The short version
- MemoryCare handles health information, such as medications, mood check-ins, falls and brain game scores. We treat it as sensitive and only collect it with consent.
- App information is stored on the phone and in Google Firebase, our cloud database in Sydney, and shared with the caregivers in the care circle. We never sell personal information.
- You can see, correct or delete your information at any time by contacting us.
- If something goes wrong, you can complain to us and then to the Office of the Australian Information Commissioner (OAIC).
The rest of this policy explains these points in full.
1. About this policy
MemoryCare is a free app made by two people, James Tanudji and Amay Chowdhury (“MemoryCare”, “we”, “us” or “our”). This policy explains how we collect, hold, use and disclose personal information when you use the MemoryCare mobile app, our website and any related services (together, the “Service”).
We follow the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Where they apply, we also follow state and territory health records laws, such as the Health Records Act 2001 (Vic) and the Health Records and Information Privacy Act 2002 (NSW).
In this policy:
- the person receiving care means the person living with dementia or memory loss who uses the MemoryCare home screen; and
- a caregiver means a family member, friend or care worker who uses MemoryCare to support them, and the care circle is the group of caregivers linked to that person.
2. Using MemoryCare for someone else
Dementia can affect a person’s ability to make decisions about their personal information. MemoryCare is usually set up by a caregiver, who enters information about the person receiving care.
If you set up or manage MemoryCare for another person, you confirm that:
- the person has agreed to you doing so; or, if they can’t give that consent, you are legally authorised to consent for them (for example, as their enduring guardian, attorney under a power of attorney, or “person responsible” under the law of your state or territory);
- you will act in their best interests, and involve them in decisions about MemoryCare as much as they are able to be involved; and
- you have told any other people whose details you add (such as other caregivers and emergency contacts) that you are sharing their details with us.
We may ask you to confirm your authority. Where it’s practical, we design MemoryCare so the person receiving care can see what is being shared about them. For example, the check-in screen says it is “Shared with your caregivers”.
3. What we collect
We only collect personal information that is reasonably necessary to provide the Service.
About the person receiving care
- Profile details: name, preferred name, photo (if added) and time zone.
- Health information: medications, doses and schedules, whether reminders are marked as taken or done, daily mood check-ins and any notes, SOS requests, fall alerts and responses, and brain game results and trends.
- Tasks and routines: daily tasks such as appointments, walks or calls.
- Location: the device’s location, including live location while the location feature is turned on, and location sent with an SOS or fall alert.
- Motion data: readings from the device’s motion sensors used to detect a possible fall.
About caregivers and contacts
- Name, email address, phone number, relationship to the person receiving care, and account login details.
- Settings and actions you take in the app, such as adding a medication or viewing location.
If you join the waitlist
- Your email address, when you signed up, and whether you’ve confirmed it.
- Whether you open our emails or click links in them, which our email provider records.
Technical information
- Device type, operating system, app version, notification tokens, crash reports and diagnostic logs.
Health information is sensitive information under the Privacy Act. We only collect it with consent (given by the person or by someone authorised to consent for them, see section 2), or where the law otherwise allows.
You don’t have to give us any information. However, without it some features won’t work. For example, SOS alerts can’t include a location if location access is turned off. Because MemoryCare connects a person with their caregivers, it isn’t practical to use the Service anonymously or under a pseudonym, although you can use a first name or nickname in a profile.
4. How we collect it
- From you, when you create an account, set up a profile or enter information in the app, or join the waitlist on our website.
- From caregivers, who may enter information about the person receiving care and about other members of the care circle.
- From the device, through permissions you grant, such as location, motion sensors, notifications and microphone or speaker for read-aloud features.
- When you contact us, for example by email.
You can change device permissions at any time in your phone’s settings.
5. How we use it
We use personal information to:
- provide the Service, including reminders, read-aloud prompts, check-ins, brain games and the caregiver dashboard;
- send SOS, fall, missed-dose and other alerts to the care circle;
- show caregivers the person’s location, activity, wellbeing and trends;
- create and manage accounts, and verify identity and authority;
- email you when MemoryCare launches, and send our newsletter, if you joined the waitlist;
- respond to questions and support requests;
- keep the Service safe, secure and working, including fixing bugs and preventing misuse;
- improve the Service, using de-identified or aggregated information wherever possible; and
- meet our legal obligations.
We will only use or disclose personal information for another purpose if you consent, if it’s a related purpose you would reasonably expect (directly related, for health information), or if the law requires or allows it, for example to lessen a serious threat to someone’s life, health or safety.
