Privacy Policy

1. Overview

Family CareSync is a caregiving coordination application operated by EFW Consulting, LLC. It helps individuals, families and authorized caregivers organize information and collaborate in caring for loved ones.

This Privacy Policy explains how Family CareSync collects, accesses, uses, stores, shares and manages information when you visit our website, use our application, collaborate with care team members or connect optional services.

In this policy, "Family CareSync," "we," "our" and "us" refer to Family CareSync, operated by EFW Consulting, LLC.

2. Information We Collect

The information we process depends on how you use Family CareSync and which features you choose to use.

Account Information

• Name and email address.
• Account identifiers and authentication-related information.
• Assigned roles and patient-specific access permissions.
• Application settings, preferences and integration choices.

Patient and Caregiving Information

Authorized users may enter or upload information including:

• Patient profiles, contact details and emergency contacts.
• Medical conditions, allergies, blood type, medications, supplements and care preferences.
• Care providers, insurance information and other patient profile details.
• Appointments, schedules and care tasks.
• Vital measurements, medication administration records, meals, hydration, sleep and caregiving activity logs.
• Notes, observations, questions, messages and care reports.
• Uploaded documents, photographs, supplement-label images and other files.
• Life story information, including photographs and recordings, when provided.

Some of this information may be sensitive, including health-related information. Users should enter or share patient information only when authorized to do so.

Care Team Information

We process information necessary to manage care team membership, invitations, assigned roles and patient-specific permissions.

Google Account Information

If you choose to connect Google Calendar, we access certain Google account and calendar information as described in Section 6 of this policy.

Technical Information

Our application and service providers may process technical information needed for authentication, security, troubleshooting and service operation.

Depending on the infrastructure involved, this may include device and browser information, IP addresses, authentication activity, error reports and operational logs.

3. How We Use Information

We use information to provide, maintain and protect Family CareSync and to support activities requested by authorized users.

This includes:

• Creating and managing user accounts.
• Organizing patient profiles and caregiving records.
• Coordinating appointments, tasks and daily care activities.
• Managing care team invitations, permissions and collaboration.
• Generating requested reports and summaries.
• Operating optional AI-assisted features selected by users.
• Operating optional third-party integrations.
• Delivering application-related communications.
• Maintaining security, investigating errors and protecting the service from misuse.

Family CareSync is currently free. Paid subscriptions using Stripe may be introduced in the future. Stripe is not currently used to process Family CareSync subscription payments.

4. AI-Assisted Features

Family CareSync offers optional AI-assisted features through Base44's application infrastructure.

These features include an in-app assistant, suggestions generated from selected caregiving notes, and supplement-label information extraction.

Information Processed by AI Features

Depending on the feature you choose, information submitted for processing may include:

• Questions and information you submit to the in-app assistant.
• Caregiving notes you select for AI-assisted suggestions.
• Supplement-label photographs submitted for information extraction.

Information submitted to these features is processed to generate the requested response, suggestion or extraction.

Our current technical audit found that Google Calendar information is not submitted to these AI-assisted features.

AI Provider Data Practices

AI processing may involve service providers operating the underlying AI infrastructure.

Provider-specific retention and model-training practices are subject to confirmation. We will update this disclosure as necessary when those practices are verified.

Users should review AI-generated information before relying on it. AI output may contain inaccuracies and does not constitute medical advice.

5. Sharing Within Care Teams

Family CareSync allows authorized users to invite other people to participate in coordinating a patient's care.

Care team access is organized through assigned roles and patient-specific permissions.

Depending on their role and permissions, care team members may view, create, update or manage selected patient information.

Authorized care team members may have access to sensitive patient information.

Users should invite only individuals who are authorized to access the relevant patient's information.

Changing or removing a person's care team access may affect what information they can view or manage.

6. Google Calendar Integration

Connecting Your Google Account

If you choose to connect Google Calendar, Google presents an authorization screen describing the requested permissions.

Each Family CareSync user connects their own Google account.

Connecting Google Calendar is not required to use Family CareSync's other caregiving features.

Google Data We Request

Our current Google authorization configuration requests the following permissions:

• Google account email address: Used to identify the connected Google account.
• Calendar reading permission: The calendar.readonly scope permits reading calendar information.
• Calendar event permission: The calendar.events scope permits access to manage calendar events.

Google's authorization permissions may be broader than the individual calendar selected within Family CareSync.

Although the current authorization configuration requests calendar event permissions, automated event synchronization has not yet been implemented.

How We Currently Use Google Data

The current implementation retrieves the list of calendars available to your connected Google account.

This allows you to select a calendar and associate it with a patient you are authorized to access.

Our current implementation does not automatically import Google Calendar events into Family CareSync.

It also does not currently create, modify or delete events in your Google Calendar.

Calendar event synchronization may be introduced in the future. We will update this policy and provide any required notice or consent before introducing materially different Google data uses.

