Privacy Policy

MyCareCompanion is a registered DBA of JB2S Enterprises, LLC, a Texas limited liability company. JB2S Enterprises, LLC d/b/a MyCareCompanion ("we," "us," or "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use our care management application and related services (the "Service"). This policy is governed by the laws of the State of Texas.

1. Information We Collect

1.1 Information You Provide

We collect information you voluntarily provide when using our Service, including:

• Account Information: Name, email address, password, and contact information when you register for an account.
• Family Information: Names, dates of birth, and relationships of family members you add to your account.
• Child Health Information: Health logs, medication records, behavioral observations, sleep patterns, dietary information, and other care-related data you choose to enter about children in your care.
• Medical Provider Information: Contact information for healthcare providers you choose to connect with your account.
• Communications: Messages sent through our family chat feature and support requests.

1.2 Information Collected Automatically

When you access our Service, we may automatically collect:

• Device information (device type, operating system, browser type)
• Log data (access times, pages viewed, IP address)
• Usage patterns and feature interactions

1.3 Mobile App Data

When you use our iOS or Android mobile application, we may additionally collect:

• Push Notification Tokens: A device identifier used to send you push notifications (medication reminders, alerts, messages). This token is stored on our servers and associated with your user account. It does not contain personal information and cannot be used to track you across other apps.
• Device Platform: Whether you are using iOS or Android, to deliver notifications correctly.
• Device Name: An optional device label (e.g., "iPhone") to help you manage your registered devices.

Our iOS app sends push notifications via Apple Push Notification service (APNs) directly — no Firebase SDK is bundled in the iOS binary. Our Android app uses Firebase Cloud Messaging (FCM), a service provided by Google, as a push-delivery transport. No health data is sent to Apple or Google. Only your device token and notification content (title, message text, and a link identifier) are transmitted through these push services. Neither Apple nor Google has access to your health records, care logs, or any child information.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Service
• Generate insights and pattern analysis to help you better understand and care for your children
• Send important notifications, alerts, and medication reminders
• Respond to your inquiries and provide customer support
• Ensure the security and integrity of our Service
• Comply with legal obligations

3. Our Commitment: We Do Not Sell or Share Your Personal Information

We want to be absolutely clear: We do not sell, rent, trade, or otherwise share your personal information or your children's health data with third parties for marketing purposes or any commercial gain.

Your family's data belongs to you. We will never:

• Sell your personal information to data brokers or advertisers
• Share your children's health information for marketing purposes
• Use your data to build advertising profiles
• Disclose your information to third parties without your explicit consent, except as required by law

4. Limited Circumstances for Disclosure

We may disclose your information only in the following limited circumstances:

• With Your Consent: When you explicitly authorize us to share information, such as with medical providers you designate.
• Service Providers: To trusted third-party vendors who assist us in operating our Service (e.g., cloud hosting, payment processing, AI-assisted pattern analysis), who are contractually bound to protect your data and use it only for the services they provide to us. For health information, applicable vendors operate under a signed Business Associate Agreement (BAA) with us.
• Legal Requirements: When required by law, court order, or governmental authority, or to protect our rights, safety, or property, or the rights, safety, or property of others.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, in which case you will be notified of any change in ownership or control of your personal information.

4.1 AI-Assisted Pattern Analysis (AWS Bedrock under BAA)

To generate insights and identify patterns in your family's logged data, we use Anthropic's Claude AI models hosted on Amazon Web Services (AWS) Bedrock. AWS is our Service Provider for this processing and operates under a signed Business Associate Agreement (BAA), which contractually binds AWS to handle any health information in compliance with HIPAA standards. Anthropic does not receive or retain your inputs — Claude on Bedrock runs entirely within AWS infrastructure, and AWS does not use your data to train AI models.

What we send to the AI:

• By default: de-identified data only — your child's age band, broad diagnosis categories, medication classes (e.g., "stimulant" rather than the brand name), and numeric daily logs (sleep duration, behavior counts, mood scores, etc.). We strip first/last names, exact dates of birth, and free-text notes before the data leaves our servers.
• If you opt in (via Settings → AI Insights → "Allow AI to read my notes"): we additionally include your free-text notes and observations so the AI can interpret context that numbers alone cannot convey. This is off by default and can be turned off at any time from the same Settings panel. Opting in does not retroactively send historical notes — only new analyses run after you enable it.

The insights generated are stored in your account on our servers and shown only to you and the family members you have invited. We do not share AI-generated insights with anyone outside your family or care team. The Claude AI does not have access to other families' data — each request is scoped to a single child's profile and recent logs.

5. Data Security

We implement industry-standard security measures to protect your information, including:

• Encryption of data in transit and at rest using AES-256 encryption
• Secure authentication with optional two-factor authentication (2FA)
• Regular security assessments and monitoring
• Access controls limiting employee access to personal data
• Secure cloud infrastructure with redundant backups

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security but commit to promptly notifying you of any breach affecting your data as required by Texas law.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. You may request deletion of your account and associated data at any time. Upon account deletion, we will remove your personal information from our active systems within 30 days, except where retention is required by law or for legitimate business purposes (such as resolving disputes or enforcing our agreements).

7. Your Rights Under Texas Law

As a Texas resident, you have certain rights regarding your personal information:

• Access: You may request access to the personal information we hold about you.
• Correction: You may request correction of inaccurate personal information.
• Deletion: You may request deletion of your personal information, subject to certain exceptions.
• Data Portability: You may request an export of your data in a portable format.

To exercise these rights, please contact us at privacy@mycarecompanion.net.

8. Children's Privacy

Our Service is designed for parents, caregivers, and medical providers to manage care for children. We do not knowingly collect personal information directly from children under 13. All information about children is provided by their parents, legal guardians, or authorized caregivers. If you believe a child has provided us with personal information directly without parental consent, please contact us immediately.

9. Third-Party Links

Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. For significant changes, we will provide additional notice (such as email notification). Your continued use of the Service after any changes constitutes acceptance of the updated Privacy Policy.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at:

MyCareCompanion
Email: privacy@mycarecompanion.net
Address: Texas, United States

12. Governing Law

This Privacy Policy shall be governed by and construed in accordance with the laws of the State of Texas, without regard to its conflict of law provisions. Any disputes arising under or in connection with this Privacy Policy shall be subject to the exclusive jurisdiction of the state and federal courts located in Texas.