Privacy policy

Introduction

In this Privacy Policy, "Amicare," "we," "us," and "our" refer to Amicare Inc., located at 18 King Street East, Suite 1400 Toronto, ON M5C 1C4, Canada. Amicare is a platform that connects individuals seeking caregiving services (“care seekers”) with professional caregivers (“caregivers"). "You" and "your" refer to any individual who accesses or uses our services, whether as a care seeker, caregiver, or visitor to our website or platform. You can contact us using the details provided below. This policy explains how we collect, use, and protect your personal information when you use our platform and website (collectively, our "services").

This Privacy Policy starts on 24/07/2025 and was last updated on 22/05/2026. We will notify you of any material changes to this Privacy Policy at least 30 days before they take effect through:

• A prominent in-app notification
• An email to your registered email address
• A notice on our website's homepage

For material changes that significantly affect your privacy rights or how we use your personal information, we will request your explicit consent through an in-platform prompt before the changes take effect. This prompt will clearly explain:

• What is changing in the Privacy Policy
• How it affects your privacy rights
• The consequences of accepting or declining
• A link to compare the old and new versions

For minor changes (such as clarifications or updates to contact information), we will notify you through the platform and email, but won't require explicit re-consent. Continuing to use our services after such minor changes indicates your acceptance of the updated terms.

If you don't agree with any changes, you may close your account before they take effect. By continuing to use our services after declining material changes, some features may become unavailable.

Information We Collect

We collect different types of information depending on how you use Amicare. This includes information you provide directly and information about dependents or care recipients when you arrange care for others. Here's a detailed breakdown of what we collect:

General Information (All Users):

• Basic Profile Information: Full name, date of birth, gender, email address, mobile number, full address, preferred languages, and an optional bio
• Profile Photos: Optional profile pictures to help build trust in the community
• Family Member Details: Name, photo, email, phone number, geolocation, primary contact status, and relationship to the care recipient (all optional)
• Ratings and Reviews: Feedback received from or given to other users
• Session Information: Logs of care sessions, notes, and reviews
• Preferences: Gender preferences for matching, specific session requirements, and compatibility factors (such as language preferences or experience needs)
• Emergency Contacts: Optional emergency contact information
• Service Areas: General location for matching (service area for caregivers, address for care seekers)
• Financial Information: Preferred hourly rates (caregivers) or care budgets (care seekers)

Care Seeker-Specific Information:

• Care Details: Relationship to care recipient (if booking for someone else), specific care tasks needed
• Preferences: Preferred caregiver gender, driving requirements
• Care Description: A bio describing care needs (excluding medical history or sensitive health information)
• Next of Kin: Emergency contact information for the care recipient
• Service Location: Where care will be provided if different from your address

Dependent/Care Recipient Information (When Booking for Others):

• Care Needs: Specific support requirements and tasks needed (without collecting medical diagnoses)
• Relationship: How you are related to the care recipient (e.g., son, daughter, spouse)
• Basic Details: First name, last name, gender, and date of birth of the person receiving care

Caregiver-Specific Information:

• Identity Verification: Government-issued ID and live selfie (processed through Persona)
• Qualifications: Professional certifications, background checks, vaccination records, and resume
• Financial Details: Banking information for receiving payments
• Professional Information: Skills, experience, and qualifications

How We Collect This Information:

• Direct Input: Information you provide during sign-up, onboarding, and profile creation
• File Uploads: Documents you upload such as certifications, resume, discharge/referral documents or ID
• Third-Party Services: Identity verification through Persona, payment processing through Stripe
• Platform Activity: Information gathered through your use of our services (session logs, reviews, messages)
• Optional Family Information: Details about dependents and family members that you choose to provide when arranging care for others

Children’s Privacy

Amicare’s platform and services are not intended for use by individuals under 18 years of age. We do not knowingly collect personal information directly from anyone under the age of 18. If you are under 18, please do not create an account or use our services – a parent or legal guardian must do so on your behalf. If we discover that we have unintentionally collected personal data from a minor without proper consent, we will delete that information. If you are a parent or guardian and believe your child (under 18) has provided personal information to Amicare, please contact us so we can remove it.

Accountability

We've appointed a Privacy Officer to protect your privacy. This person makes sure we follow privacy laws and oversees how we handle your personal information. If you have questions or concerns about your information, you can contact our Privacy Officer directly.

