Last updated: 6th July 2026

1) Who we are

Controller: PRODUCTSAVVY LIMITED, 19 Cairnbrook Avenue, Carrickmines, Dublin, D18FE06, Ireland. Contact: hello@familycarehub.app. This notice is for FamilyCare Hub.

2) What we process

• Account: name, email, password hash, login timestamps/IP (security logs).
• Care Circles: circle metadata, roles, membership, proxy confirmations.
• Health modules (optional): medications, wellness logs, notes (entered by you/your circle).
• Support: messages you send to us.
• Emails: product updates if you opt in.

3) Why we process (legal bases)

• Provide the service (accounts, circles, tasks): Contract (Art.6(1)(b)).
• Security & fraud: Legitimate interests (Art.6(1)(f)).
• Payments/tax (when enabled): Contract & legal obligation (Art.6(1)(c)).
• Health modules (medications/wellness/notes): Explicit consent (Art.6(1)(a) + Art.9(2)(a)). You can withdraw any time in Settings → Consent.
• Marketing emails: Consent (you can unsubscribe at any time).

4) Children & proxies

No direct accounts for users under 16 (IE/UK) in this beta. A parent/guardian or other lawful proxy may operate a Care Circle on a child’s behalf (with attestation). You may withdraw consent at any time.

5) Sharing & processors

• Google Firebase (EU region) – hosting, auth, database.
• Stripe Payments Europe – payments/subscriptions (V2).
• Databutton – platform/runtime services.
• MailerLite – product updates/transactional emails (opt‑in).

6) International transfers

We host in the EU (europe‑west) and do not make routine third‑country transfers. Some vendors may process support logs or metadata outside the EU; when that occurs we rely on valid transfer safeguards.

7) Retention

• Account data: life of account; security logs up to 24 months.
• Health entries: default 24 months after last activity or until you withdraw consent.
• Support/email preferences: until resolved or you unsubscribe.

8) Security

We use encryption in transit/at rest, role‑based access, audit logs, and least‑privilege controls appropriate to risk.

9) Your rights

You can request access, correction, deletion, restriction, portability, and withdrawal of consent at any time. You may also contact your data protection authority. We respond without undue delay within statutory timelines.

10) Changes

We will post updates here and, for material changes, provide in‑app or email notice.