Privacy Policy

EnrichPoint (“we,” “us,” or “our”) operates the epCaregiver mobile application (the “App”). epCaregiver is the central caregiver hub for the EnrichPoint family of products — it lets a caregiver manage their household, link end-user devices via pairing codes, see active licenses and add-ons across EnrichPoint apps, and configure per-app settings for the people in their care.

For the EnrichPoint corporate-level legal terms (account auth, billing, dispute resolution) that apply across every EnrichPoint app, see our site-wide Privacy Policy. This document is the epCaregiver-specific addendum and takes precedence for matters specific to this app.

1. Who uses epCaregiver

epCaregiver is designed for caregivers — typically a parent, family member, or other adult who manages an EnrichPoint household. End users (including children) do not use epCaregiver directly. Their data appears in epCaregiver only insofar as the caregiver manages their profile, license, or per-app settings.

2. Information We Collect

About you (the caregiver)

• Email address and display name (provided at sign-up).
• Authentication identifier from Google or Apple if you sign in with those providers.
• Optional avatar image you upload.
• Device push-notification token, used to deliver caregiver alerts.
• App usage metadata (sign-in events, feature use) for security and product improvement.

About your household

• The list of end-user profiles you create or that join your household — display name, optional avatar, role (e.g. child, dependent adult).
• Co-caregiver memberships, invitations, and pairing-code history.
• Per-app settings you configure for end users (e.g. epSpeak vocabulary preferences, epFidget toy preferences).
• License and add-on state — which EnrichPoint apps each end user has access to. The underlying license records live on the EnrichPoint platform; epCaregiver reads them.

epCaregiver does not store the per-app content end users create or consume (e.g. epSpeak categories, epFidget tap history). That data is governed by each individual app's privacy policy.

What we do NOT collect

• Audio recordings, video, or photos beyond avatars you upload.
• Location data of any kind.
• Contacts, calendar, or other device data outside the app.
• Biometric data.
• Behavioral profiles for advertising or third-party sharing.

3. Children's Privacy (COPPA)

epCaregiver is designed for adult use. Children do not interact with epCaregiver directly; a caregiver is the account holder and the data controller for any end-user profile in their household. We comply with the Children's Online Privacy Protection Act (COPPA) in the United States.

• You must be at least 18 years old (or the age of majority in your jurisdiction) to create an epCaregiver account.
• End-user profiles for children under 13 are created and managed exclusively by an authenticated adult caregiver. The caregiver provides any data tied to that profile.
• A caregiver can review, edit, or delete an end-user profile at any time via the in-app household settings, or by visiting /epcaregiver/delete-data.
• We do not sell, share, or use children's data for advertising or profiling.

If you are a parent or guardian and believe a child has provided information to us without your consent, please contact support@enrichpoint.com and we will delete the data promptly.

4. How We Use Information

• Provide the service: let you manage your household, generate and redeem pairing codes, configure end-user settings, view license state across apps.
• Notifications: send caregiver alerts (e.g. a co-caregiver accepted an invite, a license is about to expire) via push, email, or in-app banners.
• Improve the product: aggregated, non-identifying analytics about which features are used and where bugs occur.
• Support requests: when you contact support, we look at your account data only as needed to resolve the issue.
• Security and abuse: we may log auth events to detect fraud or compromised accounts.

5. How We Store and Protect Information

• Data is stored on Google Firebase (Firestore, Authentication, Storage) within Google Cloud's US infrastructure.
• Data in transit uses TLS 1.2+ between the app, our servers, and Firebase.
• Data at rest is encrypted by Firebase using industry-standard AES-256.
• Access to production data is restricted to a small number of EnrichPoint engineers, with audit logging on administrative actions.
• We never copy production data to engineer laptops.

6. Third-Party Services

epCaregiver uses a small set of third-party services purely for app function:

• Firebase (Google): authentication, database, storage, and push notifications.
• Apple / Google: if you sign in with Apple or Google, your name, email, and provider identifier are shared with us per their respective terms.
• Stripe may be involved if you purchase a paid add-on or subscription from within epCaregiver on behalf of an end user. Stripe receives only the data needed to complete a transaction.

We do not include any third-party advertising SDKs, third-party analytics SDKs, or social-media tracking libraries in the App.

7. Cross-App Data Flow

Because epCaregiver is a hub, some data is shared with — or read from — other EnrichPoint apps within the same household:

• License and entitlement state lives on the EnrichPoint platform and is read by each app, including epCaregiver.
• Per-app settings you configure in epCaregiver are written to the relevant app's data store so the app picks them up.
• End-user profiles in your household are visible to each EnrichPoint app the end user has access to.

Data flow is always within the EnrichPoint family of apps that belong to your household; we do not share with third-party apps outside EnrichPoint.

8. Data Retention

• Account and household data: retained while the account is active.
• Pairing codes: short-lived (typically expire within minutes-to-hours of generation).
• App usage metadata: retained for 90 days in identified form, then aggregated into anonymous rollups.
• Deleted account / data: removed from production systems within 30 days; backup copies are purged on the next backup rotation cycle (up to 90 days).

9. Your Rights

You may at any time:

• Access the data we hold about you or your household. Email support@enrichpoint.com for an export.
• Correct inaccurate data via in-app settings or by contacting support.
• Delete your account at /epcaregiver/delete-account, or specific data categories at /epcaregiver/delete-data.
• Withdraw consent for processing at any time by deleting the account.

10. International Users

epCaregiver is operated from the United States. If you use the App from outside the US, you consent to processing your data in the US. We apply the same privacy protections to all users regardless of location. EU and UK users have additional rights under GDPR and UK GDPR — contact us at support@enrichpoint.com to exercise them.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be announced in the App and on this page. The “Effective date” at the top reflects the most recent version. Continued use of the App after the effective date constitutes acceptance.

12. Contact

Privacy questions, data requests, or COPPA concerns: support@enrichpoint.com.