Privacy Notice
September 22, 2026
TribuCare helps a family care for someone. This document says what the app stores, what for, who it is shared with, and what you can do about it. It is written to be understood, not to cover us.
Who is responsible
Cesar Gutiérrez, an individual operating from Calexico, California, United States, is responsible for the data collected through TribuCare.
For anything related to privacy: privacidad@tribucare.app
First, because it is what makes this app different
The person using TribuCare is almost never the person the data is about. A son records his mother's medications; a father records his daughter's vaccinations.
If you register another person, you are stating that you have the legal authority to do so — as their representative, as their parent or guardian, or because that person authorized you — and that you have informed them of this notice or will do so. TribuCare has no way to verify this, which is why we ask you explicitly.
And something worth knowing before you invite anyone: when you add someone to a care circle, that person sees the patient's entire record — medications, appointments, diagnoses, documents, notes. There are no partial views and no per-section permissions. Inviting means sharing everything.
What we store
Yours, as the person using the app
Email and full name when you register, or from your Google account if you sign in with it. Optionally: phone, country, ZIP code, profile photo, and your relationship to the patient.
From your ZIP code we calculate one approximate coordinate, used so that hospital searches show results near you. TribuCare never asks for location permission and never reads your phone's GPS.
About the patient you register
Name, date of birth, sex, gestational weeks at birth, blood type, photo, conditions, allergies, primary doctor and their phone, insurance, diet, and the notes in their record.
And the record of their care: medications with doses and who prescribed them, every dose confirmed or missed with its time, appointments with the doctor, specialty and hospital, prescriptions, symptoms with severity, vital signs, growth measurements, developmental milestones, vaccination record, and the documents you upload — prescriptions, lab results, imaging.
All of this is health information. We store it because without it the app has no purpose, and we treat it as what it is.
About how the circle works
Who belongs to each circle, assigned tasks, proposed visits, and the family chat messages.
Something worth knowing before using the app as a family: every confirmed dose is recorded with the name of whoever confirmed it and the time, and every member of the circle can see that record.
What we use it for
To make the app work, and nothing else:
- Show and maintain the patient's record.
- Calculate and fire medication and appointment reminders.
- Share the record among the circle members you authorized.
- Track the pill inventory and tell you when to refill.
- Identify you, keep your session, and manage your plan.
- Answer what you write to support.
The two features that send data outside the app
TribuCare has exactly two features that send anything to a third party. Both are optional, both ask your permission before first use, and both can be turned off at any time in Settings → Optional features.
The app assistant
It answers questions about how to use TribuCare. When you write to it, your messages are sent to Anthropic, which generates the reply.
It receives nothing about the patient. No medications, doses, appointments, symptoms or diagnoses: it does not need them to explain how the app works, so we do not send them. Your conversations are saved to your account so you can see the history, and only you can read them.
The medication box scanner
It reads a photo of a medication package to propose the name, dose, unit count and expiry date. That image is sent to Anthropic to be read. TribuCare does not keep the photo, and nothing from the patient's record is sent with it.
What we do not do
We do not sell your data or the patient's. We do not share it with advertisers, insurers, employers or pharmaceutical companies.
TribuCare has no advertising, no analytics and no third-party trackers. We do not use your data to follow you across apps or websites, and there is nothing in the app that would make that possible.
Medication reminders are scheduled and fire inside your phone. They do not pass through any notification server: no outside system knows what medication the patient takes or at what time.
Who it is shared with
These providers process data on our behalf and under our instructions, not for their own purposes:
| Provider | What for | What it receives |
|---|---|---|
| Supabase | Database, files and authentication | The full record |
| Anthropic | The assistant and the box scanner | Only what those two features send, and only if you gave permission |
| Sign in with Google, and hospital search | Email, name and photo; the text you type when searching for a hospital | |
| Apple and Google Play | App distribution | Whatever the stores handle |
Beyond these cases, we will only hand over information when a competent authority lawfully requires it.
Where the data lives
In the United States, in region us-east-1 (Virginia).
How long we keep it
As long as your account exists. When you delete it from Settings → Delete account, this is what happens, and it is the system's actual behavior:
- Your profile and your circle memberships are deleted.
- Patients nobody else cares for are deleted with you, along with their entire record: medications, doses, appointments, documents and measurements.
- Patients other caregivers still care for survive. That record belongs to the family, not to you, and destroying it because you closed your account would be the opposite mistake. Ownership passes to an active member of the circle.
Deletion is immediate and irreversible.
Your rights
You can access your data, correct it, delete it, and withdraw the permissions you granted. The fastest way is inside the app: your profile is edited in My profile, permissions are turned off in Settings, and the account is deleted from Settings.
If you would rather write to us, or if you want to exercise a right over the data of a patient you registered, email privacidad@tribucare.app with your name, the email you registered with, and what you need. We respond within thirty days.
Do Not Track signals
Some browsers send a Do Not Track signal. TribuCare does not respond to that signal, because it does not track anyone: there is no advertising, no analytics and no trackers that could honor or ignore it.
Children
TribuCare is built for an adult to record the person they care for, and that includes children. The account always belongs to an adult: a minor does not create their own account or use the app on their own.
Changes to this notice
We will publish them here with their date. If a change is material — a new purpose, a new provider, a different use of health data — we will tell you inside the app before it takes effect.