Google Data Storage

Google authorization is handled through Google's authorization process and Base44's per-user connection infrastructure.

Google authorization tokens are managed through Base44 rather than stored directly in Family CareSync's application database.

Family CareSync maintains application connection records that may include the associated patient, selected calendar and integration preferences.

Access to these records is governed by applicable application authentication and authorization controls.

Google Data Sharing

Google connection information is processed through the infrastructure required to provide the optional integration.

We do not sell Google user data or use it for advertising.

Our current technical implementation does not send Google Calendar information to Family CareSync's AI assistant, caregiving suggestion feature or supplement-label analysis feature.

We do not disclose Google user data for unrelated purposes.

Disconnecting Google Calendar

Users can disconnect their Google Calendar integration through Family CareSync.

Disconnecting removes the associated application connection records according to the currently verified implementation.

You can also revoke Family CareSync's access through your Google Account settings.

If you have questions about information associated with a previous connection, contact us using the details below.

Google API Services User Data Policy

Family CareSync's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Read the Google API Services User Data Policy .

7. Service Providers and Third Parties

Family CareSync uses third-party service providers to operate its application and deliver selected features.

Base44

Base44 provides application infrastructure used by Family CareSync, including functionality supporting application operation, data management, authentication, integrations and AI-assisted features.

Email Delivery

Family CareSync uses Resend to deliver certain application emails, including care team invitations.

Invitation emails may include the recipient's email address, the inviter's name and the patient's name.

Google

Google provides the optional Google Calendar service that individual users may choose to connect.

Google's own privacy practices apply to its services.

Future Payment Services

Family CareSync is currently free.

We may introduce paid subscriptions processed through Stripe in the future.

If payment processing is introduced, this policy will be updated as appropriate.

Other Disclosures

Information may be disclosed when necessary to comply with applicable law, respond to lawful requests, protect the security of our service, or address suspected misuse.

8. Website Technology and Tracking

Our public website is hosted using GoHighLevel.

We have not intentionally installed Google Analytics, Meta Pixel or other advertising-tracking tools on our website.

Our website hosting and application providers may nevertheless process technical information required to deliver, operate and secure their services.

Such information may include browser details, device information, IP addresses and operational logs, depending on the provider's configuration.

We do not currently operate a separate Family CareSync advertising-tracking program.

9. Data Security

Protecting personal and caregiving information is important to Family CareSync.

The application uses authentication, role-based permissions, patient-specific access controls and server-side authorization for supported operations.

Access to patient information depends on assigned roles and applicable permissions.

We work to maintain appropriate security measures for the information processed through our service.

However, no internet-connected service can guarantee absolute security.

Users should protect their account credentials, use trusted devices and grant care team access only to appropriate individuals.

10. Data Retention and Deletion

Family CareSync retains information according to its purpose, operational requirements and applicable legal obligations.

Removing someone from a care team does not automatically delete the patient's existing care records.

Account Deletion Requests

To request deletion of your Family CareSync account or applicable personal information, email:

[email protected]

We may need to verify your identity before processing your request.

Requests involving shared patient records may require additional review to protect other authorized users and determine applicable retention obligations.

Uploaded Files

Our application supports permanent deletion of uploaded files.

When processing applicable deletion requests, we review associated records and uploaded files for deletion, subject to any applicable retention requirements.

Deletion of application records does not necessarily mean that every related backup or legally retained record is immediately erased.

Google Calendar Information

Disconnecting Google Calendar removes the associated Family CareSync application connection records.

You may also revoke Google authorization through your Google Account.

Contact us if you wish to make a privacy request relating to your Google connection.

11. Your Privacy Choices

Depending on your location, role and applicable law, you may have rights relating to your personal information.

These may include requesting access, correction or deletion where applicable.

Family CareSync also provides application-specific controls for managing supported preferences, care team access, patient records and optional integrations.

To submit a privacy request, contact us using the information at the end of this policy.

12. Children's Privacy

You must be at least 18 years old to create a Family CareSync account.

Authorized adult caregivers may enter and manage information relating to patients who are minors when they have appropriate authority to do so.

Family CareSync is not intended for independent account registration by children.

For questions concerning information relating to a minor, please contact us.

13. International Users

Family CareSync is initially offered to users in the United States.

We may expand availability internationally in the future.

Our service providers may process information through infrastructure located in different jurisdictions.

Any international expansion will require appropriate consideration of applicable privacy and data-transfer requirements.

14. Changes to This Privacy Policy

We may update this Privacy Policy as Family CareSync evolves.

This includes changes to our features, service providers, data practices or third-party integrations.

If our use of Google user data changes, we will update the relevant disclosures and provide any required notice or consent.

Updated versions will display their effective and last-updated dates.

15. Contact Us

If you have questions about this Privacy Policy, our information practices or how to submit a privacy request, please contact us.