Tevardo Privacy Policy

Last updated: 10 June 2026

Tevardo is a family caregiving app: it helps a family know that a loved one — typically an older person living alone — is doing well, and alerts family members if something may be wrong. We handle personal data, including health-related data, with the greatest care and only for this purpose. This policy explains what we collect, why, and what rights you have.

1. Data controller

The data controller is Tevardo. For any privacy request, contact privacy@tevardo.com.

2. Two roles, two experiences

• Cared-for person: the person being looked after. Their phone and Apple Watch detect signs of activity.
• Caregiver: family members who belong to the "circle" and see the status and receive alerts.

The cared-for person explicitly chooses what to share and can change their mind at any time.

3. Data we collect

• Activity and health data (from the cared-for person, via Apple Health / HealthKit, with consent): heart rate, steps and movement, and whether the watch is being worn. Used only to understand whether the person is active and well.
• Device status: battery level of phone and watch, device type, time of last activity.
• Caregiver account data: name and email provided via sign-in (Apple, Google or email), and an account identifier.
• Alert contacts: phone numbers the organizer adds to the "escalation chain", used to send SMS alerts.
• Notification token: the identifier needed to send push notifications to the caregiver's phone.
• Events and alerts: statuses ("all good", alarms) and acknowledgements generated by the app.

Tevardo does not collect location/GPS, does not access photos, contacts or messages, and does not use advertising identifiers.

4. Health data (HealthKit)

Data read from Apple Health (HealthKit) is used solely for the family caregiving function described above. Specifically:

• health data is never used for advertising or marketing;
• it is not sold or shared with third parties for marketing purposes;
• it is shared only with circle members the cared-for person has authorized;
• Tevardo does not implement fall detection: for emergencies, Apple's native features and the device's emergency contacts are used.

5. Why we process this data (purpose and legal basis)

• Purpose: to quietly monitor the cared-for person's wellbeing and notify family members in case of prolonged inactivity or a missed morning check-in.
• Legal basis (GDPR): the cared-for person's explicit consent for health data (Art. 9), and performance of the requested service for account data. Consent can be withdrawn at any time by closing or uninstalling the app.

6. Where and how long we keep data

Data is stored on Amazon Web Services in the Milan region (eu-south-1), within the European Union. Events (heartbeats, statuses, alerts) are kept for at most 90 days and then automatically deleted. Account and circle data is kept while the account is active or until you request deletion.

7. Who we share data with

A cared-for person's data is visible only to members of their circle (the invited family members). We use technical providers ("processors") acting on our behalf: Amazon Web Services (hosting and notifications) and Apple (push notifications and sign-in). We do not sell your data and do not share it with third parties for advertising.

8. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict, object to, and port your data. To exercise them, write to privacy@tevardo.com. You also have the right to lodge a complaint with a supervisory authority (in Italy, the Garante per la protezione dei dati personali).

9. Security

Data is transmitted over encrypted connections (HTTPS) and stored on services that apply encryption at rest. Sensitive credentials are kept in the device Keychain and in backend secret managers; we do not embed secrets in the app's code.

10. Children

Tevardo is not intended for children under 13 and does not knowingly collect their data.

11. Website cookies and analytics

This section applies only to the tevardo.com website, not the app.

• The website uses no profiling or advertising cookies.
• With your explicit consent (the banner shown on your first visit) we use Google Analytics 4 for aggregate visit statistics (page views, referrers, device type), with IP anonymisation. Until you consent, no analytics script is loaded and no cookie is set.
• The provider is Google Ireland Ltd.; details on Google's processing are available at policies.google.com/privacy. Data may be transferred outside the EU under the safeguards provided by Google (standard contractual clauses / EU-U.S. Data Privacy Framework).
• You can change your mind at any time via the “Cookie” link in the website footer, which reopens the choice.

12. Changes to this policy

We may update this policy. The updated version will be published at this address with a new date. Material changes will be communicated in the app where appropriate.

13. Contact

For any privacy questions: privacy@tevardo.com.