Contact information for the Privacy Officer is as follows:

• Email: info@amicare.io
• Phone: (1) 888-994-9114
• Postal Address: 18 King Street East, Suite 1400, Toronto, ON M5C 1C4, Canada

Contact our Privacy Officer with any questions or concerns about your personal information.

Purposes of Collection

This Privacy Policy explains why we collect, use, and share your personal information. We use your information for the following specific purposes:

• Account Creation and Management: Creating and managing your user account, including profile settings and preferences.
• Identity Verification: Verifying your identity through Persona or other verification services for fraud prevention and building trust in our community.
• Matching and Scheduling: Matching care seekers with suitable caregivers based on needs, preferences, availability, and managing care schedules.
• Communications: Helping you communicate with other users and with us.
• Payments: Managing bookings, schedules, and payments through Stripe.
• Reviews and Feedback: Collecting, managing, and displaying ratings and reviews to maintain service quality and help users make informed decisions.
• Customer Support: Providing support and responding to your questions or issues.
• Service Improvement and Analytics: Improving our app and services, including support and analysis.
• Legal Compliance and Fraud Prevention: Meeting legal requirements like preventing fraud.

By using our platform, you agree to let us collect, use, and share your information for these purposes.

Consent

By using our services, you agree to how we collect, use, and share your personal information as described in this Privacy Policy. This includes both information about yourself and about any dependents or care recipients for whom you arrange care. We employ multiple consent mechanisms throughout our platform to ensure transparency and user control:

Initial Sign-up Consent: During account creation, you must actively check an unchecked box confirming that you have read and agree to our Privacy Policy and Terms of Service. Each checkbox is separate and clearly labeled. We never use pre-ticked boxes or assume your consent. The full policies are readily accessible via prominent links, with key points summarized in plain language next to the checkboxes.

In-platform Consent Mechanisms:

• Profile Information: When adding information to your profile, clear tooltips explain how each piece of information will be used and who can see it
• Privacy Controls: Your profile settings include granular toggles for controlling what information is visible to other users, with clear explanations of the implications of each setting
• Session Booking: Before confirming a care session, a dedicated screen clearly shows what information will be shared with the other party (including any dependent information) and requires explicit confirmation with the notice: "By sending this request, you agree to share this information with your matched caregiver."
• Location Services: When location access is needed for matching, a clear notification explains the purpose and requests your permission
• Communications Preferences: We use two distinct consent mechanisms for different types of communications (each type can be managed separately in your communication preferences):
  1. Essential Service Communications (automatic): Account security, booking confirmations, session reminders, and service updates
  2. Promotional Communications (opt-in required): Marketing offers, feature announcements, referral programs, and promotional incentives

Consent for Dependent Information:

If you are arranging care for an adult who can provide their own consent, we encourage you to review our privacy practices with them. You must explicitly confirm sharing dependent information with caregivers through a dedicated consent checkbox. We provide clear notices explaining how dependent information will be used and who can see it. When you provide information about a dependent or care recipient, you confirm that you have the legal authority to share their information and consent on their behalf. Only individuals with legal authority, such as a parent, legal guardian, or person with duly authorized power of attorney or similar legal authorization, may provide dependent information and consent on a dependent's behalf. If you do not have such legal authority, you must not provide information about another person or attempt to arrange care on their behalf.

Progressive Consent Collection and Communications: For certain data processing activities and communications, we obtain additional explicit consent at the point of use. We distinguish between essential service communications and promotional messages:

• Sensitive Information: When adding optional sensitive information (like emergency contacts or care preferences), clear notices explain the purpose and you must explicitly confirm sharing
• Communications Management: Our dedicated preferences (which can be modified at any time) center allows you to:
  • Control essential service notifications (in-app, email, or SMS)
  • Opt in/out of promotional communications (opting out of promotional messages won't affect essential service communications)
  • Choose notification frequency and channels
  • Customize types of updates you receive
• Third-Party Integrations: When connecting to services like payment processors or scheduling tools, clear consent notices explain what data will be shared

You may decline any of these optional data uses while still accessing our core services. Each consent request includes clear information about the purpose, data involved, and consequences of declining.

Withdrawing Consent:

You can withdraw your consent at any time by:

• Contacting our Privacy Officer using the contact information provided in this policy
• Requesting account deletion through our platform or by contacting us
• Adjusting your privacy preferences in your account settings

We will explain the consequences of withdrawing consent, such as our inability to provide certain services. Note that withdrawing consent will not affect our processing of your information based on consent before its withdrawal.

