Privacy

Who we are

Corasom is operated by Corasom Ltd, registered in England & Wales under company number 17421070. Registered office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. Corasom Ltd is the data controller for the personal information described on this page. We are registered with the UK Information Commissioner's Office under registration number ZC242757.

What we collect, and why

Everything in your account comes from someone using the app — there is no sensor, and nothing about you or your family is gathered in the background:

• Account details — name, email and photo, which come from our sign-in provider, plus your timezone.
• Your connections — who is connected to whom, and the care circle around them.
• Check-ins, and how the day felt.
• Care-journal notes.
• Routine and medication reminders, and when they were ticked off.
• Brain-game and daily-news activity.
• Posts, tasks and messages on the family board, and questions asked of the Ask Corasom assistant.
• Photos and stories shared in the app.
• When the app was last open — this is what shows the family a “last active” time.
• The weekly Peace of Mind scores worked out from all of the above.
• Your plan and billing status.

We never track where anyone is. There are no maps, no location traces and no precise timestamps in anything your family sees — and we do not connect to third-party health platforms. Card details go straight to Paddle, our payment provider; Corasom never sees or stores them. Separately, we count visits to the website and the app without knowing who is visiting — see “Counting visits” below.

Health-related information

Some of what we hold can say something about health: medication reminders and whether they were ticked off, how someone said they were feeling, and the Routine and Puzzles parts of the weekly score (tablets ticked off, and puzzles played). We collect it for one reason — so the people caring for someone can see how the ordinary week went — and only the care circle on that connection can see it. It is never sold, never used for advertising, and never shared for anyone else’s purposes.

Our lawful bases

Running your account and providing the service is on the basis of our contract with you. Health-related information is on the basis of your explicit consent, under Article 9(2)(a) of the UK GDPR — you give it by setting up medication reminders, recording how you feel, or connecting to a care circle, and you can withdraw it at any time by pausing sharing, removing the information, or deleting your account. Keeping the service secure and preventing misuse is on the basis of our legitimate interests, and so is counting visits, because we need to know whether Corasom works — you can object to that at any time by switching it off.

Consent, and the pause

A connection takes both people. An invitation stays pending until the other person joins or accepts, and either can decline. The person being cared for can pause sharing at any time from their own screen; while it is paused Corasom records nothing new about them and the family is simply told that sharing is paused, so quiet is never mistaken for something wrong. The family cannot override that choice.

Nothing is hidden from the person being cared for

Summaries and scores are built for the family and are not put on the cared-for person’s screen, which is kept deliberately simple. That is a design choice, not a secret: their privacy screen sets out what their family can see, they can pause sharing at any time, and they can ask us at [email protected] for a copy of everything we hold about them.

Who else handles your data

We keep the list short, and everyone on it works for us under contract. Clerk handles sign-in and holds your name and email. Paddle is our Merchant of Record: it takes the payment and holds the billing details. Cloudflare sits in front of the site and app and handles the traffic. RIFIN d.o.o., our hosting provider, runs the servers and the database the app depends on, in Croatia. That is the whole list — there is no advertising, nothing that follows you onto other websites, and no data broker of any kind. Where any of them processes data outside the UK, that transfer relies on the safeguards the UK GDPR requires.

The daily news and the assistant

Two features call outside services, and neither sends anything about you. The morning headlines are fetched from a news service and rewritten into shorter sentences by a language-model provider — what goes out is the news article text and nothing else, with no name, no account and no activity attached. The Ask Corasom assistant does not call an outside service at all: it answers from your own recorded activity.

Counting visits

We count how the website, the demo and the app are used — which pages are opened, which sign-up and demo buttons are pressed, and how many people finish signing up, invite someone or accept an invitation, and open, complete or cancel a paid plan — so we can tell what is working and fix what is not. We do it with OpenPanel, open-source software that runs as part of Corasom on our own servers, so no one else runs it or receives what it counts. It never receives your name, email, account or anything else that says who you are, and never anything you or your family put into Corasom: no check-ins, feelings, reminders, notes, messages, photos or scores. On the screens of the person being cared for it counts nothing while they have paused sharing. It counts that a screen was opened, never what anyone did there — not a request for help, a puzzle played or its score. It sets no cookies and stores nothing on your device. To tell one visit from another it combines your IP address and browser type into a code that changes every day, so no one can be followed from one day to the next. It also uses the IP address to estimate the town or city a visit came from, then throws the address away. Each count is kept with that approximate town or city, the kind of device and browser, and the time of the visit — never your address, and never a precise location. It does not record your screen or what you type. Only the people who run Corasom see the counts — never a family — and they are never used for advertising, never sold or shared, and never used to make a decision about anyone. We keep them for no more than 24 months.

You can switch it off with the button below; the choice covers the website, the demo and the app, on this browser. If your browser sends a Global Privacy Control signal, it is already off and nothing is sent.

How long we keep it

How much history you can see depends on your plan: 7 days on the Free plan, and the full history on the Family plan. Behind that, activity older than 90 days is moved into an archive that nothing in the app reads. When you delete something, it disappears from the app immediately and is cleared from our database within 7 days. Deleting your account in Settings erases your account and everything on your connections straight away. Closing your account with our sign-in provider instead does not erase it — it marks the account closed, and the data stays until you ask us to erase it, so use Settings, or email [email protected] and we will do it for you.

Your rights

You can ask for a copy of your information, have it corrected, have it erased, take it elsewhere, or withdraw a consent you gave. The person being cared for has every one of these rights in their own name, not through their family, and can use them by emailing [email protected]. Email us and a person will answer. If we get it wrong, you can complain to the Information Commissioner’s Office at ico.org.uk, and you are welcome to do that without asking us first.

Cookies

Corasom sets one cookie of its own. It records nothing but whether you are signed in, so the website knows to offer you the app rather than a sign-up form. If you switch visit counting off, a second cookie of our own remembers that choice and nothing else. Our sign-in provider sets the cookies that keep you signed in. There are no advertising cookies, no analytics cookies, and no third-party scripts — even the fonts are served from our own site rather than fetched from anyone else.

Security

Traffic to Corasom is encrypted, access to a care circle is limited to the people in it, and we hold as little as the product needs. Questions about privacy, or a request about your information? Email [email protected].

Not a medical or emergency service

Corasom is for everyday reassurance. It is not a medical device and not an emergency service. It does not diagnose, treat, or respond to emergencies, and it does not monitor anyone’s safety. Tapping “Need help” puts a banner at the top of Corasom for everyone in the family, straight away. We do not send alerts to phones yet, so the cared-for person’s screen also says plainly that no one could be reached, and asks them to call for help. Corasom shows your local emergency number and it never dials for them — a web page is the wrong thing to depend on when minutes matter. In an emergency, always call your local emergency number directly.