Privacy Policy — YourCare

1. Who we are

YourCare is operated by YourCare Health Pty Ltd (ABN pending), an Australian company building a mutual aid platform for communities. In this policy, “YourCare”, “we”, “us” and “our” refer to YourCare Health Pty Ltd.

2. What information we collect

Information you provide

Account information: email address, display name, and password when you create an account.
Profile information: any additional details you choose to add to your profile, such as a profile photo.
Messages and content: messages you send, listings you post, and contributions you make within communities. Messages are designed to be end-to-end encrypted using the MLS protocol (RFC 9420) so that the server stores only ciphertext it cannot read.
Payment information: when you contribute to a mutual aid pool or transact through the Care directory, payment details are collected and processed directly by Stripe. We do not receive or store your full card number, bank account details, or other sensitive financial data.
Support enquiries: information you provide when you contact us via the support form.

Information collected automatically

Device information: device type, operating system version, and app version.
Usage data: basic interaction data such as feature usage and crash reports, used solely to improve app stability and performance.
Authentication tokens: session tokens used to keep you signed in.

We do not collect precise location data, contacts, browsing history, or advertising identifiers.

3. How we use your information

We use the information we collect to:

Provide, maintain, and improve the YourCare platform.
Authenticate your identity and secure your account.
Enable messaging, community features, mutual aid pools, and the Care directory.
Process transactions through our payment provider (Stripe).
Send important service notifications (e.g. security alerts, payment confirmations).
Respond to your support enquiries.
Detect and prevent fraud, abuse, and security threats.

We do not use your information for advertising, profiling, or selling to third parties.

4. How we share your information

We share information only in the following circumstances:

With other community members: your display name and profile information are visible to members of communities you join. Message content is end-to-end encrypted and not accessible to us.
Payment processing: transaction data is shared with Stripe to process payments. Stripe’s privacy policy governs their use of that data.
Service providers: we use a limited number of service providers to host and operate the platform (e.g. cloud hosting, database services). These providers process data on our behalf under contractual obligations to protect your information.
Legal requirements: we may disclose information if required by law, regulation, legal process, or governmental request.

We do not sell, rent, or trade your personal information to any third party.

5. Data security

Encryption in transit: all data transmitted between your device and our servers is encrypted using TLS.
End-to-end encryption: YourCare is designed to encrypt messages using the MLS protocol (RFC 9420). When active, the server routes encrypted data it cannot decrypt. Private keys are stored on your device and are never transmitted to our servers.
Non-custodial payments: funds flow directly between members via Stripe. YourCare does not hold, control, or have access to member funds.
Access controls: database access is restricted by row-level security policies that enforce community membership boundaries.

No system is completely secure. While we take reasonable measures to protect your information, we cannot guarantee absolute security.

6. Data retention

We retain your account information for as long as your account is active. If you delete your account, we will delete your personal information within 30 days, except where we are required to retain it by law (e.g. financial transaction records).

Ledger entries recording mutual aid transactions are retained as part of the community’s permanent financial record, as they serve the transparency and accountability commitments of the platform.

7. Your rights

Depending on your jurisdiction, you may have the right to:

Access the personal information we hold about you.
Request correction of inaccurate information.
Request deletion of your account and personal data.
Export your data in a portable format.
Withdraw consent where processing is based on consent.

To exercise any of these rights, please contact us.

8. Children’s privacy

YourCare is not intended for use by anyone under the age of 16. We do not knowingly collect personal information from children. If we become aware that a child under 16 has provided us with personal information, we will take steps to delete that information.

9. International data transfers

YourCare is operated from Australia. If you access the platform from outside Australia, your information may be transferred to and processed in Australia or other countries where our service providers operate. We take steps to ensure that your information receives an adequate level of protection wherever it is processed.

10. Third-party services

The platform uses the following third-party services:

Supabase — authentication and database hosting.
Stripe — payment processing for mutual aid pools and Care directory transactions.
Vercel — web application hosting.

Each provider has its own privacy policy governing its handling of your data. We encourage you to review their policies.

11. Changes to this policy

We may update this privacy policy from time to time. When we make material changes, we will notify you through the app or by email. Your continued use of YourCare after changes take effect constitutes acceptance of the updated policy.

12. Contact us

If you have questions about this privacy policy or how we handle your information, please contact us.

YourCare Health Pty Ltd
Australia