Parents or guardians can withdraw permission for children or dependent adults using the same process. For dependent information you've provided, you can withdraw consent to process this information through the same channels.

Platform Permissions

The Amicare platform may request access to certain features or data on your device, but only to enable core functionality of the service. We want to be clear about these:

• Location: With your permission, we may use your device’s approximate location (city/neighborhood level, not precise GPS tracking) to help match you with caregivers or care seekers in your vicinity and to show relevant services in your area. You will be prompted by your phone to allow location access, and you can decline – if you do, you can manually enter your city or postal code to find matches. We do not track your real-time movements; location is used only for matchmaking and is not shared publicly (other users see at most your general area, as noted above).
• Camera and Photos: We ask for camera access if you choose to take a profile photo in-app or when verifying your identity. This lets you snap a photo of yourself or your ID document. We may also ask for access to your photo gallery if you prefer to upload an existing picture. Again, you will see an OS permission request, and it’s up to you to allow it. Images you provide are used solely for your profile (visible to others in the community) or for identity verification (handled by Persona).
• Notifications: After you install the app, it will ask for your permission to send you push notifications. If allowed, we use these to notify you about important account activities – for example, booking requests, messages from other users, or updates on a session. You can always turn off Amicare notifications later in your phone settings if you prefer not to receive them.
• Microphone (Not Used): Our app does not require or use your microphone or any audio recording. If this ever changes (for a voice call feature, as an example), we will update this policy and ask for your consent.

We will only ask for each permission when it’s needed, and your device will prompt you to allow or deny it. If you give permission and later change your mind, you can revoke that permission in your settings.

Limiting Collection, Use, Disclosure, and Retention

We only collect the personal information we need for the purposes we explain to you when we collect it. We'll clearly tell you why we need your information, either directly when collecting it or through our privacy notices.

We only share your personal information with outside parties for the purposes that you have agreed to, and we do so with great care. Below is a comprehensive list of our trusted service providers and the types of personal information they process to help us run Amicare:

• Stripe (Payments): Processes payment transactions and handles payouts. They receive names, bank account information, payment method details, and transaction history to facilitate secure payments. Stripe is PCI DSS compliant but stores data globally with primary operations in the United States.
• Google Cloud and Firebase (Hosting, Authentication & Storage): Provides authentication, database, storage, and crash reporting services. They process account data, session logs, user-uploaded content, and app analytics. Firebase data is primarily processed in the United States, while some Google Cloud storage is located in Canada. These services comply with SOC 2 and ISO standards.
• Intercom (Support Services): Provides in-app support, chat, and user messaging capabilities, processing your name, email, and user actions to facilitate customer support interactions. Intercom primarily processes data in the United States.
• Analytics Tools: We use multiple tools to understand how our services are used and to improve them:
  • Segment: Aggregates and routes user data to our analytics tools. Segment is U.S.-based and processes data primarily in the United States.
  • Mixpanel: Processes behavioral analytics data, including user ID, usage events, session flows, and device data. Mixpanel stores data in the United States and is GDPR and SOC 2 compliant.
  • Google Analytics: Collects basic usage metrics and device information. Default Google Analytics data is processed in the United States.

For our website users, we also use cookies and similar tracking technologies to collect information about your browsing behavior and preferences. These technologies help us analyze website traffic, personalize content, and deliver targeted advertisements. You can control cookie preferences through your browser settings. For detailed information about the cookies we use and how to manage them, please see Cookies, Tracking, and Analytics below.

In our platform, information sharing between care seekers and caregivers is carefully controlled:

Caregiver Profiles Visible Pre-Booking:

• First name and last initial
• Profile image (optional)
• Hourly rate
• General location and approximate distance
• Languages spoken
• Compatibility markers
• Experience and certifications
• Detailed skill set
• Short bio
• Ratings and reviews (with explicit consent)
• Total hours/sessions completed

Care Seeker Profiles Visible Pre-Booking:

• First name and last initial
• City/neighborhood
• Language preferences
• Family member details (first name, initial, photo)
• Relationship to care recipient
• Gender preference for caregiver
• General care needs
• Profile image
• Tasks requested
• Preferred schedule

Additional Information Shared Post-Booking:

For Caregivers:

• Access to messaging interface
• Specific service location
• Care recipient's name and relation
• Emergency contact information
• Care recipient medical information
• Session times and dates
• Previous session notes (if applicable)

We limit information sharing to what's necessary for safe and informed connections, with additional details only provided after mutual booking acceptance.

