Privacy Policy

1. Zero Commercial Data Brokering

CareRing is built on a straightforward promise: We do not sell, rent, monetize, or broker your location data. Ever.

Unlike commercial family tracking applications that sell aggregated commute paths and driving habits to insurance companies and ad brokers, CareRing is 100% open-source software distributed under the permissive MIT license.

Our software contains zero third-party advertisement trackers, zero behavioral profiling SDKs, and zero background analytics libraries.

2. Telemetry We Collect & Store

To provide live family radar, geofence enter/exit notifications, and emergency crash response, CareRing processes the following telemetry with your explicit, operating-system-level permission:

• GPS & Positioning: Latitude, longitude, altitude, bearing, and GPS accuracy radius.
• Motion & Velocity: Real-time speed and accelerometer telemetry to detect potential collisions and vehicular travel.
• Device State: Battery level, charging status, and network connectivity state to notify family members when a device is running low.
• Account Credentials: Name, optional avatar photo, and OAuth identifier (Apple Sign-In or Google OAuth) to authenticate your access to your designated circles.

3. Ghost Mode (Location Cloaking)

CareRing believes privacy should be accessible without disabling safety tools entirely. Activating Ghost Mode allows you to maintain personal boundaries whenever you need temporary privacy:

• Approximate Cloaking: Obscures your exact street coordinates into a generalized neighborhood radius (500m to 8km). Circle members only see your approximate area rather than your precise street address.
• Zero Notifications to Others: Circle members are never notified that you entered Ghost Mode, and no badge or indicator is shown on your avatar to others.
• Customizable Duration: Set Ghost Mode for 30 minutes, 2 hours, until midnight, or until manually deactivated with a single tap.

4. Encryption & Server Storage

All location updates sent between the CareRing mobile application and the backend cluster are encrypted in transit using industry-standard Transport Layer Security (TLS 1.3 / WSS). Data stored within PostgreSQL 16 is protected with database encryption at rest.

5. Immediate Right to Erasure (Zero-Retention Deletion)

You maintain complete ownership of your location trail. From the CareRing mobile app settings, you may:

• Purge your 30-day location breadcrumbs and driving history at any time with a single tap.
• Permanently delete your account, removing all associated profile data, circle memberships, and sensor logs instantaneously from the database.

6. Self-Hosted Server Isolation

For users demanding total infrastructure sovereignty, the entire CareRing backend stack (Node.js, PostgreSQL with PostGIS, and WebSockets) is open source and can be self-hosted via Docker Compose.

When running a self-hosted instance, 100% of your location data flows exclusively through your private server or virtual private cloud (VPC), completely bypassing any external cloud infrastructure.

7. Contact & Maintainer

If you have any questions, vulnerability reports, or data inquiries regarding this Privacy Policy, please reach out directly:

• Maintainer: Sunny Sahsi
• Repository: github.com/sahsisunny/care-ring
• Issues & Disclosures: github.com/sahsisunny/care-ring/issues