Privacy Policy

Last updated: October 14, 2026

Oravio is a family caregiving coordination app operated by Midpoint Software Group, a brand of Emporia Delivery Express Corp. ("we," "us," or "our"). This Privacy Policy explains what information we collect, how we use it, and the choices you have. We take the privacy of caregiving information seriously and limit what we collect to what is genuinely needed to operate the service.

1. Information We Collect

Account information. When you create an account, we collect your email address and the name and optional relationship label you provide in your profile.

Care circle content. Oravio stores the information you and your circle members enter: medication details, appointment records, care team members, vitals readings, observations, care log entries, emergency information, uploaded documents, and chat messages. This information is private to your circle.

Usage data. We collect basic usage information (such as when you log in and which features you use) to operate and improve the service. We do not sell this data or use it for advertising.

Subscription and technical information. RevenueCat receives your Oravio account ID and purchase history to validate purchases, manage paid access, and provide subscription analytics. These records are linked to your account. Our hosting and billing providers also process technical information such as app and operating system versions and request logs to operate and protect the service. We do not use advertising identifiers.

2. How We Use Your Information

• To operate Oravio, including storing and synchronizing your care circle's information across devices
• To send transactional emails (such as circle invitations and account notices)
• To improve the app and troubleshoot issues
• To process subscription payments (handled by Apple in-app purchases on iOS and Google Play Billing on Android)

We do not use your caregiving data to train AI models. We do not sell your personal information to third parties. We do not display advertising in Oravio.

3. Health and Caregiving Data

Daily reminders. Optional daily medication-review reminders are scheduled on your phone at times you choose. Notifications contain a generic care-schedule prompt, not medication names or doses. Local notification records include account and care-circle identifiers and selected times. They are removed when you sign out or switch circles. Phone settings may delay or block delivery.

Label scanning. With your agreement before a photo scan, the label image, which may contain personal and health information, is sent through our processing service to Anthropic to extract text. Anthropic's standard API policy deletes inputs and outputs within 30 days, with exceptions such as longer retention for usage-policy enforcement or legal requirements. See Anthropic's retention policy. Review results against the original label before saving. Manual entry is available.

Oravio stores health-related information that you voluntarily enter, such as medication names, vitals readings, conditions listed in emergency info, and observations. This information is:

• Stored securely in your private care circle
• Accessible only to members you invite
• Processed by the service providers described below; shared with others through your care circle or an action you choose, such as exporting an emergency sheet
• Used to provide the care features you request, including storage, circle sharing, and optional label text extraction as described below

Oravio is not a HIPAA-covered entity and does not enter into Business Associate Agreements. Do not use Oravio as a system of record for clinical care.

4. Data Sharing

We share your information only in the following limited circumstances:

• Within your care circle. Information you enter is visible to other members of your circle.
• Service providers. We use Supabase (database and storage), Resend (transactional email), Anthropic (reads the medication label photo when you use the bottle-scan feature; photos are sent only when you scan), and RevenueCat (purchase validation, paid access, and subscription analytics). Apple and Google handle in-app payments and provide platform diagnostics when you enable their diagnostics sharing; their own privacy policies apply.
• Legal requirements. We may disclose information if required to do so by law or in response to valid legal process.

5. Data Storage and Security

Your data is stored in the United States on Supabase infrastructure. We use row-level security so that each care circle's data is logically isolated — authenticated database queries can only access data belonging to your own circles. Documents are stored in a private storage bucket accessible only to circle members.

No method of transmission or storage is 100% secure. We encourage you to use a strong, unique password for your Oravio account.

6. Your Choices and Rights

Access and correction. You can view and update your profile information within the app at any time.

Deletion. You can delete your account from Profile → Delete account. This permanently deletes your account and personal profile. Care circles you share with others are not deleted - they remain for the other members. Circles where you are the only member are deleted along with your account. Uploaded files belonging to a deleted circle are queued for removal from storage; failed removals are retried. Deleting your account does not cancel an Apple or Google subscription, which you manage in that store's subscription settings.

Data portability. To request a copy of your data, contact us at hello@oravio.me.

7. Children

Oravio is designed for adults coordinating care for family members and is intended for users 18 and older. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided personal information to us, contact us and we will delete it.

8. Changes to This Policy

We may update this policy from time to time. When we make material changes, we will update the "Last updated" date above. Continued use of Oravio after a change constitutes acceptance of the updated policy.