We may also disclose your personal information if we are legally required to do so (for example, responding to a court order or lawful government request), or if it's necessary to protect the rights, property, or safety of you, Amicare, or others (for instance, to prevent fraud or abuse on our platform).

We do not sell your personal information to anyone.

We maintain specific retention schedules for different types of personal information. For your clarity, we've summarized the retention periods for key data categories below:

These retention periods may be extended if required by law, ongoing disputes, or legitimate business needs. When retention periods expire, we securely delete or irreversibly anonymize the data according to our data disposal procedures.

When your personal information is no longer needed, we will safely destroy or permanently anonymize it. "Safely destroy" means we use secure methods so that the information cannot be recovered or read (for example, secure deletion of digital records). Anonymizing means we may convert your data into a form that cannot identify you (for instance, keeping aggregated usage statistics with personal identifiers removed).

We are committed to minimal data collection and only ask for information that is truly needed to provide our services. We do not collect certain sensitive details that aren't necessary. You should limit the information you share to what is strictly required for care arrangements (such as general mobility needs or basic assistance requirements). By focusing on just the essential information (e.g., "needs help with mobility" rather than detailed medical history or specific diagnosed conditions), we respect your privacy and avoid over-collection.

We will never sell your personal information to anyone. If we change this policy, we'll let you know by updating our Privacy Policy on our website.

Cross-Border Data Transfers

When providing our services, we store and process your personal information in Canada and the United States through our service providers. Our primary data storage is through Google Cloud's Canadian data centers, while several of our third-party service providers process data in the United States as detailed below:

Canada-Based Data Processing:

• Google Cloud: Some core application data stored in Canadian data centers

U.S.-Based Data Processing:

• Segment: Data aggregation and routing happens in the U.S.
• Intercom: Support interaction data processed in the U.S.
• Customer.io: Email, names, and behavior logs stored on AWS Oregon servers
• Mixpanel: Behavioral analytics data stored in the U.S.
• Google Analytics/Firebase: Usage and authentication data processed in U.S. data centers
• Stripe (Payments): Financial information processed globally with primary operations in the U.S.
• Persona (Identity Verification): Biometric and ID data processed in the U.S. on AWS servers

We comply with all applicable laws when transferring your information across borders. All our service providers maintain rigorous security standards, including:

• Data Protection Measures: We implement encryption for data in transit and at rest, and enforce strong security policies through data protection agreements with all providers
• International Standards: Many providers comply with GDPR requirements where applicable
• Operational Security: Persona, Customer.io, Intercom, HubSpot, and our cloud providers maintain SOC 2 certification
• Payment Security: Stripe maintains PCI DSS compliance for secure handling of financial data

You should know that privacy laws in other countries might be different from Canadian laws and might not provide the same level of protection. When your information is processed in the United States, it may be subject to U.S. laws and accessible to U.S. courts, law enforcement, or national security authorities under applicable laws. By using our services, you consent to the transfer, storage, and processing of your personal information in Canada and the United States as described in this section. If you have concerns about cross-border data transfers, please contact our Privacy Officer.

Accuracy

We understand how important it is to keep your information accurate. You can update or correct your personal information at any time. You can review and update your information through your account settings or by contacting our support team.

To update your information, log in to your account and go to account settings. If you can't do this online or don't have an account, contact our support team at info@amicare.io, and we'll help you make the necessary changes.

Please keep your information accurate and up-to-date. We rely on you to tell us about any changes so our records stay current.

Safeguards

To protect your personal information, we use a comprehensive set of security measures. These are designed to prevent unauthorized access, disclosure, and misuse of your information. Our safeguards include:

• Encryption to secure your sensitive information both when it's being transmitted and when it's stored.
• Strict access controls, so only authorized staff can access your information when necessary for their job.
• Regular security checks to find and fix any potential weaknesses in our systems.
• Training for all employees about how to protect your information.
• Physical security at our facilities to prevent unauthorized access to areas where information is stored.
• Plans to quickly respond to any security incidents, minimizing any impact on your information.

