TCTukoCare

← Back to TukoCare · Terms of Service

Privacy Policy

Last updated: 24 July 2026 · Effective on acceptance.

Plain-language summary: TukoCare is owned by the family, not the agency. We collect only what the app needs to show you your loved one’s care. We never sell your data. Caregiver location is checked only at check-in, with consent, to confirm a visit happened — we do not track anyone continuously.

1. Who we are

TukoCare (“we”, “us”), a service operated by AssignMe (Minnesota, USA), provides a consumer app that lets families follow the in-home care of a loved one. This policy explains what we collect, why, and your choices. Questions: support@assignme.health.

2. Information we collect

Please do not enter clinical/medical records (diagnoses, medication lists, MRNs). TukoCare is a coordination tool for families, not a medical record. The app screens for and blocks obvious identifiers.

3. How we use it

To operate the care circle (show visits, updates, photos, messages), verify check-ins, send notifications you asked for, provide support, process the optional paid subscription, and keep the service secure. When you enable AI features, we also use your circle’s content to generate visit summaries, spot gentle trends, decide whether a note warrants an immediate alert, answer questions you type, suggest activities, and turn recordings into stories. We do not use your care content for advertising, and we do not sell it.

3b. AI features & third-party AI providers

Care Assistant. The in-app assistant can, at your request, act inside your circle (for example adding tasks, needs, medications, schedule entries, or posting a message you asked it to send) and keeps short “memory notes” of preferences you state, stored with your circle’s encrypted data and deleted with it. It cannot change billing, passwords, sign-ins, or delete accounts.

AI features are optional and only run when your provider enables them. When they run, the relevant text, any photo you submit for a feature such as appointment scanning, and (for the story feature) the audio you record are sent to a third-party AI provider that processes it on our behalf, solely to return the result to your circle. When you save a location pin, we round the coordinates to roughly 100 metres and ask OpenStreetMap’s Nominatim service for a nearby street and town name, so the pin can be labelled in words. Only those rounded coordinates are sent, never your exact position, never your name, and never anything else about the person you care for. We cache the answer so the same place is not looked up twice. You can skip this entirely by typing the label yourself. We do not permit these providers to use your content to train their models where that setting is available to us. AI output can be imperfect — it is a convenience for coordination, not medical advice, and should not be relied on for clinical decisions. You can see whether AI is on under Settings (“AI updates”).

4. Caregiver location – consent

Caregivers are asked to accept the Terms and to allow a one-time location check each time they check in. If a caregiver declines location, the check-in can still be recorded without location verification. Location is used solely to confirm the visit occurred near the family-set place and is visible only within that family’s circle.

4b. Voice & audio recordings (Living Legacy)

The optional “Living Legacy” feature lets a caregiver record a relaxed conversation and turns it into a keepsake (an audio clip plus a written story) for the family. This is a voluntary oral-history and social-engagement feature, intended purely for family memory-keeping and cognitive stimulation, and is kept separate from any care record. Only record with the knowledge and consent of everyone present, especially the older adult. Recording laws vary by location and are your responsibility. Recordings and their transcripts are stored encrypted, visible only within your circle, and can be deleted at any time by the family owner (which also removes them from our storage on our normal deletion cycle).

5. Sharing

We do not sell your personal information. Circle content is visible only to the people you invite to that circle. We use a small number of service providers that process data on our behalf under contract: hosting, email delivery, payment processing (Stripe), and — only when AI features are enabled — an AI provider for text summarisation/answers and audio transcription. We may disclose information if required by law.

6. Your rights & choices

7a. Health Connect and Apple Health

TukoCare can optionally import one data type from your phone’s health app: the daily step count (android.permission.health.READ_STEPS on Android via Health Connect, and the equivalent read permission on iPhone via Apple Health). It is off until you turn it on.

Why. Day-to-day activity is one of the clearest early signs of how an older adult is doing — a sustained drop in daily steps often appears before the person mentions feeling unwell. Importing it automatically means the trend is in the care circle when the family or a clinician needs it.

How it is used. The daily total is stored as a Steps reading on that care circle, alongside readings entered by hand, and is visible only to members of the circle. If the circle owner has Tunza switched on, it may be summarised back to the circle in plain language. It is never sold, licensed, transferred to data brokers, used for advertising or to build an advertising profile, or shared with insurers or employers.

Nothing else is requested. TukoCare does not read heart rate, sleep, weight, blood pressure, blood glucose, oxygen saturation, nutrition, exercise, reproductive health, or any other health data type, and it never writes data back.

Turning it off. Android: Health Connect → Permissions → TukoCare → revoke. iPhone: Settings → Health → Data Access & Devices → TukoCare. Imported readings can be deleted from the circle’s Vitals list, and all data is removed when the circle or account is deleted. Every other feature keeps working.

Full detail: How TukoCare uses Health Connect. Our use of Health Connect follows the Health Connect by Android Permissions policy.

7. Health data notice

TukoCare is a consumer product and is generally not a HIPAA-covered entity. Information you enter may still be “consumer health data” under laws such as the U.S. FTC Health Breach Notification Rule, Washington’s My Health My Data Act, and similar state laws. We handle it accordingly, limit collection to what the app needs, and will notify affected users of a qualifying breach as required by law.

8. Security & retention

Data is encrypted at rest (AES-256), passwords are hashed, all connections use HTTPS, and access is limited to members of your care circle.

How long we keep things. We keep your circle’s data while your account is active. When you delete your account or a circle, we remove it from the live service promptly (typically within 30 days) and it ages out of encrypted backups within a further 30–90 days. Care notes, photos, incident records, medication logs and voice recordings are removed together with the circle they belong to. Operational logs (which do not contain care content) are retained for up to 90 days for security and troubleshooting. You can request export or deletion at any time at support@assignme.health, and caregivers’ access ends the moment a family revokes their link.

9. Children

TukoCare is for adults coordinating care. It is not directed to children under 13 and we do not knowingly collect their information as account holders.

10. Changes

We’ll post updates here and, for material changes, notify you in the app or by email.

This template is provided for review and should be checked by your legal counsel before launch. It is not legal advice.

AI permission and deletion processing

Tunza uses OpenAI to process private care or board content only after explicit AI permission. The separate public product-help chatbot sends your typed product question and our product information to OpenAI without a consent prompt; it does not retrieve your private account, care or board data. You can withdraw permission in Settings. In TukoCare, automatic care summaries require the circle owner's current permission. Manual features remain available when AI is off.

Account deletion removes associated live data. If Apple sign-in revocation or Stripe cancellation is temporarily unavailable, we retain only the encrypted token or subscription identifier needed to retry that request, then remove it when confirmed. Older Apple sign-ins without a saved token may require you to remove the app in your Apple Account settings. Apple subscriptions must be cancelled separately in Apple Settings.