Privacy policy

CarePal is invite only right now. While you're on the waitlist, we collect very little:

• Your phone number, and a record of when and where you agreed to get texts from CarePal.
• That you texted CarePal (like "hey CarePal"), and CarePal's one reply. CarePal doesn't save, answer or act on what you text while you wait, and no AI reads it. Your texts still pass through Photon and Apple, which carry CarePal's iMessages.
• Basic technical data from the website, like a scrambled (hashed) version of your IP address and a bot check, so we can stop spam sign-ups. We don't keep your IP address itself.
• If you text STOP, a record that you opted out, so we never text you again.

We use this only to keep your place on the list and to text you when a spot opens. When it does, CarePal asks for your full name on a sign-up page. Everything below applies once you're in.

• Account and messages: your name, phone number, the messages you send CarePal and CarePal's replies, and voice notes you send (which are turned into text).
• Bank data (if you connect a bank): your accounts, balances and transactions, read through Plaid. We never see your bank password. CarePal uses this for things like spotting charges to dispute, finding subscriptions, tracking spending and budgets, and running the money workflows you set up.
• Credit and loans (if you connect your credit): your credit report, credit score and loan details, through Spinwheel, with a soft pull that doesn't affect your score. To connect, you confirm your identity on our secure page (for example, your date of birth and a code we text you, or your Social Security number). CarePal keeps a history of your recent reports so it can spot changes.
• Loan and card offers (only if you ask): to get personalized loan offers, CarePal shares the details shown on our secure offers page (like your name, contact details, address, date of birth, Social Security number, income and what the loan is for) with Engine by MoneyLion, only after you review them and agree on that page. Card offers can be shown without sharing anything about you.
• Payments (if you turn them on): to move money, you verify your identity with Dwolla on our secure page. Your Social Security number and date of birth go straight to Dwolla; we don't keep them. We keep a record of the payments you approve, and of the bank accounts used for them.
• People you pay or request money from: the name and contact details you give us for them, and the payment details, used only to make that payment or request.
• Email and calendar (if you connect them): your Gmail and Google Calendar, as described in the next section, or Microsoft Outlook if you connect that instead.
• Your CarePal email address: emails CarePal sends and receives for you, like bills you forward or a reply from a company.
• What CarePal does for you: the disputes, cancellations, claims and other tasks CarePal works on, the messages it sends companies, evidence and outcomes, so you can see everything it did.
• Health documents you choose to send: a bill, itemized bill, EOB or receipt you attach for a current review. We use the file only to answer that request. CarePal does not put health details into long-term memory or send them to a provider or insurer unless you explicitly approve a specific message.
• Things you tell CarePal: short facts CarePal remembers to help you, like your internet provider or an important date.
• Saved website logins (only if you choose to save one): typed on our secure page and stored encrypted, so CarePal can sign back in to that site for you. The AI never sees them.
• Basic technical data: error logs and usage counts that keep the service working and secure.

If you connect Google, the connection is made through Composio, a service that handles sign-in to Google for apps like CarePal. Google's permission screen will show Composio's name. You choose what to allow on that screen. Composio keeps the keys that let CarePal reach your Google account, and CarePal's requests to Gmail and Calendar go through Composio. CarePal never sees your Google password. CarePal asks for:

• Read your email to spot bills, receipts, renewals, price increases and replies from companies, so CarePal can act on them (for example, flagging a bill that went up, or matching a company's reply to the dispute it belongs to).
• Send email from your account, only when you've approved that message (or told CarePal it may send that kind of message on its own).
• See and add calendar events to keep due dates and deadlines straight. CarePal reads the titles and times of events on your main calendar and adds new events, such as bill due dates. It never edits or deletes your existing events, never invites anyone, and never changes your calendar's sharing.

CarePal reads only what it needs for the task. For most email that's the sender, subject and a short preview. For bills, order receipts and travel bookings it reads the full message, because that's where the amounts and order numbers are (for example, to spot a price drop you can get refunded). To check whether you might be part of a class-action settlement, it can look at which companies have emailed you in the past three years (sender names only).

What we keep from Google, and for how long. We keep your Google email address; Gmail message IDs and your inbox position, so each email is handled only once; and the specific facts that become part of your tasks, like a confirmation number, a bill amount or an order total. From emails about your household's bills, memberships and services, CarePal remembers short facts (for example, "internet provider: Rogers"), each with the email it came from, and keeps a short cleaned excerpt of that email for up to 90 days so it can answer your later questions. Codes, passwords and card or account numbers are masked before anything is kept. We don't keep copies of your inbox or your calendar. Calendar events are used for the task in front of CarePal and then discarded.

Some email text (such as a subject line and short preview, or the body of a receipt) is sent to AI model providers, only to carry out your request. We route these requests only to providers that don't store or train on the data. Instructions written inside an email are never followed.

