Data Processing Addendum

Last reviewed: 2026-04-26 · Version: 2026-04-26

This DPA forms part of the agreement between you (the Account Owner) and CareBridger when CareBridger processes personal data on your behalf. It is offered to anyone whose use of CareBridger is subject to the EU GDPR, the UK GDPR, or comparable regimes.

Subject matter and duration

CareBridger processes personal data only to provide the family caregiving coordination service for the duration of your account. After deletion, data is purged on the schedule documented in our Privacy Policy and ADR-0024.

Subprocessors

The current list lives on the Subprocessorspage. We give 30 days’ notice of any new subprocessor by updating that page; account owners may object in writing to privacy@carebridger.com.

Data subject rights

Account owners can fulfil access, correction, deletion, and portability requests through the Account tab in the app. CareBridger will assist with any requests we cannot satisfy directly within the time bounds set by GDPR.

Security

Our security posture is summarised on the Securitypage and audited against ADR-0018 (secret management) and ADR-0020 (backups + DR).

Contact

Send DPA-related correspondence to privacy@carebridger.com.