ElderfriendPrivacy Policy
Our promise
Your information (account, health and medication details, photos, voice and location) is used only to provide the app's features to you and to the family or caregivers you link. We never sell it, never use it for advertising and never give it to other companies for their own purposes. Health, medication, photo, voice and location data is never sent to advertisers or to the advertising software.
What we collect
| Data | Examples | Required? |
|---|---|---|
| Account | Name, email or phone number, password (stored hashed), language, country, role | Yes |
| Health information (sensitive) | Medicines and schedules, medicine photos, daily check-in answers, SOS events | For health features, with your explicit consent |
| Photos and audio | Medicine photos, voice messages, songs you share | Optional |
| Care provider and caregiver details | If you register as a provider or post a care need: ID card photos, resume, services, prices, description, contact details | Only for those features; checked by an administrator |
| Location | Used only where a feature needs it, for example showing the right emergency numbers; never for advertising | Optional |
| Device data | Push token, advertising ID (ads only), app version | Needed for notifications and, where enabled, ads |
| Usage and debug logs | Screens used, errors | Only if you opt in; off by default |
Why we use it
- To remind you of medicines, send SOS and check-in messages and connect you with the people you link (providing the service).
- To keep the service safe and fix errors.
- To process subscriptions through Google Play.
- Only if you opt in: to understand how the app is used.
Who receives it
No one receives your information for their own purposes. These service providers process data on our behalf, only for the stated purpose:
| Provider | Purpose | Data |
|---|---|---|
| Google Firebase | Sign-in codes (SMS) and push notifications | Phone number, push token |
| Google Play | Subscription billing | Purchase tokens (we never see card details) |
| Google Firebase Analytics (only if you opt in) | Understanding how the app is used so we can run and fix it | Screens used and errors; never health data; never used for ads |
| Email delivery provider (SendGrid) | Verification and account emails | Your email address |
| Google AdMob (only where ads are on) | Showing ads | Advertising ID and ad request only. No health or personal data. You can reset or limit the advertising ID in your phone settings |
| Our hosting provider | Running our servers in Canada | All data, encrypted in transit |
We may disclose information when the law requires it.
How long we keep it
While your account exists. When you delete your account, your data is erased immediately from the live service; encrypted backups roll off in about 35 days. Records we must keep by law (for example payment records) are kept for the period required. Records that the law requires us to keep, such as payment records, are kept for 5 years and then deleted.
Your choices and rights
You can see and edit your data in the app, turn optional consents off in Settings, delete your account in the app, and email cs@elderfriend.vn for any request. We reply within 30 days.
Vietnam
This part applies to users in Vietnam under the Law on Personal Data Protection (Law 91/2025/QH15) and Decree 356/2025/ND-CP. The controller is Trinh Van Kien. Health information is sensitive personal data: we process it only with your separate, explicit consent, given in the app before the health features start, and you may withdraw it at any time. You have the right to be informed, to consent or refuse, to access, correct, delete, restrict and object, to withdraw consent, to complain and to claim damages. Withdrawing consent does not affect earlier lawful processing. Our servers are in Canada. This means your information is transferred to and stored in Canada, and it is encrypted while it travels. We do not sell it or share it with anyone for their own purposes.
United States
This part applies to users in the United States. We do not sell or share your personal information (as those terms are used in California law) and we do not use it for targeted advertising. At collection we tell you which categories we collect (table above) and why. California residents may know, access, correct and delete their information and are protected from discrimination for using these rights. Consumer health data (Washington My Health My Data Act and similar state laws): we collect it only to provide the features you ask for, only with your consent, we do not sell it, and you may withdraw consent and request deletion at any time. If we discover a breach of unsecured health information we will notify you and, where required, the Federal Trade Commission, as the FTC Health Breach Notification Rule requires. To use your rights under California, Washington or another US state's law (access, correction, deletion, withdrawing consent), email the contact address in the footer of this page. We confirm that the request comes from you, then reply within 30 days.
Children
Elderfriend is for adults and is not directed to children under 13 (United States) or under 16 (Vietnam). We do not knowingly collect their data; tell us and we will delete it.
Security and breaches
Data is encrypted in transit; passwords are stored hashed; access to the admin site is restricted and logged. If a breach affects you we will tell you without undue delay and as the law requires.
Deleting your account
In the app: Settings, Delete my account. Details: Delete account.
Changes and contact
When this policy changes we raise its version and date and the app asks you to read it again. Contact: cs@elderfriend.vn, Trinh Van Kien, 423/30/9/22 Ha Thi Khiem, Trung My Tay, Ho Chi Minh City, Vietnam.