We continuously review and update our security measures to address new threats and challenges, ensuring your information stays secure at all times. However, please note that no method of transmitting or storing data is completely foolproof, so while we strive to protect your information, we cannot guarantee absolute security. In the unlikely event of a security breach, we will take prompt action to mitigate it and notify affected users as required by law.

For certain functions, we rely on industry-leading providers – for example, Stripe processes payment information in compliance with rigorous security standards (PCI-DSS), and Persona uses strong encryption for identity verification – thereby adding extra layers of protection for your data.

Openness

We're committed to being clear and transparent about our privacy practices. This policy explains what personal information we collect, how we use it, how we protect it, and what rights you have regarding your information. You can always find the latest version of this Privacy Policy on our website and within the Amicare platform.

If you have questions or concerns about our privacy practices, please contact us through the channels provided on our website. We're here to answer your questions and ensure your privacy rights are respected.

Individual Access and Correction

We recognize how important your privacy is and the personal nature of the information you've shared with us. We're committed to giving you access to your personal information and the ability to correct it.

You have the right to request a copy of your personal information that we have. To submit an access request:

• Email our Privacy Officer at info@amicare.io
• Include your full name, account email, and specify what information you're requesting
• Provide proof of identity (we may request additional verification)

We'll respond to your request within 30 days. If we need more time, we'll notify you in writing and may extend the response period by an additional 30 days as permitted by law.

If you find any of your information is wrong, incomplete, or outdated, you can ask us to correct or update it. Send your request to our Privacy Officer with any supporting documentation. We'll review your request and make necessary corrections as soon as possible.

We may charge a reasonable fee for processing access requests where allowed by law. We'll tell you about any fees before processing your request.

For questions about accessing or correcting your information, please contact our Privacy Officer.

Challenging Compliance

This Privacy Policy explains how you can challenge us if you believe we're not following our privacy principles. If you have concerns, we encourage you to contact us directly through our Privacy Officer atinfo@amicare.io.

We're committed to resolving any complaints about how we collect or use your personal information. Our complaints process follows these steps:

1. Initial Contact: Submit your privacy concern to our Privacy Officer with details about your complaint.
2. Acknowledgment: We'll acknowledge receipt of your complaint within 5 business days.
3. Investigation: Our Privacy Officer will investigate your concerns and review relevant information.
4. Resolution: We'll work to resolve your complaint and provide a response within 30 days.
5. Appeal: If you're not satisfied with our response, you can request an internal review by our senior management who will review your concern within 10 business days.

If you remain unsatisfied after this internal review, you have the right to contact the Office of the Privacy Commissioner of Canada (OPC) to further pursue your complaint. The OPC can be reached through their website at www.priv.gc.ca, by phone at 1-800-282-1376, or by mail at 30 Victoria Street, Gatineau, Quebec, K1A 1H3. You may also have the right to approach other regulatory bodies or privacy commissioners in your province.

Cookies, Tracking, and Analytics

This section explains how we use cookies, tracking technologies, and analytics tools on our website and mobile app. While our mobile app does not use cookies, it does utilize analytics tools like Firebase and Mixpanel to understand app usage. Our website uses cookies and similar technologies to improve your experience, understand site usage, personalize content, and support our marketing efforts. By using our website, you agree to our use of these technologies.

Cookies are small files placed on your device that help us remember your preferences and collect information about how you interact with our website. We use different types of cookies:

• Essential cookies that enable core site features
• Analytics cookies that collect usage data (such as which pages are visited and for how long)

We use various tracking technologies across our platforms. On our website, we use web beacons and pixels to collect browsing data and support marketing efforts. Our analytics are provided by third-party services including Google Analytics, Firebase (for mobile app analytics), Mixpanel (for user behavior tracking), and Segment (for data integration). Each of these services sets their own cookies on our website and collects usage information according to their own privacy policies, which we encourage you to review. While we configure these tools to minimize data collection, they help us understand how users interact with our services and enable us to improve our marketing effectiveness. For our mobile app, we use Firebase and Mixpanel for analytics without cookie-based tracking.

You can manage your cookie preferences through your browser settings for our website. Most browsers let you block or delete cookies, though this may affect website functionality and your browsing experience. For our mobile app, you can control analytics tracking through your device settings or in-app privacy controls. Please note that while the mobile app doesn't use cookies, it does collect analytics data through Firebase and Mixpanel to improve our services.