CareWeave🔒Last updated: April 13, 2026
Privacy Policy
CareWeave is committed to protecting your health data and personal information. This policy explains what we collect, how it's used, and your rights.
🏢1. Who We Are
CareWeave ("we", "us", or "our") is a digital healthcare management platform operating in Nepal, designed to help patients track medications, appointments, and health records, while enabling healthcare providers and pharmacies to deliver better care.
Contact: privacy@careweave.app
📋2. What Information We Collect
We collect the following categories of information:
- Account Information: Full name, phone number, email address, date of birth, gender
- Health Data: Medications, dosage schedules, adherence logs, vital readings (blood pressure, glucose, etc.), symptoms, and appointment history
- Device Information: Device type, OS version, push notification tokens (FCM), and app usage data
- Location: Approximate location used for pharmacy proximity features (only when explicitly granted)
- Camera: Used only for scanning medicine QR codes or prescription images — images are processed locally or via our AI service and not stored permanently
- Usage Data: App interactions, feature usage patterns, and crash reports for quality improvement
🎯3. How We Use Your Information
- Providing and personalising your medication tracking and health management experience
- Sending medication reminders, refill alerts, and appointment notifications via push notification
- Enabling pharmacy order fulfilment and prescription management
- Allowing authorised caregivers to monitor patient health (only with explicit patient consent)
- Generating anonymised analytics for healthcare improvement research
- Complying with legal and regulatory requirements applicable in Nepal
🤝4. How We Share Your Information
We do not sell your personal or health data. We may share data only in these circumstances:
- Pharmacies: Order details shared with pharmacies you place orders with
- Caregivers: Health summaries shared only with caregivers you explicitly approve
- Service Providers: Infrastructure partners (hosting, database, push notifications) bound by confidentiality agreements
- Legal Requirements: When required by applicable law or regulatory authority
🔐5. Data Security
- All data is transmitted over TLS/HTTPS encryption
- Passwords are hashed using industry-standard algorithms and never stored in plain text
- Access tokens use short-lived JWT with secure refresh token rotation
- Sensitive data (auth tokens) is stored in device secure storage (Android Keystore / iOS Keychain)
- Database access is restricted to authenticated application services only
- Regular security reviews and dependency updates are performed
📍6. Location Data
Location permission is only requested when you use pharmacy-finding features. We use OpenStreetMap for map rendering — no Google Maps data is used or shared. Location data is not stored on our servers and is used solely for the current session's proximity calculation.
🔔7. Push Notifications
We use Firebase Cloud Messaging (FCM) to deliver push notifications. Device tokens are stored securely and used exclusively for delivering your medication reminders, alerts, and order updates. You can disable notifications at any time via your device settings.
👶8. Children's Privacy
CareWeave is not intended for children under 13. We do not knowingly collect personal information from children under 13. Patients aged 13–17 may use the app only under caregiver supervision. If you believe a child has provided us data, contact us immediately.
⏰9. Data Retention
- Active account data is retained while your account remains active
- Medication logs and health records: retained for 5 years for continuity of care
- Upon account deletion, personal data is deleted within 30 days
- Anonymised analytics data may be retained indefinitely in aggregate form
⚖️10. Your Rights
You have the right to:
- Access: Request a copy of all personal data we hold about you
- Correction: Update inaccurate or incomplete information
- Deletion: Request deletion of your account and associated data
- Portability: Export your health data in a standard format
- Withdraw Consent: Revoke caregiver access or notification permissions at any time
To exercise these rights, contact us at privacy@careweave.app
🗑️11. Account and Data Deletion
If you wish to delete your CareWeave account and permanently remove your personal health data from our systems, you may do so by:
- Sending an email with the subject "Account Deletion Request" to privacy@careweave.app using the email associated with your account.
- Contacting our support team at support@careweave.app.
Upon receiving your request, we will verify your identity and delete your account, personal details, medical records, and notification tokens within 30 days. Please note that data required for legal, regulatory, or tax compliance purposes (such as past pharmacy order receipts) may be retained as mandated by law.
🔄12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via in-app notification or email. Continued use of the app after changes constitutes acceptance of the updated policy.
© 2026 CareWeave. All rights reserved.
For privacy inquiries: privacy@careweave.app