Legal

Privacy policy

Last updated: November 10, 2026

PresentCare (“we,” “us,” or “our”) helps caregivers coordinate care for a loved one. PresentCare is operated by CKI LLC. This Privacy Policy explains what information we collect, how we use it, and the choices you have.

Not a HIPAA-covered entity

PresentCare is a consumer tool operated by CKI LLC. We are not a HIPAA-covered entity or business associate, and the protections of HIPAA do not apply to information stored in PresentCare.

What we collect

Account information

• Email address (for sign-in, by password or by a secure magic link sent to your email)

Health and care information

• Audio recordings of caregiver visits (temporarily — deleted once the summary is written)
• Text transcripts generated from recordings (temporarily — cleared once the summary is written)
• AI-generated visit summaries, including medications mentioned, tasks, and doctor names
• Medications and doctors you add to your circle’s lists
• Circle membership and care recipient information you provide

Device information

• Push notification tokens (to deliver visit and task notifications)

Subscription information

• Purchase history and subscription status (managed via Apple and RevenueCat). We do not receive your credit card number.

We do not collect precise location, contacts, or advertising identifiers.

How we process data

Recording and transcription

• Audio recordings are encrypted on your device before upload
• Recordings are sent to xAI (Grok Speech-to-Text) for transcription
• Once the summary is written, the audio file is deleted from storage and the transcript is cleared. If the summary step fails, the audio and the transcript are kept until it succeeds, then deleted

Summarization

• Transcripts are sent to Anthropic (Claude) to generate plain-language summaries and extract structured information (medications, tasks, providers)
• Summaries and extracted data are stored in our database hosted on Supabase (AWS infrastructure, United States)
• xAI and Anthropic each say they keep data sent through their APIs for up to 30 days for abuse monitoring, and that they do not use it to train their models

Email & notifications

• Transactional sign-in emails (magic links) are delivered by Resend
• Push notifications and notification emails (visit summaries, task and circle alerts, account notices) are delivered by Courier, which routes each message to push or email
• Occasional PresentCare update emails, listing what we fixed and what's new, are sent from our Gmail account. Every update email has a one-click unsubscribe, and unsubscribing doesn't affect your account.

Authentication

• You can sign in with a password or with a secure magic link (with PKCE) sent to your email. Passwords are stored as hashes by our authentication provider, Supabase

Error tracking

• When the app runs into an error, an error report is sent to Sentry so we can find and fix the problem. Sentry receives your account ID with the report.

RevenueCat

• Subscription status and purchase events are processed by RevenueCat to manage entitlements.

Who has access

• Circle members only: People you invite to your health circle can see that circle’s summaries, tasks, medications, and doctors
• PresentCare staff: May access data for support or debugging only with your consent
• We do not sell, share, or use health data for advertising — ever
• Third-party processors (xAI, Anthropic, Resend, Courier, Supabase, RevenueCat, Sentry) process data solely to provide their services to us, under contractual obligations

Data retention

• Audio recordings and transcripts: Deleted once the summary is written. If the summary step fails, they are kept until it succeeds
• Copies at xAI and Anthropic: Each says it keeps API data for up to 30 days for abuse monitoring and does not train on it
• Visit summaries & extracted data: Until you delete them or delete your account
• Account data: Until account deletion

Your rights

You have the right to:

• Access all data associated with your account (Settings → Export My Data)
• Delete your account and all associated data at any time (Settings → Delete Account)
• Export your data in a portable format
• Withdraw consent for recording at any time by not using the recording feature; you may also delete already-processed summaries at any time in Settings

To exercise these rights, use the in-app controls in Settings or contact us at the email below.

Security

• Data encrypted in transit (TLS/HTTPS)
• Authentication by password or by secure magic links with PKCE — passwords are stored as hashes by Supabase, our authentication provider
• API keys and secrets stored in encrypted secret management (Supabase Vault / environment secrets)
• Row Level Security ensures users can only access data in circles they belong to

Children

PresentCare is not intended for users under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will delete it.

California residents (CCPA/CPRA)

If you are a California resident, you have the right to:

• Know what personal information we collect and how we use it
• Delete your personal information
• Opt out of sale — we do not sell personal information

To submit a request, use in-app account controls or email [email protected].

Sensitive personal information (California)

Health-related data you provide through PresentCare is Sensitive Personal Information under the California Privacy Rights Act (CPRA). We use it only to provide the service to you and your care circle. We do not sell or share it for cross-context behavioral advertising. You may request that we limit use of this information to what is necessary to provide the service.

Washington residents (My Health My Data Act)

For Washington residents, we obtain specific consent before collecting health-related data through the in-app consent flow before you use recording features.

We honor deletion requests within 30 days of receipt.

FTC Health Breach Notification

In the event of a breach of unsecured health information, CKI LLC will notify affected individuals and relevant authorities as required by the FTC Health Breach Notification Rule and applicable state laws.

Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes through the app or by email. Continued use after changes constitutes acceptance.

Contact

Privacy inquiries:

CKI LLC
5931 Cherry Hill Rd, Huntingtown, MD 20639
[email protected]