Privacy Policy — Supported

Introduction

Supported ("we", "us", "our") is developed by Cocoacorn. This privacy policy explains how the Supported app handles your data.

Data We Collect

We do not collect any data. Supported does not have user accounts, does not use analytics services, and does not include any third-party SDKs that collect data.

Data Stored on Your Device

Supported stores your care log entries, wellbeing check-ins, daily observations, people you care for, notification preferences, acknowledged-need history, backup metadata, and settings locally on your device using Apple's SwiftData framework. This data never leaves your device unless you choose to enable iCloud sync.

Patient Data (CloudKit Sharing)

If you connect to a person's shared data from Tended, Metered, or Tolerated, their daily health summaries (day rating, energy level, spoon count, flare/crash status, conditions, dietary restrictions, condition explainer, and any current need they broadcast) are received via Apple's CloudKit shared zones. This data:

• Is shared by the patient from their device, at their discretion
• Is transmitted via Apple's CloudKit infrastructure, encrypted in transit and at rest
• Is stored locally on your device
• Can be revoked by the patient at any time, and Supported gracefully unpairs from accepted shares when you tap Delete All Data
• Is never forwarded to Cocoacorn or any third party by the app

Supported never writes to or modifies the patient's data. It is read-only.

Care Log

Your care log is private. It is never shared with the person you care for, never transmitted to Cocoacorn, and never accessible to anyone but you. If you enable iCloud sync, it syncs only to your own iCloud account.

iCloud Sync

If you enable iCloud sync in Settings, your care log, wellbeing data, daily observations, and people are stored in your personal iCloud account using Apple's CloudKit service. This data is:

• Stored in your private iCloud database, accessible only to you
• Encrypted in transit and at rest by Apple
• Not accessible to Cocoacorn or any third party

We do not operate any servers. We cannot read, access, or process your iCloud data.

You can disable iCloud sync at any time in Settings. Your local data is not affected.

Apple Watch

If you use the Supported Apple Watch app, snapshots of your people's status are sent from your iPhone to your paired Apple Watch using Apple's WatchConnectivity framework. The transfer happens directly between your devices and does not pass through any external server. The Watch caches the snapshot in a watchOS App Group on your wrist; no patient data leaves your devices.

Widgets

iPhone Home Screen and Lock Screen widgets read a frozen snapshot of your people's status from a shared App Group on your device. The snapshot is rebuilt automatically whenever the underlying data changes. Widgets do not connect to any server.

Background Tasks

Supported registers a single background task identifier (uk.co.email2davis.Supported.autoBackup) which the system schedules approximately once a day to write your latest backup to your iCloud Drive. No network requests are made beyond Apple's iCloud Drive infrastructure, and no analytics are reported.

In-App Purchases

Supported is free with no in-app purchases at launch. If optional purchases are added in the future, they will be processed entirely by Apple through the App Store. We do not receive or store any payment information.

Backup and Restore

Supported allows you to create full backups of your data as a .supportedbackup ZIP archive stored locally or in iCloud Drive. Backup files are not encrypted by Supported and contain your care log, wellbeing, observations, and people in JSON format. You are responsible for the security of backup files you export or share. Restoring stages a rollback snapshot of your current data first; if the restore fails mid-flight, your previous data is automatically restored. Automatic daily backups to iCloud Drive can be enabled.

Notifications

If you enable notifications, Supported sends local notifications about patient status changes (flare days, crash days, low spoons, and current needs the patient broadcasts). These notifications are generated on your device. No data is sent to any external service. Need notifications honour your existing per-person flare, crash, and low-spoons toggles so silenced people stay silent.

Data Deletion

You can delete all your data at any time via More > Data > Delete All Data. This permanently removes all people, care log entries, daily observations, and wellbeing check-ins from your device. Supported also walks away cleanly from any accepted CloudKit shares so the patient's device is no longer pushing to a device you've wiped. If iCloud sync is enabled, your local data is also removed from your iCloud account.

Children's Privacy

Supported does not knowingly collect data from children under 13. The app does not collect any data from any user.

Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted at this URL and reflected in the app.

Contact

If you have questions about this privacy policy, contact us at support@cocoacorn.com or visit https://www.cocoacorn.com/supported/support.