Children's names, your spoken/typed observations, and any generated Learning Stories are stored only on your device, encrypted at rest using a key held in your device's secure hardware storage (iOS Keychain / Android Keystore). There is no CareVoice server and no account — nothing here syncs anywhere unless you explicitly copy it out (e.g. pasting a Learning Story into Storypark, OWNA, etc.).
Voice recordings and note text are sent to OpenAI's API to produce the transcription and to generate Learning Stories — this is the only third party your children's data is ever sent to. OpenAI processes this under its own API data-usage terms; CareVoice doesn't control or see how OpenAI stores it. The raw audio recording is deleted from your device immediately after transcription — only the resulting text is kept. If you submit feedback in the app's Settings screen, that message (and your email, only if you choose to include it so the developer can reply) is sent to Formspree, a third-party form service, and forwarded to the developer.
Observations are produced by AI transcription of your voice; Learning Stories are drafted by AI from your saved Observations, grounded in the EYLF learning framework. Both can contain mistakes. Every Observation and Learning Story is marked "Pending review" until you read it and tap Confirm — please always read AI-generated content carefully before relying on it or sharing it with families.
You can edit or delete any child, Observation, or Learning Story at any time from within the app. Deleting a child also deletes everything recorded for them. Uninstalling the app removes all of it, since nothing is kept anywhere else.
CareVoice is built with the intent to comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. This page is a plain-language draft written by the developer, not a substitute for legal advice — it will be reviewed by a qualified professional before any paid public release.