Privacy Policy for the United States

Effective date: 2026-06-03

This Privacy Policy applies to CareBear users in the United States. CareBear is a free mobile app provided by Redefine Impacc LLC ("we," "our," or "Service Provider"). If you use CareBear in Japan, please refer to the Japan Privacy Policy. Language preferences do not change which jurisdiction policy applies.

1. Information We Collect

Account Registration

When you create an account, we collect account data such as your email address, encrypted password, internal user ID, account timestamps, and account status information.

Sign in with Apple

If you choose Sign in with Apple, Apple authenticates you and shares the email address you elect to provide. CareBear may store the Apple provider identifier or UID needed to connect that Apple sign-in to your CareBear account.

Device, Push, and Session Data

We collect device and session data such as iOS device identifiers, APNs push tokens, bundle ID, APNs environment, preferred language, OAuth access tokens and grants, server ping records, and APNs response data needed for device registration, push delivery, localization, and session security.

Motion and Check-In Data

With your permission, CareBear uses iOS Motion and Fitness and Core Motion to process motion activity type and timestamp. CareBear may also process manual check-in times or device check-in times. CareBear does not collect GPS, precise location, route history, address, or real-time location.

Follower and Invite Data

If you use follower features, we collect follower relationships, nicknames, invite tokens, invite URLs, accepted follower user IDs, and limited activity metadata needed to invite followers and route lost-contact alerts.

Delayed Messages, Notifications, and Email Delivery

If you create a delayed message, we collect the configured wait period, trigger state, free-text message content, in-app notification records, notification titles and content, email delivery records, APNs response data, and related delivery results. Custom message text may be copied into in-app notifications, push notifications, email message content, notification records, and delivery-related records when an alert fires.

Support, Deletion, Diagnostics, and Legal Records

We collect support emails, deletion records, request metadata, crash reports, error reports, Sentry events, logs, and legal or security records needed to support the service, process requests, maintain security, prevent abuse, and document deletion or compliance activity.

2. How We Use Information

We use your information for authentication, account management, Apple sign-in, device registration, push delivery, Motion and Fitness and Core Motion permission handling, motion-based inactivity detection, server pings, manual check-ins, follower invitations, follower activity visibility, lost-contact alert delivery, email delivery, support, security, abuse prevention, legal compliance, deletion processing, diagnostics, and service reliability.

We do not use motion data, delayed-message content, or diagnostic data for marketing, advertising, or profiling.

3. Sharing of Information

No Sale of Personal Data

We do not sell, trade, or rent your personal information.

Service Providers

We use service providers and processing channels to operate CareBear, including:

• DigitalOcean, LLC for hosting and storage.
• Functional Software, Inc. / Sentry for diagnostics and error monitoring.
• Apple for Sign in with Apple, APNs push delivery, App Store distribution, and iOS infrastructure.
• SendGrid SMTP/email systems for email delivery.
• Support and email systems for support and privacy requests.

Followers and User-to-User Sharing

Accepted followers may see limited activity metadata, such as latest activity type, latest activity time, and latest check-in time, before a lost-contact alert fires. If an alert fires, followers may receive your configured delayed-message content through in-app notifications, push notifications through Apple Push Notification service (APNs), and email. This is a user-to-user disclosure needed for the follower feature.

Legal Requirements and Safety

We may disclose personal information if required by law or if reasonably needed to protect CareBear, our users, or others from fraud, abuse, security incidents, safety risks, or legal claims.

4. Your Rights and Choices

Motion and Fitness Access

You can grant or revoke Motion and Fitness permission at any time in iOS Settings. If you revoke permission, lost-contact detection may not work as expected.

Follower and Message Choices

You can manage followers and delayed messages in the app where available. Do not include passwords, door codes, financial credentials, government IDs, medical details, precise location details, dangerous instructions, or another person's information unless it is necessary and you are authorized to do so. Push notifications and emails may be visible outside the unlocked app.

California Privacy Rights

• Right to Know: You may request the categories of personal information we have collected, the sources from which it was obtained, and how it is used or shared.
• Right to Delete: You may request deletion of your personal information, subject to applicable exceptions and the retention limits described below.
• Right to Opt Out of Sale: We do not sell personal information.
• Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

How to Submit Requests

To exercise privacy rights, email [email protected] with "Privacy Request" in the subject line. We may verify your identity before responding. For verified account deletion requests, we will delete or de-identify active account data within 45 days unless retention is required or permitted for legal, security, fraud-prevention, support, backup, or operational purposes.

5. Data Retention, Deletion, and Security

We retain personal information for as long as needed to provide CareBear, support the purposes described in this policy, comply with legal obligations, maintain security, prevent abuse, resolve disputes, process deletion requests, support debugging, and maintain backups.

• You may delete your account at any time from the Account Information page or by emailing [email protected].
• Account deletion removes or de-identifies active product data associated with your account, subject to the limited retention described in this policy.
• Recipient-side notification records, already-sent emails, push notifications through Apple Push Notification service (APNs), and follower-device copies may remain after account deletion and cannot be recalled.
• Backups, diagnostic logs, Sentry events, support emails, and security/legal records may remain for a limited period where needed for security, legal compliance, fraud prevention, support, debugging, backup restoration, or deletion proof.
• When an account is deleted, we keep a minimal deleted-account record that may include an internal reference to the former account, email address, original sign-up date, deletion completion date, and deletion reason. This record is stored separately from active product data, is inaccessible to product features, and is used only for deletion proof, fraud prevention, security, and legal compliance purposes.
• We configure logging and diagnostics to avoid or redact personal information where practical, but diagnostic records may include limited technical metadata or request context.

6. Children

• CareBear is intended only for users aged 13 and above. We do not knowingly collect personal information from anyone under the age of 13.
• If we learn that a child under 13 has provided personal information, we will delete that information after verification where required. Email [email protected] for assistance.

7. Changes to This Privacy Policy

• We may update this Privacy Policy from time to time. If material changes occur, we will notify users by email, in-app notice, or posting the revised policy, subject to applicable law.
• You are advised to review this Privacy Policy periodically. Continued use of CareBear after changes take effect constitutes acceptance of the revised practices to the extent permitted by applicable law.

8. Contact Information

If you have any questions or requests regarding privacy while using CareBear in the United States, please contact us at:

Redefine Impacc LLC

Email: [email protected]