Privacy Policy

Last updated: May 2026

1. Information We Collect

We collect name, phone number, email (optional), health vitals recorded during visits (blood pressure, pulse, SpO2, temperature, blood glucose), visit notes and photographs taken by care executives, payment information (processed securely by Razorpay or Stripe — we do not store card details).

2. How We Store Your Data

All data is stored on secure, encrypted servers. Visit photographs are stored in AWS S3 with private access only. Photo metadata including GPS/EXIF data is stripped before storage to protect your parents' location privacy. Database access is restricted to authorized eCare staff only.

3. How We Use Your Data

We use your data for the following purposes:

To deliver our care services and schedule visits
To send visit reports and health alerts to registered family members by email (WhatsApp updates coming soon)
To generate monthly wellness reports
To process subscription payments
To improve our service quality

4. Who We Share Data With

We do not sell your data. We share data only with:

Twilio (for WhatsApp and SMS notifications)
AWS (for secure storage)
Razorpay and Stripe (for payment processing)
SendGrid (for email reports)

All third parties are bound by data processing agreements.

5. Your Rights (GDPR for UK/EU Residents)

If you are a resident of the UK or EU, you have the right to:

Access your personal data
Request correction of inaccurate data
Request deletion of your data (subject to legal retention requirements)
Withdraw consent at any time

6. Data Retention

We retain health and visit data for a minimum of 3 years to support continuity of care. You may request earlier deletion by contacting us. Account data is deleted within 30 days of subscription cancellation.

7. Contact

For privacy concerns, email hello@ecarehome.in.