Privacy

Shark Team helps families and caregivers keep track of care for the people they look after. This page explains, in plain language, what information the app keeps, who can see it, and what we do with it.

What we keep

• Your account: your name, email address and (if you add it) phone number. Your password is stored scrambled, so nobody can read it.
• What your team enters: the patient's name, birthday and blood type, and whatever your team adds: vitals, meds and doses, appointments, notes, photos, allergies, conditions, surgeries, doctors, insurance, emergency contacts, shifts, tasks and supplies.
• Clock-in location: only when a caregiver taps clock in or clock out with GPS, the app checks how far they are from the shift location and saves that distance. It doesn't track anyone's location at any other time.
• Your phone's settings for notifications: if you turn on notifications, the address your phone uses to receive them, and your phone's time zone so times show correctly.
• History: who added or changed what, and when. Edits keep the original, so your team can always see what changed.
• Website forms: early access requests (name, email and who it's for). Contact form messages are emailed to us and not stored in the app. To stop spam, we keep the internet address a form was sent from for up to two days.

Who can see it

• Each patient has their own private team. Only people invited to that team can see its information.
• Each person's role decides what they can do. Account Holders and Admins manage the team; Caregivers log care; Viewers can see but can't change anything.
• Photos are kept in private storage and are shown only to people on that patient's team, through links that expire after a few minutes.
• Notifications on your lock screen never show readings or doses.
• The people who run Shark Team can reach the database to keep the service running and to help when you ask for support.

Services we use

To run Shark Team we use a few trusted services, which handle information only to provide their part of the service:

• Supabase: database, login and photo storage.
• Vercel: hosting the website and app.
• Resend: sending emails like password resets, invites and welcome emails. Emails never include health information, only names and links.
• Apple, Google and Mozilla: delivering notifications to your phone or browser.
• OpenStreetMap: turning a shift address into a map location, only when an admin taps “Find on map”.

On your phone

So the app works without a signal, your phone keeps a copy of the last 7 days and any entries waiting to be sent. That copy is removed when you sign out.

Your choices

• You can export a patient's records as a PDF or spreadsheet at any time.
• The Account Holder can delete a patient, which removes that patient's records and photos.
• You can turn notifications on or off, and change what you get, in Settings.
• To close your account or ask a question about your information, email support@sharkteam.app.

Changes

If we change how we handle information, we'll update this page and the date at the top.