CarePal's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. The use of information received from Google Workspace APIs will adhere to the Google Workspace API User Data and Developer Policy, including the Limited Use requirements. This applies to Google data CarePal receives through Composio too.

• We use Google data only to provide and improve the CarePal features you can see and use. Improving never means training AI models on it.
• We share Google data with others only to provide those features (for example, with Composio and our AI model providers), for security, to comply with the law, or as part of a merger or sale of CarePal, and we'd tell you first.
• We never use Google data for advertising, and we never sell it.
• We never use Google data to decide creditworthiness or to make lending decisions, or to help anyone else do so. Your Gmail and Calendar data isn't used for CarePal's credit features or shared with Engine by MoneyLion or lenders.
• No person at CarePal reads your Google data unless you've asked us to look at specific messages (for example, to help with a problem), it's needed to investigate security issues or abuse, or the law requires it.
• You can disconnect anytime: text CarePal "disconnect Google", or remove access in your Google account settings. Disconnecting through CarePal cancels access at Google and removes the connection at Composio, so CarePal can no longer read your email, send email or see your calendar. It also deletes what CarePal got from your Google account: the facts it learned from Gmail and their excerpts, money finds from Gmail you haven't started, flight bookings it read from your email, price watches set up from your receipts, your saved Google address, and dates it suggested from Gmail or your calendar that you didn't confirm. If you remove access in Google's settings instead, CarePal stops reading right away; disconnect through CarePal too (or email us) to have that data deleted. Tasks you've started keep their history (like a confirmation number) so you can see what CarePal did. To delete those too, text CarePal "delete my data" (this deletes your whole account), or email privacy@getmotis.com to delete only what came from Google, and we'll do it within 30 days.

• To do what you ask, and what you've allowed CarePal to do on its own: disputes, subscriptions, fees, finding money you're owed, credit alerts, spending and budgets, workflows and everyday asks.
• To ask for your approval before anything that commits you, and before every payment or transfer.
• To keep a complete record of what CarePal did for you.
• To prevent fraud, keep accounts secure and fix problems.
• To meet legal obligations.

We don't sell your data or share it with advertisers. We don't use your bank, credit, email or message data to train AI models.

CarePal may earn a referral fee from Engine by MoneyLion if you take a loan or get a card through an offer CarePal shows you. That can affect which offers appear and their order. CarePal only shows an offer when its own math, using your debts, says it could save you money, and it shows you that math. We don't share your data with Engine by MoneyLion unless you ask for personalized loan offers and agree on the offers page.

We share data only with service providers that help run CarePal, each limited to what its job needs:

• Photon (sends and receives CarePal's iMessages) and Apple (iMessage, and notifications in the CarePal iPhone app)
• Plaid (bank connections), Spinwheel (credit report and loans) and Dwolla (payments and transfers)
• Engine by MoneyLion and its lending partners (loan offers), only when you ask for them and agree
• Composio and Google (Gmail and Google Calendar), or Microsoft (Outlook), when you connect them
• AgentMail (your CarePal email address) and Kernel (the cloud web browser CarePal uses to visit websites for you)
• AI model providers, reached through OpenRouter, which process messages to understand them and write replies, and aren't allowed to store or train on your data
• Vercel (hosting and bot checks), Neon (database) and Sentry (error monitoring)

Companies, websites and people CarePal contacts for you (like a store you're disputing a charge with, or a friend you're paying) receive only what's needed for that request. We may also share data if the law requires it, to protect people's safety, or as part of a merger or sale of CarePal, in which case we'd tell you first.

Sensitive keys (like bank access) and saved logins are encrypted. Sensitive details like your Social Security number are typed only on our secure pages, never in chat. Every action CarePal takes is logged in a tamper-evident record, and money never moves without your approval. Data travels only over encrypted connections, and only a small number of staff accounts, protected by two-factor sign-in, can reach production systems.

We keep your data while you're on the waitlist or have an account, and delete it when you ask (see below). Some records stay even after you delete your account, because the law requires them or because they prove what happened: payment records, consent records (like your agreement to a credit pull or to get texts), the opt-out list, and the tamper-evident log of what CarePal did.

• On the waitlist: text STOP to stop all messages. CarePal doesn't reply to texts while you wait, so to have your number deleted, email us.
• See what CarePal knows about you, or get a copy: text CarePal or email us.
• Delete your data: text CarePal "delete my data" or email us. We delete it within 30 days, except the records described above. Deleting your data also deletes everything CarePal remembers about you, disconnects every account you connected and deletes your CarePal email address.
• Disconnect any account (bank, credit, Google and others) at any time: text CarePal, or email us.
• Turn off credit alerts or any other alert by texting CarePal, and stop all messages anytime by texting STOP.

CarePal is only for adults. We don't knowingly collect data from anyone under 18. If you think a child has signed up, email us and we'll delete it.

We'll update this policy as CarePal changes, and we'll change the date at the top when we do. If a change is significant, we'll tell you before it takes effect.

Questions or requests: privacy@getmotis.com.