Carakin
Privacy Policy
Last updated: July 12, 2026
Carakin ("we", "our", or "the app") is a family caregiving calendar for Android and web. This Privacy Policy explains what we can and cannot see, how encrypted data is handled, and the choices you have.
Important: We do not sell your health or care content. Medications, appointments, tasks, documents, notes, photos, and Health Connect metrics are encrypted on your device before they reach our servers. We only store ciphertext we cannot decrypt - so we cannot read that content, and we cannot sell it.
What we cannot read (encrypted care content)
The following is encrypted on your device (phone or browser) before upload. Our cloud storage receives ciphertext only. Carakin does not hold your family decryption key in a form that lets staff or servers open this data:
• Medications, doses, schedules, and care notes
• Appointments and tasks (including titles, assignees, and Done/Issue responses)
• Uploaded documents and profile photos
• Check-ins and Health Connect metrics (when you use them on Android)
Only people in your family who have the key on their devices can decrypt and view it. Losing your recovery code and all trusted devices can make encrypted data unrecoverable, including by us.
What we do collect in readable form
To run Android and web we process a limited set of information that is not end-to-end encrypted:
• Account sign-in: name, email address, and account identifier from
Google, Apple, Microsoft, or email sign-in (used to authenticate you).
• Family setup: family name, member roles, invites, join requests, and
membership records (used to connect the right people).
• Devices & access: device labels and push tokens (used for reminders
on Android and encryption access grants; reminder care content is not sent in readable
form through our servers).
• Billing (when you subscribe): purchase or subscription status from
Stripe or app stores - we store plan status, not your full card number.
• Diagnostics (when enabled): crash reports, error logs, and basic device
or app version information (does not include decrypted health content).
• Product usage analytics: signals such as which screens are opened,
whether care items are created or edited (type only - not names or notes), and basic error
codes. Used to improve the product; not used to read family health content.
• Marketing website: if you accept cookies, Google Analytics page views
and button clicks on carakin.com help and landing pages. Rejecting cookies does not affect
the Android app or signed-in web app.
How encryption works
Encryption happens on your device before data is sent to our cloud services. We store encrypted blobs and sync them between Android and web so the same family vault works everywhere, but the readable content stays on your side of the encryption. Approve new devices before they can unlock the vault. Keep a recovery code if you are a solo admin.
How we use information
We use readable account and family data to sign you in, manage membership, deliver reminders, and operate billing. We use encrypted payloads only as opaque data to store and sync between your devices. We do not sell personal health content. We do not have access to the readable contents of your encrypted care data.
Third-party services
Carakin uses Google Firebase (authentication, database, storage, cloud messaging, crash reporting, and product usage analytics), Stripe or app stores for Family Premium billing when you subscribe, Google Analytics on the marketing site with consent, and platform health APIs (Health Connect on Android). Health content is encrypted on your device before upload; storage providers hold ciphertext but cannot read it without your family key. Other readable account and operational data is processed according to their policies and our configuration.
Data retention and deletion
Family admins can permanently delete a family and its encrypted data from Android or web settings. Deleting a family removes associated cloud records, stored files, encryption wraps, and local keys on the deleting device. Your sign-in account may remain with your identity provider until you delete it separately. See the Data Policy for exports and the full deletion checklist.
Children and sensitive health information
Carakin is a family wellness log, not a medical record system or a HIPAA-covered service. Do not use it as a substitute for professional medical advice. Parents and guardians are responsible for profiles they create for minors.
Contact
Questions about this policy: support@carakin.com