Privacy Policy

Effective date: 2025-06-16

This Privacy Policy applies to CareBear (the “Application”), a free mobile app provided by Redefine Impacc LLC (“we,” “our,” or “Service Provider”). CareBear is governed by California law and is available only to residents of the United States. By using or accessing the Application, you consent to the practices described in this Privacy Policy.

1. Information We Collect

Account Registration

When you create an account, we collect your email address, encrypted password, and device identifiers (e.g., UUID, push-notification token).

Sign in with Apple

If you choose “Sign in with Apple,” we receive only the email address you elect to share; no additional Apple-assigned identifiers are stored.

Motion Data

With your explicit consent, the Application accesses motion data—specifically, motion type (e.g., walking, running) and timestamp—to evaluate physical activity. No GPS, precise location, or other location-based data is ever collected.

Error Reports

To maintain reliability, we collect technical logs—such as crash data, failed background jobs, and numeric session identifiers—and share them with Sentry.io. Personal information (e.g., email or password) is never included.

2. How We Use Information

We use your information for the following purposes:

Authentication & Support

Account credentials (name, email, encrypted password) enable secure authentication and allow us to respond to your support requests.

Lost Contact Logic

Motion data is processed solely to determine whether you might have “lost contact” (i.e., no recent motion activity). This functionality is central to the Application’s core feature.

Error Diagnosis

Error reports are analyzed to diagnose and correct technical issues. We do not use error-reporting data for any marketing or profiling purposes.

3. Sharing of Information

No Sale of Personal Data

We do not sell, trade, or rent your personal information to any third party.

Service Providers

We share personal information (email, device identifiers, motion data) only with third-party service providers that operate under our instructions and confidentiality obligations. For example:

• DigitalOcean, LLC. (U.S. data centers): Hosts our servers and stores data.
• Functional Software, Inc.: Receives technical logs for error monitoring.

Legal Requirements We may disclose your personal information if required by law or to protect our rights, property, or the safety of our users or others.

4. Your Rights and Choices

Motion & Fitness Access

You can grant or revoke Motion & Fitness permission at any time:

Settings → CareBear → Motion & Fitness (iOS).

California Privacy Rights (CCPA)

• Right to Know: You may request the categories of personal information we have collected, the sources from which it was obtained, and how it is used or shared.
• Right to Delete: You may request deletion of your personal data, including motion logs and device identifiers, subject to certain exceptions.
• Right to Opt-Out of Sale: Although we do not sell personal information, California residents have the right to opt out of any future sale should our practices change.
• Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

How to Submit Requests

To exercise any of the above rights, email [email protected] with “Privacy Request” in the subject line. After verifying your identity, we will respond to disclosure requests within 45 days and complete deletions within 45 days, unless retention is required by law.

5. Data Retention

• We retain your account information (email, device identifiers) and motion data (motion type + timestamp) indefinitely, unless you request deletion.
• You may delete your account at any time from the Account Information page or by emailing [email protected] for deletion request. We will permanently erase all personal data and motion logs within 45 days, unless retention is required by law.
• When an account is deleted, we keep a minimal Deleted Account Record that contains the following information:
1. Basic identifiers – an internal reference to the former account (numeric user ID) and the email address.
2. Timeline details – the original sign-up date and the date the deletion was completed.

Deleted Account Record is stored separately from active user data, is inaccessible to product features, and is consulted only for fraud-prevention, security, and legal-compliance purposes. We retain it only as long as necessary for those purposes, after which it is securely destroyed.

• We keep error logs in Sentry.io until they are no longer needed for debugging or legal purposes.

6. Children

• The Application is intended only for users aged 13 and above. We do not knowingly collect personal information from anyone under the age of 13.
• If we learn that a child under 13 has provided personal data, we will promptly delete that information upon verification and parental request. Email [email protected] for assistance.

7. Changes to This Privacy Policy

• We may update this Privacy Policy from time to time. If material changes occur, we will notify you by email at least 30 days before the changes take effect and post the revised policy on this page.
• You are advised to review this Privacy Policy periodically. Continued use of the Application after any changes constitutes acceptance of the revised practices.

8. Contact Information

If you have any questions or requests regarding privacy while using the Application, please contact us at:

Redefine Impacc LLC

Email: [email protected]