Marketing: we will never use health information for marketing. We only send marketing emails, such as the launch announcement and our newsletter, to people who have asked for them, for example by joining the waitlist. Every email has an unsubscribe link, and we stop emailing you as soon as you use it, in line with the Spam Act 2003 (Cth).
6. Automated features and AI
Some MemoryCare features use computer programs to make or suggest decisions automatically, using personal information:
- Fall alerts: motion data is analysed to detect a possible fall. If there’s no response to the “Are you OK?” prompt before the countdown ends, caregivers are alerted automatically.
- Missed-dose alerts: if a medication isn’t marked as taken within a set time, caregivers are alerted automatically.
- AI insights: check-ins, task completion and game results are summarised automatically using artificial intelligence (AI) to give caregivers a short daily summary, such as “Mood has been consistently positive this week”.
These features support caregivers. They do not make medical, financial or legal decisions, and they are not a diagnosis. AI summaries can be wrong or incomplete, and should always be checked against what you know about the person. If you have concerns about how an automated feature affected you, contact us.
8. Where your information is stored
MemoryCare stores app information in two places:
- On the phone. The app keeps information on the device it’s installed on. Information that is only stored on the phone isn’t sent to us.
- In Google Firebase, our cloud database. Firebase lets the person’s phone and their caregivers’ phones share accounts, tasks, medications, check-ins, alerts, location and game results.
Our Firebase database is located in Sydney, Australia (Google Cloud region australia-southeast1). Google may also process some information in other countries where it operates, including the United States, for example when you sign in.
Waitlist and newsletter email addresses from our website are stored by Kit in the United States.
Before disclosing personal information overseas, we take reasonable steps to make sure the recipient handles it in line with the APPs, including through contractual protections such as Google’s and Kit’s data processing terms.
9. Keeping it secure
We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, change or disclosure. Firebase encrypts information while it’s being sent and while it’s stored. We also limit access to people who need it and use secure sign-in.
No system is completely secure. Please keep your login details private and let us know straight away if you think your account has been compromised.
10. How long we keep it
We keep personal information only for as long as we need it for the purposes in this policy, or as required by law. When an account is deleted, we delete or de-identify its information in Firebase within a reasonable time. Information stored only on a phone is removed when the app is deleted from that phone. We may keep limited records where the law requires it or to resolve disputes. If you leave the waitlist or unsubscribe from the newsletter, we stop emailing you, and you can ask us to delete your email address completely.
11. Accessing and correcting information
You can ask for access to the personal information we hold about you, or ask us to correct it, by emailing memorycareau@gmail.com. An authorised representative can also ask on behalf of the person receiving care.
We will respond within 30 days. We won’t charge you for making a request. If we refuse access or correction, we’ll explain why in writing (unless that would be unreasonable) and tell you how to complain. Much of the information can also be viewed and edited directly in the app.
12. Your choices
- Permissions: turn location, motion and notification access on or off in your device settings.
- Care circle: add or remove caregivers in the app.
- Waitlist and newsletter: unsubscribe at any time using the link in any email.
- Delete your account: in the app, or by emailing us. Deleting the account of the person receiving care also removes the information shared with their care circle.
13. Our website
Our website doesn’t use advertising or analytics cookies. It saves your “larger text” preference in your own browser so it’s remembered next time. The site loads its fonts from Google Fonts, which means your browser connects to Google’s servers and shares your IP address with Google, under Google’s privacy policy.
If you join the waitlist, the email address you enter is sent to Kit to add you to the list. The website doesn’t load Kit’s scripts.
14. Data breaches
We comply with the Notifiable Data Breaches scheme. If a data breach is likely to result in serious harm to anyone, we will notify the affected people and the OAIC as the law requires, and tell them what steps to take.
15. Complaints
If you have a concern about how we have handled personal information, please email us at memorycareau@gmail.com. We will acknowledge your complaint promptly and aim to respond within 30 days.
If you’re not satisfied with our response, you can complain to the Office of the Australian Information Commissioner:
- Website: www.oaic.gov.au
- Phone: 1300 363 992
16. Changes to this policy
We may update this policy from time to time. We’ll post the new version on this page with a new “last updated” date. If a change is significant, we’ll also tell you in the app or by email before it takes effect.
17. Contact us
For privacy questions, requests or complaints:
MemoryCare Privacy
James Tanudji and Amay Chowdhury
Email: memorycareau@gmail.com
See also our Terms of Use.