Privacy Policy

1. Introduction

PufCare, operated by Upgrade AI Media ("we", "us", or "our"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal information when you use our health and wellness management platform.

2. Information We Collect

We collect the following types of information:

• Account Information: Name, email address, phone number, and password (encrypted)
• Profile Information: Date of birth, gender, relationship to care recipient
• Health Data: Medications, vital signs, mood logs, activities, allergies, medical notes, and appointment information
• Usage Data: Log data, device information, browser type, and interaction patterns
• Payment Information: Processed securely by Stripe; we do not store credit card numbers
• Voice Data: When using voice features, audio is processed for transcription only and not stored permanently

3. How We Use Your Information

• Provide and maintain the PufCare service
• Send medication reminders and health notifications
• Generate AI-powered health insights (processed by Anthropic Claude)
• Process voice commands and transcription (processed by OpenAI Whisper)
• Process payments and manage subscriptions
• Send emergency alerts to designated contacts
• Improve the Service through analytics
• Communicate service updates and important notices

4. AI and Third-Party Processing

PufCare uses AI services to provide health insights and voice features. Your health data may be sent to Anthropic (Claude AI) for generating insights and to OpenAI (Whisper) for voice transcription. These services process data according to their own privacy policies and do not use your data to train their models. We only send the minimum data necessary for each feature.

5. Data Storage and Security

Your data is stored on secure servers with encrypted connections (TLS/SSL). Passwords are hashed using bcrypt with 12 rounds. Authentication tokens are stored in httpOnly cookies. We implement rate limiting, input validation, and security headers to protect against common web attacks.

6. Data Sharing

We do not sell your personal health data. We share information only in these limited circumstances:

• Caregivers: Health data is shared with caregivers you have authorized within the platform
• Emergency Contacts: Your designated emergency contacts receive alerts when you trigger the emergency feature
• Service Providers: Stripe (payments), Anthropic (AI insights), OpenAI (voice transcription), email provider (notifications)
• Legal Requirements: When required by law, court order, or governmental regulation

7. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes. Anonymized usage data may be retained for analytics.

8. Your Rights

You have the right to:

• Access and download your personal data
• Correct inaccurate information
• Delete your account and associated data
• Opt out of non-essential communications
• Withdraw consent for data processing

To exercise these rights, contact us at support@pufcare.com.

9. Cookies and Local Storage

PufCare uses httpOnly cookies for authentication and local storage for app preferences (theme, notification settings). We do not use third-party tracking cookies or advertising trackers.

10. Children's Privacy

PufCare accounts must be created by adults (18+). Child and baby profiles are managed by their parent or guardian. We do not knowingly collect information from children under 13 without parental consent.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notification. The "Last updated" date at the top of this page indicates when the policy was last revised.

12. Contact Us

If you have questions or concerns about this Privacy Policy or your data, please contact us at support@pufcare.com.