Privacy

CareCalendar Privacy Policy

Your privacy and the security of your personal information are of utmost importance to us. This policy explains how CareCalendar collects, uses, stores, and shares your data, and describes your rights and choices.

Introduction

Your privacy and the security of your personal information are of utmost importance to us. This Privacy Policy explains how CareCalendar (the "Service" or "app") collects, uses, stores, and shares your personal data, and describes your rights and choices regarding your information. This policy applies to all users of the CareCalendar mobile application and any related website or online services that link to this Privacy Policy.

By using CareCalendar, you consent to the data practices described in this policy. If you do not agree with our handling of your information, please do not use the Service. We may update this Privacy Policy from time to time (see Changes to This Policy below), and we will notify you of significant changes.

Key Principles

CareCalendar is designed with privacy in mind. We aim to collect only what is necessary to provide the co-parenting coordination service and to give you transparency and control. We do not sell your personal data, and we do not use third-party analytics or tracking tools for marketing purposes, so your data is not being shared with advertisers or profiled for ads. Our focus is on providing a safe and secure scheduling platform for families.

1. Information We Collect

We collect several types of information in order to operate the Service effectively. This includes information you provide directly, information collected automatically about your use of the Service, and information from third-party integrations you choose to enable.

1.1 Information You Provide Directly

Account Information

When you register for CareCalendar, we collect personal information such as your name and email address. If you sign up via an external provider (like Google or Apple login), we receive your name and email from that provider during authentication. We use your email for account verification, login, and to communicate important updates or notifications. Optionally, you may also provide a profile photo or display name within the app.

Family Profile Data

As the Service revolves around co-parenting, you will provide information about your family to set up the shared calendar. This includes adding your children's profiles – typically the child's name, date of birth, perhaps a photo, school or daycare name, and any notes you find relevant. We understand this is sensitive information. It is stored securely and is visible only to the parents/guardians in the family group (and any authorised viewers like an invited mediator). Minors do not create accounts on CareCalendar; their information is input by the parent/guardian solely for scheduling purposes, and we assume that by providing it, you (the parent/guardian) have the right and authority to do so.

Calendar and Scheduling Information

The core of CareCalendar is the scheduling data you input. This includes events related to child custody and care: custody periods, pickups/drop-offs, doctor appointments, school events, holidays, etc. For each event, you may enter details such as the title, description, start and end time, location, and which child(ren) the event pertains to. All these details are shared with the other parent/guardian in your family group in real-time. You may also upload attachments to events or child profiles. Please be mindful that any document you attach may contain personal data; only attach what is necessary and what you have permission to share.

Swap Requests and Messages

If the app allows you to propose schedule changes or send notes related to events, we collect that information as well. A swap request would include data about the proposed change (dates/times) and any message you add. The other parent's response (approve/decline) is also logged as part of the audit trail.

Communications with Us

If you contact customer support or otherwise communicate with us, we collect the information you provide during the interaction. This may include your contact details and a record of the correspondence. We use this to assist you and improve the Service.

1.2 Information Collected Automatically

Usage Data

When you use the app, our systems automatically record certain technical information about your usage. This may include your device type, operating system version, app version, device identifiers, and IP address. We also log actions within the app for debugging, analytics, and audit trail purposes. However, we do not use any external analytics services that track you across different apps or websites, and we do not build advertising profiles.

Audit Log

An important feature of CareCalendar is maintaining an audit log of key actions for transparency and legal purposes. This log automatically records events such as when a schedule event is created or edited, which user made the change, when a swap was proposed/accepted, and when an attachment was uploaded. The audit log is stored securely and is accessible to authorised users.

Cookies and Web Tracking

If there is a web dashboard or website for CareCalendar, it may use cookies or similar technologies to store session information (like keeping you logged in, or remembering preferences). These cookies would be functional/necessary cookies, not advertising trackers. We do not use cookies for advertising or share cookie data with third parties for marketing.

1.3 Information from Third-Party Integrations

External Calendar Sync

If you choose to sync CareCalendar with external calendar services (for example, subscribing to an iCalendar feed, or linking your Google Calendar), we will interact with those third-party services at your request. We create secure tokens that allow calendar applications to pull your events. You can revoke or rotate these tokens at any time.

Notifications

We send push notifications and/or emails to alert you of events. To do this on mobile, we may use device push tokens. For emails, we use your email address. We do not use notifications for marketing – only for functional or transactional messages you signed up for.

2. How We Use Your Information

We use the collected information for the following purposes, all aimed at providing and improving the CareCalendar service:

  • Providing the Service: We use your information to deliver the features of CareCalendar, including populating your shared calendar, sending reminders, and coordinating swap requests.
  • Maintaining an Audit Trail: We maintain a reliable history of changes for transparency and legal robustness, generating tamper-evident reports when needed.
  • Account Management and Authentication: We use account information to authenticate you when you log in and manage sessions securely.
  • Communication: We send necessary communications including verification emails, password resets, important announcements, and notifications you've opted into.
  • Improvement and Development: We use usage data and feedback to improve the Service, guide enhancements, and ensure reliability.
  • Security and Fraud Prevention: We monitor for security issues and protect against fraud, unauthorised access, or abuse of the Service.
  • Legal Compliance and Enforcement: We may use your information to comply with legal obligations, respond to lawful requests, or enforce our Terms of Service.

