Privacy policy

Last updated: 13 September 2026

Who we are

Mary Care Group Ltd is a private limited company registered in England and Wales (company number 17212142). Registered office: 7 Spinney Close, Clitheroe, Lancashire, BB7 9WH. We operate the Mary Android app, the Mary Companion caregiver app, the Mary Care TV app, the Mary Care Watch app, and the marycare.co.uk website.

Contact: support@marycare.co.uk

What data the app collects

When a device is linked to a family account, Mary sends the following to Mary Care’s servers over an encrypted (HTTPS) connection, so caregivers can manage and support the device through the Mary Portal:

• Device identifier: the Android device ID, used to link this specific device to its care account and keep it in sync.
• Location: approximate and precise location, including in the background where enabled, so trusted caregivers can confirm the person being supported is safe and receive geofence (safe-zone) alerts. Location sharing is enabled on a consent basis.
• Contacts: names, phone numbers and assigned photos of contacts on the device, so caregivers can choose who appears on the home screen and who is called or messaged for help.
• Name and phone number: the person being supported’s name and device number.
• Installed apps: the list of apps on the device, so caregivers can choose which apps appear in Mary’s simplified launcher.
• Call information: numbers, names and timing of calls made or received in Mary, so caregivers can support the person’s calling.
• Crash logs and diagnostics: technical error reports and app version information, used only to fix problems and keep the app working.

The Mary Companion app (for caregivers)

Mary Companion is the caregiver’s phone app for the same account. Caregivers sign in with the Mary account provided when they join a family’s care team, and use it to set up and support the linked device through the Mary Portal. Through this app we collect:

• Account information: the caregiver’s name and email address, used to sign in and identify who is on the care team. Sign-in happens through the Mary Portal (including Google or Apple sign-in where offered).
• Care details you enter: the contacts (names and phone numbers), reminders, and care notes a caregiver adds for the person they support. This is sent to Mary Care’s servers so it can appear on the linked device and to other caregivers on the team.
• Safety incidents and responses: HELP and Safe Zone events, their times and available location context, caregiver acknowledgements, responding status, resolution reasons and notes, and notification delivery information. These records help authorised family members coordinate support and review what happened. Access to incidents, responses and location is controlled separately.
• Notification token: a device token used only to send the caregiver alerts about the person they support (for example, a HELP or Safe Zone alert).

The person’s status, location, calls and activity shown in the caregiver app are collected by their own linked device (described above) and shown to trusted caregivers, the caregiver app displays this information but does not collect it from the caregiver’s phone. Companion does not scan your photo library or read your own location, contacts, call history or messages. Photos and files you choose to share are described below.

Information you choose to share

Through Mary Companion and the Mary Portal, you can add Journal entries and comments, tasks, calendar events, support contacts and backup plans. This may include health or medication information you choose to enter. Access depends on household membership, the audience for the item and each member’s permissions. Sensitive backup-plan key details have separate access controls.

When you select a photo, take a photo using the camera, or attach a PDF, the selected content is uploaded for the sharing feature. Portal media features also store photos and audio files you choose to upload.

Sharing reports

If you report shared content, we store your concern, relevant content context and moderation decisions. Authorised platform reviewers use this information to investigate reports. Hidden-member preferences and posting restrictions help apply your preferences and the sharing rules.

The Mary Care TV app

Mary Care TV is an Android TV launcher that can be linked to the same family account. When linked, it sends the following to Mary Care’s servers over encrypted HTTPS or secure WebSocket connections:

• Device identifier: the Android device ID, used to link the television to the correct family account and deliver its layout.
• Installed-app information: package names, labels, icons and available channel options, so an authorised caregiver can choose what appears in the simplified TV launcher.
• Help and app interactions: Help requests and connection status, used to notify the authorised care team and keep the TV in sync.
• Remote-support screen images: Mary Care TV uses Android’s AccessibilityService API for optional remote support. During an authorised caregiver’s support session, screenshots are sent through Mary Care’s servers to that caregiver so they can understand the screen and help navigate Mary and other apps. Images may include the person’s name, family photos, installed app names and icons, and other content the person or their family creates, such as custom labels and reminders, including appointments or medication. Other information visible in an app may also appear. Mary Care TV captures the display; it does not read a photo library. Only the latest frame is temporarily held in the encrypted database; it is overwritten by the next frame and deleted when the support session ends.

Before opening Android Accessibility settings, the TV explains the screen information accessed, why it is sent and who receives it, and asks for agreement. Choosing “Not now” leaves the launcher usable without remote support. Screen images are sent only during remote support; linked-device sync, including the installed-app inventory described above, operates separately. Remote support does not access the microphone or camera. Secure or DRM-protected surfaces may prevent capture. Remote support can be switched off in Android Accessibility settings at any time.

Optional Home button protection: in versions that include this feature, the Mary Care TV accessibility service also notices when the Google TV or Android TV home screen opens and returns to Mary. Home protection uses the stock launcher's app and window names locally, without reading screen text or taking screenshots. These events are not saved or sent to Mary Care or anyone else. It works without an internet connection. There is one Mary Care TV switch in Android Accessibility settings, with separate explanation, agreement and controls for Home protection and remote support inside Mary. Choosing “Not now” leaves the selected feature off. Enabling Home protection does not enable remote support. You can turn each feature off separately in Carer settings, or disable the Android switch to stop both; TV settings and other apps remain accessible.

