Comparta

Privacy Policy

Last updated: 2026-04-15

This Privacy Policy explains how Comparta (“we,” “us,” “Comparta”) collects, uses, and shares information when you use our web and mobile applications (together, the “Service”).

Comparta is a family coordination tool, not a medical record. See our Terms of Service for what you agree not to upload to the Service.

1. Information we collect

Account information. When you create an account, we collect your name, email address, and password (stored hashed via our authentication provider, Supabase). If you sign in with Google or Apple, we receive your email address and name from those providers.

Care-circle content. When you use the Service, we store the content you create: tasks, medication entries, dose logs, calendar events, journal entries, messages, documents you upload, decisions, provider contacts, and notifications you receive.

Device information. For push notifications, we store the push token issued by Apple (APNs) or Google (FCM) for your device, along with the platform (iOS or Android).

Usage information.We collect basic technical information about how you use the Service — for example, the pages you visit and errors you encounter — through our error-monitoring provider (Sentry). This is used to diagnose bugs and keep the Service reliable.

We do not collect precise location, contacts, microphone, or camera access beyond what you explicitly grant when uploading a document or photo.

2. How we use your information

We use your information to:

  • Provide the Service to you and the members of your care circle
  • Send you notifications you have opted into (push, email, in-app)
  • Send operational emails such as invitations, password resets, and the weekly digest
  • Diagnose bugs and improve reliability
  • Enforce our Terms of Service and protect the Service from abuse

We do not sell your personal information. We do not use your care-circle content to train AI models. We do not show advertising in the Service.

3. Who sees your information

Members of your care circle. When you join a circle, other members of that circle can see the content that is shared with that circle. Messages posted to the PROFESSIONAL channel are visible only to coordinators and professional caregivers within that circle.

Service providers. We share limited information with the vendors who help us run the Service:

  • Supabase — database, authentication, file storage
  • Resend — transactional email delivery
  • Upstash — Redis-based rate limiting and scheduled jobs
  • Sentry — error monitoring
  • Expo / Apple / Google — push notification delivery

Each of these providers is bound by their own privacy terms and processes data on our behalf.

Legal process. We may disclose information if required by law, subpoena, or valid legal process, or to protect the safety of users or the public.

We do not share your information for marketing purposes.

4. Your choices

Access and export. You can view the content of your care circles at any time inside the Service. You can request a full export of your account data by emailing us (see §8).

Delete your account.You can delete your Comparta account at any time. When you do, your personal information is deleted. Content you contributed to a care circle (messages, journal entries, task comments) may remain visible to circle members unless you also delete it individually — otherwise context for other members would break.

Notification preferences. You can change your notification frequency, enable quiet hours, or mute a circle in your notification preferences.

Push tokens.When you sign out of Comparta, we delete your device’s push token from our records.

5. Children’s privacy

The Service is not intended for children under 13. We do not knowingly collect information from anyone under 13. If you believe a child has created an account, contact us and we will delete it.

6. Security

We protect your information with industry-standard measures:

  • Encryption in transit (TLS) and at rest (Supabase default)
  • Row-level security policies in the database
  • Rate limiting on sensitive endpoints to deter abuse
  • Error monitoring with personally identifying information scrubbed where practical

No system is perfectly secure. If you suspect your account has been compromised, reset your password and contact us.

7. International users

Comparta is operated from the United States. If you use the Service from outside the US, your information will be transferred to and processed in the US.

8. Contact

Questions about this Privacy Policy or requests regarding your data can be sent to privacy@comparta.app.

9. Changes to this Policy

We may update this Policy from time to time. If we make material changes, we will notify you through the Service or by email. The “Last updated” date at the top of this Policy will always reflect the most recent revision.