow registration, sign-in, access control and account recovery. Firebase Authentication handles your password; Caremi’s wellbeing services do not receive or store it.
When you explicitly acknowledge the notices, a separate record contains the document version, server date, language, your adult-age confirmation and whether the documents are drafts. It does not contain your reflections, an IP address or permission for optional AI, storage or marketing.
Wellbeing: your answers, confirmed map, optional reflections, selected companion and practical preferences support your map and educational program. Conversation text and drafts are held in the current visit rather than stored as a server chat history. Saving a map in this browser or in your account requires a separate choice.
Map PDF: when you request a download, your current map and its prepared presentation text are sent to Caremi’s backend. The PDF is composed in memory and returned to your device. This action does not make a new OpenAI request, save the profile in your cloud account or spend digital-coach credits.
Program: enrollment choices, activity progress, check-ins and optional reflections are associated with your account to provide continuity. Payment records, access rights, credit balances and usage reservations support purchases, delivery, reconciliation, abuse prevention and spending limits.
Technical data: authentication and application checks, request metadata, error status, timing and pseudonymous quota counters help secure and operate the service. Infrastructure providers may process IP address, device/browser and connection information. We do not include your reflection text, passwords or access tokens in application diagnostic logs.
3. Separate choices, not bundled permission
Creating an account or acknowledging this notice does not turn on AI, marketing, cloud saving or a remembered session. You can use prepared guidance without sending your reflections to an AI provider.
AI permission controls future generative requests. Cloud-save permission controls a manual account save. Local-save permission controls a browser copy. Remember-session permission controls sign-in persistence on your device. Optional measurement has its own permission. You can change these choices separately; withdrawal does not undo processing already completed.
A free map can be viewed without a named account. Downloading its PDF requires a registered account and happens inside Your space. Downloading does not silently save the map in the cloud. A registered account can purchase and access a confirmed 28-day program while email verification is pending. Using or buying digital-coach credits additionally requires a verified email and active program access.
5. Retention and deletion limits
Conversation drafts and unsaved map information normally last for the visit. A copy you expressly save in this browser remains until you delete it or the browser clears its storage. An account map or program record remains until you request its deletion; the current implementation does not automatically expire these records.
Closing an account deletes active wellbeing records and then the authentication identity through separate steps. Failure in either step is reported so the same account can finish the process. The active notice-acknowledgement receipt is overwritten with a minimal deletion marker; that marker remains linked to the account identifier and is not the active receipt. Minimal deletion markers, payment/event records, usage and credit ledgers, operational records and provider backups may remain; downloaded files and data already processed by another provider are not recalled by closing your Caremi account.
Some security request counters have a cleanup target of 24 hours, with asynchronous deletion. Other quota and payment records currently have no final retention schedule. The responsible business must approve concrete retention periods, backup deletion and the procedure for retained records before commercial launch. This draft does not claim that all data is deleted immediately or that all retention obligations have been resolved.
6. Your controls and privacy requests
In Your space, you can review and edit the current map, manage optional storage, download a map PDF, request an account-data export and initiate account closure. The account-data export is a separate machine-readable copy and is not the map PDF. Avoid emailing sensitive reflections with a support request.
Depending on the law that applies to you, rights may include confirmation/access, correction, deletion, withdrawal of consent, information about recipients, a portable copy and an appeal of a refused request. An in-app export may not cover every record subject to a legal access request. Use the configured privacy contact for requests, retained records and appeals. Identity may need to be verified proportionately; exercising a right must not result in unlawful discrimination.
The applicable state-law assessment, response deadlines and a monitored contact/appeal process must be finalized before launch. If you are in Washington or another jurisdiction with specific consumer-health-data protections, a general privacy acknowledgment does not replace separately required collection or sharing consent. Do not treat this draft as proof that those obligations are complete.
7. Your device, downloads and PWA
A downloaded PDF contains your personal reflections. Choose where it is stored and who receives it. Caremi cannot remove files you have downloaded, emailed, printed or shared outside the service. A browser copy is not encrypted by a Caremi password; other people using the device may be able to access it.
The installable web app caches public offline resources and icons, not your map, chat, API responses or payment session in its offline cache. Installation does not itself authorize new processing. Your browser may still retain ordinary browser data; use a private device and sign out when needed.
8. Security and incidents
Caremi uses authenticated service requests, access checks, restricted database rules and separate secret management. No system, download or transmission is risk free, and this notice does not promise perfect security. We do not guarantee continuous human monitoring of your account or messages.
A suspected privacy or security incident should be reported through the configured contact without sending passwords or access tokens. The responsible business must investigate, contain the incident, preserve necessary evidence and make notices required by the law that applies, including consumer-health breach requirements where applicable. A disclaimer does not remove those obligations.
9. Adults only
Caremi is not designed for children or teens under 18. Do not create an account for a minor or enter a child’s sensitive information. If you believe information about a child has been submitted, contact the responsible business so it can assess and address the request; do not send additional sensitive information in the initial message.
10. Changes to this notice
The version at the top identifies this notice. Material changes should be explained before a new use of information takes effect, and fresh consent must be sought when required. Viewing a map, downloading a report or continuing a visit is not evidence that you accepted every later version. Existing users are not retroactively marked as having accepted this draft.