Privacy Policy
Last modified: June 16, 2026
1. Introduction
P2 Reserve LLC (“Compass Care,” “we,” “us,” or “our”) respects your privacy and is committed to protecting it through this privacy policy (“Privacy Policy”). Compass Care is a family preparedness and care coordination application that gives families one centralized place to organize documents, coordinate care, and manage health information so that everything is accessible during an emergency.
This Privacy Policy applies to personal information we collect when you:
- create an account and use the Compass Care mobile or web application;
- enter information about yourself and the people you care for, including health information, documents, and contacts;
- use features such as the Vault, AI Scan, Crisis SOS, tasks and reminders, and circle invitations; and
- visit our website and landing pages.
It does not apply to information collected by us offline, or by any third party whose application or content may link to or be accessible from our app and whose data practices we do not control.
Please read this Privacy Policy carefully. If you do not agree with our practices, please do not use Compass Care. If you have questions, contact us using the information at the end of this policy.
2. Children and Care Recipients Under 18
Compass Care is intended for use by adults to organize and coordinate care for themselves and the people they care for. You may use Compass Care to manage information about your dependents and care recipients of any age, including minor children, but only when you are their parent or legal guardian or are otherwise authorized to do so.
Compass Care is not directed to children, and we do not knowingly allow anyone under 18 to create their own account. We collect information about a minor only at the direction of an authorizing adult, and only as necessary to provide care coordination. By entering a minor’s information, you affirm that you are legally authorized to do so under the laws of your jurisdiction. If we learn that a person under 18 has created an account without authorization, we will delete that account. To review, update, or request deletion of a minor’s information, contact us.
3. Personal Information We Collect and How We Collect It
The personal information we collect depends on how you use Compass Care. Almost all of it is information you choose to enter about yourself and the people you care for. The categories we collect are set out below.
| Category | What it includes | Collected |
|---|---|---|
| Identifiers | Name of you and each care recipient, email address, account UUID, OAuth profile (Google/Apple), session tokens, and similar identifiers. | Yes |
| Account credentials | Password (stored only as a one-way bcrypt hash by our authentication provider). | Yes |
| Contact information | Emergency contact names and phone numbers, and provider or pharmacy phone numbers you save. | Yes |
| Demographic information | Date of birth of you and care recipients. | Yes |
| Health information | Medications (drug, dosage, prescriber, pharmacy, refill dates, schedule), immunizations, appointments, blood type, allergies, and free-text medical notes for you and your care recipients. | Yes |
| Documents and files | Files you upload to the Vault and their metadata (title, category, file name, type, issue and expiry dates, notes), including identity, medical, legal, financial, insurance, and education documents. | Yes |
| Photos and images | Profile photos of people in your circle and document images you capture for the AI Scan feature (for example, prescription bottles or insurance cards). | Yes |
| Precise geolocation | GPS latitude and longitude captured only when you trigger a Crisis SOS alert. | Yes |
| Approximate location / search text | Free-text place queries used for appointment and task location autocomplete, sent anonymously to a mapping service. | Yes |
| User content | Tasks and reminders, family or circle membership and permissions, onboarding quiz answers, Compass Score snapshots, crisis progress and alerts, and notification preferences. | Yes |
| Subscription information | Your plan status (free or Plus). Real billing is not yet active; when added, purchase records will apply. | Yes |
| Internet and device activity | IP address and request logs automatically collected by our backend infrastructure. | Yes |
| Biometric information | We do not collect biometric identifiers. Profile and document photos are stored as images and are not used to create faceprints or other biometric templates. | No |
| Professional or employment information | Compass Care is a direct-to-consumer app and does not collect employment or professional records. | No |
| Tracking / advertising identifiers | We use no advertising SDKs, no cross-app or cross-site tracking, and no data brokers. | No |
We collect this information:
- Directly from you, when you register, enter information about yourself and your care recipients, upload documents, capture images, or use any feature of the app.
- Automatically, in the form of IP address and request logs collected by our backend infrastructure when your app communicates with our servers.
How storage works. When the app runs in its local-only configuration, your information stays on your device and nothing leaves it except calls to the AI features described below. When the app is connected to our cloud backend, your information is stored and synchronized through that backend so it is available across your devices and to the people you invite to your circle.
4. How We Use Your Personal Information
We use your personal information to operate Compass Care and provide the features you ask for. Specifically, we use it:
- To create and support your account and authenticate you.
- To store, organize, and synchronize the documents, health information, contacts, tasks, and other content you enter.
- To generate your Compass Score and readiness snapshots from the completeness of your health and document information.
- To power AI features, including generating a crisis readiness plan and reading documents you scan.
