Privacy Policy

Information we handle

Depending on the features you use, Proof MyCare may handle the following information:

• Account and household information: your Sign in with Apple account identifier, an Apple private-relay email when Apple supplies one, display names, household membership, and access roles.
• Care records: provider names and contact details, contracts and rates, planned visits, one-time changes, cancellations, care notes, visit evidence, manual confirmations, and provider messages.
• Invoices and financial records: uploaded PDF, image, CSV, or XLSX files; invoice headers and lines; totals; extraction review; reconciliation results; discrepancy decisions; and reports. Proof MyCare does not receive your Apple payment-card details.
• Device and visit-security information: household-selected country and time zone, an opaque installation or paired-device identifier, device labels, QR challenge hashes, timestamps, and limited abuse- prevention signals. The app does not request device location.
• Subscription information: verified StoreKit product and transaction identifiers, purchase and expiration dates, entitlement state, renewal state, grace-period state, and revocation information.
• Diagnostics: sanitized error categories, request status, processing metadata, and bounded reliability or security signals. Access tokens, QR values, invoice contents, and private credentials are not intended for diagnostic logs.

How information is used

• Authenticate you and protect household-scoped access.
• Store providers, contracts, schedules, invoices, evidence, and provider-review drafts.
• Extract invoice details, when you ask us to process an uploaded document.
• Compare an invoice with planned care and the contract information you provide.
• Issue and redeem time-limited caregiver QR challenges and prevent duplicate actions.
• Process subscriptions, restore purchases, and enforce household entitlements.
• Operate, secure, troubleshoot, and improve the service.

Service providers and sharing

Proof MyCare uses service providers to operate the product. Supabase provides authentication, database, private file storage, and server functions. Apple provides Sign in with Apple and App Store purchases. Invoice documents or extracted invoice content may be sent through our server-side AI processing path using OpenRouter and Google Gemini. The implementation requests data collection to be disabled where the selected route supports that setting; provider terms and retention policies still apply. Cloudflare hosts the public QR companion and these information pages.

We do not sell household information or use it for cross-company advertising. A household member can share a provider message or report using the normal iOS share controls. A caregiver who scans a valid public QR challenge does not need a Proof MyCare account; the challenge is bound to its visit and expires.

Storage, retention, and deletion

Household records and attachments are stored in access-controlled, household-scoped services while they are needed to provide the product and preserve the history you ask us to keep. QR and pairing secrets are stored as hashes rather than as reusable plaintext values.

In the app, Settings → Data & Privacy → Start Over removes operational household data while keeping the Apple account. The separate Delete Account flow permanently deletes the account after its safety checks. Some limited security, audit, or backup copies may remain for a period required by the relevant provider or by legal and security obligations.

Security and international processing

Access is protected by Sign in with Apple, Supabase row-level security, private storage, server-side authorization checks, and short-lived challenge values. Services used to operate Proof MyCare may process information in countries outside your own. Their locations, subprocessors, and retention are governed by their current terms and agreements.

Your choices and contact

You can correct invoice and care records in the app, reset household data, delete your account, or stop using a paired device. Depending on where you live, you may also have rights to request access, correction, deletion, restriction, or a copy of personal information. Contact us before sending sensitive documents so we can use the safest available channel.

Privacy questions and requests: denizmac5@gmail.com

Important limits

Proof MyCare is a record-keeping and comparison tool. It does not diagnose, treat, prescribe, provide emergency advice, determine that a provider acted improperly, or replace professional, legal, financial, or medical advice. QR interactions and household records are evidence for review, not a guarantee that care was delivered.

Changes to this policy

We may update this policy when the service or legal requirements change. The date above identifies the current version. Material changes will be communicated in the app or on this page when appropriate.