The Mary Care Watch app

Mary Care Watch is a Wear OS app linked to a Mary Care household. It displays the time, reminders and family help controls. It sends the following to Mary Care’s servers over HTTPS:

• Device and account identifiers: the watch’s Android device ID, device type and the identifier of the person it is paired to, used to register the watch, authenticate it and sync the correct household information.
• Help requests and reminder responses: HELP presses, their event identifiers and times, and whether a reminder was completed or postponed. These records are linked to the household so authorised caregivers can coordinate support. Responses to medication or appointment reminders can reveal health information.
• Optional activity: hourly step counts and active minutes, collected through Wear OS Health Services only after the wearer agrees and grants activity permission. These are shared with authorised family caregivers to support everyday wellbeing. Activity sharing can be declined and permission can be revoked in the watch’s settings.

The watch downloads the person’s name, family contact details, reminders, home safe-zone definition and settings from the household. It caches information on the device so previously received reminders and the home-area check can remain useful without a connection. It does not upload the watch’s address book, call history, photos or installed-app list.

Optional location: when the wearer opens “Where am I?” and grants location permission, the watch uses an approximate or precise location fix to compare with the saved home area. Outside that area, it may send coordinates to the device’s Android geocoding service to obtain a town or area name. That service is provided by the device’s system provider and handles the request under its own privacy terms. This version does not send the watch’s location to Mary Care’s servers, continuously track it in the background or attach it to a HELP request.

Optional calling: choosing to call family passes the configured family number to the watch’s calling app. A supported calling setup is required. Mary Care Watch does not record the call or upload call logs.

Mary Care Watch supports daily routines and family communication. It is not a medical device or an emergency service and does not automatically detect falls. You can request deletion of linked watch data using the data-deletion process or by contacting support@marycare.co.uk.

How your data is stored and used

This information is stored securely on Mary Care’s own servers, encrypted in transit, and is used only to provide the care and caregiver-portal features described above. Account and household information is kept to provide the service, including information shared without a linked device. The periods below apply to the specified records; deletion requests and any limited retention are explained on our data-deletion page. You can request deletion at any time, see Deleting your data.

How long we keep information

Our retention schedule distinguishes the following records. An unresolved incident or an active complaint, safeguarding matter or legal hold may require longer retention; those exceptions are reviewed. You can also request earlier deletion through our data-deletion page.

• Latest location: replaced by the next valid reading. Mary does not keep a routine route history by default. Location recorded as part of a safety incident follows that incident’s retention period.
• HELP events: 24 months from the event or its last repeated trigger. Safe Zone alerts: 90 days from the event or its last repeated trigger. Open incidents remain for review until resolved or cancelled. Other closed safety incidents are kept for 90 days after closure.
• Completed or expired reminders: 90 days. Active and repeating reminder definitions remain while needed to provide the reminders.
• Family notes and Journal entries: 12 months, subject to review where needed for an active matter. Attachments and comments follow their parent record.
• Sensitive setting audit records: 12 months.
• Support correspondence: 24 months after the case closes. Support screenshots and recordings are deleted within 30 days after closure.
• Backups: encrypted, with rolling 35-day retention. Deleted information in a backup is restricted from ordinary use and deletion decisions must be reapplied before a restored service is made available.
• Inactive accounts: a reminder after 12 months; suspension or scheduled deletion after 24 months, with notice.

Incident timelines, relevant location snapshots and delivery records follow the associated incident. Standalone notification and test-alert diagnostics are deleted after 30 days.

Companion saves the authorised incident view on the caregiver’s device to show the last confirmed information when offline. This saved view is refreshed when connected and cleared on sign-out or when the server reports that access is no longer permitted. Closed incidents are also hidden from this saved view after the 90-day period.

Resolved sharing reports are retained for 90 days after resolution. Open reports remain pending review. Backup plans remain until deleted or the associated supported-person profile is removed. An applicable deletion request can remove information earlier.

When you export a calendar item or share a file to another app, that app controls the exported copy. Later changes or deletion in Mary do not automatically update those copies. Temporary export files on your device are pruned when another file is prepared.

What we do not do

• We do not sell your personal data to anyone.
• We do not share your data with third parties for advertising.
• We do not use advertising SDKs or third-party analytics that profile you.
• Mary is not a medical device and is not a substitute for emergency services.

Third-party services

The home-screen weather widget fetches weather data from a public weather service using the device’s approximate location. No account or identifying information is sent with this request. Please refer to that provider’s privacy policy for full details.

Children’s privacy

Mary is not intended for use by children under 13. We do not knowingly collect data from children.

Your rights

Families can request access to the information held in their account, ask us to correct it, or request deletion, in line with UK data protection law. See Deleting your data, or contact support@marycare.co.uk. You can also manage the app’s access to contacts and location at any time in your Android device settings.

Changes to this policy

We may update this policy from time to time. The “last updated” date at the top of this page reflects the most recent revision.

Contact

If you have any questions about this Privacy Policy, please contact us at support@marycare.co.uk.