Privacy Policy

SARA Elderly Care · Operated by Zenara Jaya · Effective 24 July 2026

SARA Elderly Care ("the App") is an elderly-care management platform operated by Zenara Jaya ("we", "us"). It is used by registered care facilities and their staff (administrators, doctors, nurses, supervisors) and by guardians of residents. This policy explains what information we collect, how we use it, and the choices you have.

1. Information we collect

• Account information — name, email address, phone number, identity card (IC) number, home address, professional details (e.g. medical license number, department, specialization), and account credentials (passwords are stored only as secure hashes).
• Resident (elder) care information — entered by facility staff and guardians to provide care: name, age, gender, room, medical conditions, medications, vital signs, daily care logs, appointments, and emergency contacts.
• Photos — care photos and payment receipt images uploaded by users.
• Billing information — invoices, payment records, and uploaded transfer receipts. We do not collect or store card numbers.
• Device information — a push-notification token (Firebase Cloud Messaging) so the App can deliver alerts to your device.

2. How we use information

• To operate the care-management service: resident records, schedules, medication and vitals tracking, appointments, and staff coordination.
• To send notifications about approvals, assignments, appointments, and payments.
• To manage facility billing and verify payments.
• To secure the service, verify accounts, and prevent misuse.

3. Sharing

We do not sell personal data. Information is shared only with:

• Your care facility — staff and authorized guardians see the resident information relevant to their role.
• Service providers that host and operate the platform on our behalf: cloud hosting and database services, Cloudflare R2 (image and document storage), and Google Firebase (push notifications and authentication support).
• Authorities where required by law.

4. Security

Data is transmitted over HTTPS, passwords are stored using industry-standard hashing (bcrypt), and access is restricted by role-based permissions. Photos, care records and receipts are held in private storage and are never publicly accessible: each image is served through a temporary link that expires. No method of storage is 100% secure, but we work to protect your information using appropriate technical measures.

5. Data retention & deletion

Account and care records are retained while the facility's service is active. You may request access to, correction of, or deletion of your personal data by contacting us at the address below; account deletion requests are honoured within 30 days, subject to legal record keeping requirements of the care facility.

6. Children

The App is intended for use by adults (facility staff and guardians aged 18+). It is not directed at children and we do not knowingly collect personal information from children.

7. Changes

We may update this policy from time to time. Material changes will be announced in the App or on this page, with the effective date updated above.

8. Contact us