Privacy Policy

Who this applies to

MyParents is an eldercare coordination service. This policy covers three kinds of people: the payer (the adult child who signs up and pays), the parent (whose care is being coordinated), and coordinators (MyParents staff using the coordinator dashboard). Suppliers (doctors, pharmacies, labs, nurses, caregivers) never create an account or use the app. We hold only their name, phone number, and city to coordinate services with them by phone and WhatsApp.

What we collect

• From the payer: phone number, name, and city, collected at sign-up via OTP verification.
• About the parent:name, age, address, medical conditions, and an emergency contact, entered by the payer with the parent's consent captured at the time of entry. This is health-adjacent information we treat as sensitive.
• Service and billing records: your subscription plan, scheduled and completed visits/consults, coordinator notes on completed services, and payment records (processed by Razorpay; we do not store your card or bank details ourselves).
• Emergency alerts:when the parent's Companion device triggers the SOS button, we record the time and, once resolved, the coordinator's notes.
• Device information:a push-notification token so we can notify the payer's phone when a service is completed, and, for the parent's Companion device only, a device identifier used solely to link that device to the parent's profile. The parent's device never uses a personal login.

Why we collect it

Every field above exists to run the service: scheduling and confirming visits, billing the subscription and any pass-through costs, notifying you when something is completed, and, with zero tolerance for delay, getting a real person to the parent or their coordinator during an emergency. We do not collect data for advertising, and we do not sell personal data to third parties.

Who we share it with

We use the following processors to run the service. Each only receives the specific data it needs to do its job:

• Supabase: hosts our database, authentication, and backend functions.
• Razorpay: processes subscription payments and pass-through charges.
• Firebase Cloud Messaging (Google): delivers push notifications to the payer's phone.
• Twilio: sends the SMS and voice-call fallback to a coordinator when an emergency alert is triggered, and delivers WhatsApp schedule and order messages from coordinators to suppliers' phone numbers.

Suppliers are contacted only by phone and WhatsApp using the number on file. They never receive parent medical details, only what's needed to deliver the service (e.g. a medicine name for a refill, a visit time for a nurse).

Your rights

Under India's Digital Personal Data Protection Act, you can ask us to access, correct, or delete the personal data we hold about you or the parent in your care. Write to us at the contact below and we'll respond within a reasonable time. If a subscription ends, we retain billing records only as long as required for tax and accounting purposes, and delete other personal data on request.

Security

Data is encrypted in transit (HTTPS) and access-controlled at the database level so that a payer can only see their own household, a parent's Companion device can only see that one parent's data, and a coordinator can only see households assigned to the platform. Emergency alerts and payment records are retained as long as the account is active for coordination and billing continuity.

Contact

Questions about this policy or a request about your data can be sent to saurabh.patil.2025@iimu.ac.in.