Privacy Policy
Last updated: 16 September 2026
1. Who we are
TrulyCared Connect is provided by We Love Memories Limited, trading as Truly Cared Connect, registered in Jersey (company number 134319), La Chasse, Rue des Vallees, St. Martin, JE3 6BB. We are the data controller for the personal information described here. We are registered with the Jersey Office of the Information Commissioner (JOIC), registration number 100185. Contact: hello@trulycared.com.
We are based in Jersey, so the Data Protection (Jersey) Law 2018 applies. If you are in the UK, the UK GDPR also applies; if you are in the EU/EEA, the EU GDPR also applies.
2. Whose information we hold
- Account users: primary account holders, family members, carers and household helpers.
- People being cared for: the people whose care is coordinated in the Service. Their information is added by the primary account holder and the people they invite.
3. What we collect
| Category | Examples |
|---|---|
| Account details | Name, email address, password (stored encrypted), role |
| Care records | Names of the people being cared for; visit check-in and check-out times; hours worked; visit checklist (personal care, housework); notes written by carers and family |
| Invoicing | Carer hourly rate, invoice numbers, hours and totals |
| Subscription | Plan, trial and subscription status. Card details are handled by Paddle, not stored by us. |
| Technical | Log-in records, IP address, browser type, and essential cookies used to keep you signed in |
| Communication | Emails you send us |
Health information. Visit notes and checklists may reveal information about a person's health or care needs. This is special category data. We process it only to provide the Service to the people the primary account holder has allowed, with the explicit consent of the account holder and, where they can give it, the person being cared for, or where otherwise permitted by law.
4. Why we use it, and our lawful bases
| Purpose | Lawful basis |
|---|---|
| Providing the Service: accounts, sharing care records with allowed people, invoices, visit emails | Performance of our contract with you |
| Processing care records containing health information | Explicit consent, or another condition permitted by applicable law |
| Subscriptions, trials and payments (via Paddle) | Performance of contract; legal obligation (tax records) |
| Keeping the Service secure and fixing problems | Legitimate interests |
| Service emails (invites, visit finished, trial ending) | Performance of contract |
| Marketing emails (only if you opt in) | Consent, which you can withdraw at any time |
5. Who we share it with
We do not sell personal information. We share it only with:
- People you allow: records are visible only to people the primary account holder has allowed on that person's record.
- Service providers acting for us:
| Provider | What they do |
|---|---|
| Paddle (Paddle.com Market Ltd) | Merchant of Record: checkout, payments, invoicing, sales tax. Paddle is an independent controller for payment data. |
| Supabase | Database and log-in hosting (region: London, UK) |
| Vercel | Website and app hosting |
| Resend | Sending service emails |
- Authorities, where the law requires it.
6. International transfers
Some providers may process data outside Jersey, the UK or the EEA. Where they do, we rely on adequacy decisions or standard contractual clauses to protect it.
7. How long we keep it
- Account and care records: while the account is active, and deleted within 90 days after it is closed, unless you ask us to delete them sooner.
- Invoices and subscription records: as long as tax law requires (typically up to 10 years).
- Technical logs: up to 90 days.
8. Security
Data is encrypted in transit, access is limited by role and by care record, and passwords are stored encrypted.
9. Your rights
Depending on the law that applies to you, you can ask to access, correct, delete, restrict or port your information, object to processing, and withdraw consent at any time. Email hello@trulycared.com. We will reply within one month. You can also complain to the JOIC (jerseyoic.org), the UK ICO (ico.org.uk) or your local EU data protection authority.
10. Cookies
We use only essential cookies needed to sign you in and keep the Service secure. We do not use advertising cookies.
11. Children
The Service is not intended for anyone under 18.
12. Changes
We will post any updates here and email account holders about significant changes.