3. How We Share Your Information

CareCalendar is built to share information selectively. We do not share personal information with third parties for their marketing.

We do not sell or rent your personal data to marketers or unrelated third parties.

Sharing with Your Family Group

By nature of the app, the information you input about the children and the schedule is shared with the other parent/guardian in your family group, and any other users you have given access to.

Service Providers

We use reputable third-party companies to help us provide the Service, including hosting infrastructure (Supabase), email services, notification services, and analytics. These providers are bound by contract to only process your data under our instructions and to protect it.

Legal Requirements and Safety

We may disclose your information if required by law or in response to valid legal requests. We may also share information when we believe in good faith that disclosure is necessary to protect our rights, your safety or the safety of others.

Business Transfers

If the Company is involved in a merger, acquisition, or sale of assets, your information may be transferred. We would ensure any successor entity honours the commitments in this Privacy Policy.

4. Data Retention and Deletion

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected.

Active Account Data

Retained for as long as you have an active account.

Audit Logs

Retained for a defined period (e.g., 7 years) to cover typical custody arrangements and legal standards.

Backups

Maintained for a short duration (typically a few weeks) for reliability and disaster recovery.

Account Deletion

When you delete your account, we initiate deletion of personal data from production systems, though some data may persist temporarily in backups or for legal purposes.

5. How We Protect Your Information

We employ a range of administrative, technical, and physical security measures:

  • Encryption: All data transmitted between your device and our servers is encrypted using TLS 1.2+. Personal data at rest is also encrypted.
  • Access Controls and RLS: We utilize Row-Level Security at the database level to ensure queries only return data you're authorized to see.
  • Authentication Security: Passwords are stored hashed, and we enforce password strength requirements.
  • Revocable Tokens: External calendar sharing tokens can be revoked/rotated if needed.
  • Monitoring and Auditing: We maintain logs of system activity and use security monitoring to catch suspicious activities.
  • Testing and Best Practices: We regularly update software, follow best practices, and may engage in periodic security audits.

Security limitations

Despite all these measures, no system can be 100% secure. We work hard to protect your information, but we cannot guarantee absolute security. Please use a strong unique password and do not share your login credentials.

6. Your Rights and Choices

Depending on your jurisdiction, you may have a number of rights regarding your personal information:

  • Access and Portability: Request a copy of your personal data in a machine-readable format.
  • Correction (Rectification): Request correction of incorrect or incomplete information.
  • Deletion (Right to be Forgotten): Request deletion of your personal data, subject to legal requirements.
  • Restriction of Processing: Request limits on how your data is used while resolving disputes.
  • Objection to Processing: Object to processing based on legitimate interests or for direct marketing.
  • Withdraw Consent: Withdraw consent for optional features at any time.
  • No Sale of Data: We do not sell personal data (CCPA compliance).
  • Complaints: Lodge a complaint with supervisory authorities (OAIC for Australia, DPA for EU).
  • To exercise these rights, use in-app settings or contact us at privacy@carecalendar.com.au

7. Children's Privacy

CareCalendar is not intended for use by young children directly. We do not allow minors to sign up for their own accounts, and we do not knowingly collect personal information from children under 13 (or under 16 in certain jurisdictions) without verifiable parental consent. The Service is designed for parents/guardians to manage children's schedules. Any information about a child is provided by the parent or guardian, and we presume they have the authority to input that information.

If you believe your child has provided personal information to us without your consent, please contact us immediately. We will work to investigate and remove the data if appropriate.

8. International Data Transfers

CareCalendar is developed and offered from Australia, but may be accessible worldwide. Your personal information may be transferred to and stored in servers located in Australia or other countries where our service providers operate.

When we transfer personal data internationally, we take steps to ensure appropriate safeguards are in place, including Standard Contractual Clauses for EEA/UK users, adequacy decisions, and consistent internal policies. By using our Service, you understand that your data may be transferred as described in this policy.

9. Third-Party Links and Services

The CareCalendar app or website may contain links to other websites or services outside our control. This Privacy Policy does not cover how those third-party services process your data. If you click on a link to a third-party website or enable integrations like Google Calendar, your activities are governed by their own privacy policies. We encourage you to read the privacy policies of any third-party service you visit or use.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. When we make changes, we will update the "Last Updated" date and provide notice through the app, website, or email. If changes are material, we will specifically highlight what has changed.

We encourage you to review this Privacy Policy periodically. If you continue to use CareCalendar after a revised Privacy Policy has become effective, that means you accept the revised policy.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: privacy@carecalendar.com.au

Mail: Privacy Officer, Social Synergy AI, 17 Phar Lap Parade, Karalee, QLD 4306, Australia

In-App Support: Use the support/chat function within the app

We will respond promptly, typically within a few business days. If you are in Australia and feel your issue has not been resolved satisfactorily, you may contact the Office of the Australian Information Commissioner (OAIC). If you are in the EU/EEA, you may contact your local Data Protection Authority.

Thank you for entrusting CareCalendar with your family's scheduling information. We take that trust seriously and are committed to protecting your privacy while providing a useful service.

Terms of Service

Your use of CareCalendar is also governed by our Terms of Service.

Last updated: 2026-05-22. Questions? Contact privacy@carecalendar.com.au.