- To deliver circle invitations and the notifications and reminders you turn on, such as refill, appointment, expiration, and task alerts.
- To show your emergency location and coordinate a response when you trigger a Crisis SOS alert.
- To maintain the security of the app, prevent fraud and abuse, and debug and improve functionality.
- To comply with our legal obligations.
We do not sell your personal information for money or other valuable consideration, and we do not use it for advertising, marketing profiling, or cross-app tracking.
5. Who We Share Your Information With
We do not sell your personal information and we do not share it for advertising. We share it only with the service providers needed to run the app, and only to the extent each provider requires to perform its function. The services that receive data are listed below.
| Service | What is sent | Purpose |
|---|---|---|
| Supabase (our backend service provider) | Substantially all data you enter, for authentication, sync, and storage. | App functionality, authentication, data synchronization, and storage. Acts as our processor, not an independent third party. |
| Anthropic (Claude API) | For Crisis plans: name, blood type, allergies, medications, insurance document titles, appointments, and emergency contact. For AI Scan: the document image you capture. | To generate your crisis readiness plan and to read scanned documents. Data sent to this service is not used to train AI models and is not retained by the provider after the request is processed. |
| Resend (email delivery, via our backend) | The invitee email address, invite code, and care-focus label. | To send circle-invitation emails on your behalf. |
| OpenStreetMap Nominatim | The free-text location query only, sent anonymously with no account information. | Location autocomplete for appointments and tasks. |
| Google Maps | A link containing GPS coordinates, opened only if you tap it within a crisis alert. | To display an emergency location in your map application. No data is sent through an API or key. |
We may also disclose personal information when required to comply with the law, to enforce our terms, or to protect the rights, property, or safety of Compass Care, our users, or others. Because some of this information includes health data, we treat our AI and backend providers as processors and pursue appropriate data protection terms with them.
6. Your Rights and Choices
Depending on where you live, including states such as California, Colorado, Connecticut, Texas, Virginia, and others, you may have some or all of the following rights regarding your personal information:
- Right to know what personal information we have collected about you and how we use it.
- Right to access and obtain a portable copy of your information.
- Right to correct inaccuracies in your information.
- Right to delete the personal information we have collected from you, subject to limited exceptions.
- Right to limit the use and disclosure of sensitive information; we use sensitive information, including health data, only to provide the app to you.
- Right not to be discriminated against for exercising any of these rights.
Because most of your information is stored in your account, you can review, edit, and delete much of it directly within the app, including people, documents, health records, tasks, and circle members. To make any other request, contact us using the information below. We will verify your identity before fulfilling a request, and may decline where the law allows, such as where we must retain information for security or legal reasons. We respond within the timeframes required by applicable law.
7. How We Protect Your Information
We have implemented reasonable measures designed to protect your personal information. These include encrypted transmission, row-level security and per-category permissions in our backend, access controls that limit what each member of your circle can see, and storage of passwords only as one-way hashes. You control who joins your circle and what each member is permitted to view.
No system is perfectly secure, and we cannot guarantee absolute security. The safety of your information also depends on you: keep your password confidential, do not share your account credentials, and be thoughtful about whom you invite into your circle and the permissions you grant them.
8. How We Use Artificial Intelligence
Two features use AI. The Crisis plan feature sends relevant emergency information, such as your name, blood type, allergies, medications, insurance document titles, appointments, and emergency contact, to our AI provider to generate a readiness plan. The AI Scan feature sends an image of a document you capture so the AI can read it and help fill in your records.
Data sent to our AI provider for these features is not used to train AI models and is not retained by the provider after your request is processed. AI Scan runs only when you choose to scan, and you can always enter information manually instead.
9. How Long We Keep Your Information
We keep your personal information for as long as your account is active and as needed to provide Compass Care, and afterward only as required to meet legal, security, or recordkeeping obligations. When you delete content in the app, or delete your account, we delete the associated information from our active systems, recognizing that removal from routine backups may take additional time. Information sent to our AI provider is not retained by that provider after the request is processed.
10. Where Your Information Is Processed
Compass Care is operated from the United States, and your personal information is processed and stored in the United States. If you use the app from outside the United States, you understand that your information will be transferred to and processed in the United States, where privacy laws may differ from those in your location.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. If we make material changes to how we handle your personal information, we will notify you within the app or by email to the address associated with your account. The date at the top of this policy shows when it was last revised. Your continued use of Compass Care after a change takes effect means you accept the updated policy.
12. Contact Us
If you have questions or concerns about this Privacy Policy, or if you wish to exercise any of your privacy rights, please contact us at:
P2 Reserve LLC
Email: privacy@usecompasscare.com
Website: usecompasscare.com
