Last updated: 5 August 2026
This policy explains how SweetTree Connect ("we", "us") handles personal data in connection with our public website (www.sweettreeconnect.com) and the Sweettree Carer and STC Related Person mobile applications and related services. Sweettree Carer is a professional tool for authorised care staff; STC Related Person is for authorised family members and representatives of individuals receiving care. Neither app is intended for use by members of the public, and accounts for both are provisioned by SweetTree Connect.
SweetTree Connect provides the technology that supports home-care delivery. Care records processed through the app are managed on behalf of the care provider responsible for the individuals receiving care. Depending on the data concerned, SweetTree Connect acts as a data processor and, for certain product data, as a joint controller with the care provider. For any privacy query, contact privacy@sweettreeconnect.com.
To provide the app's core function — enabling authorised carers to record outcomes and receive alerts during care delivery — and to keep the service secure. The lawful basis is the performance of the care provider's tasks and our legitimate interest in operating a secure, reliable service; special-category (health) data is processed under the conditions applicable to the provision of health and social care.
We share data only as necessary to run the service: with our infrastructure providers (including Google Cloud / Firebase) acting as processors under contract, and with the care provider responsible for the relevant care. We do not sell personal data and do not use it for advertising.
Personal data is retained for as long as needed to provide the service and to meet the care provider's legal and record-keeping obligations, after which it is deleted or anonymised.
Data is encrypted in transit (HTTPS/TLS) and access is restricted to authorised, authenticated users. We apply technical and organisational measures appropriate to the sensitivity of the data.
www.sweettreeconnect.com is a static, informational site. It has no user accounts and no forms, and we do not use it to profile or track visitors. When you visit, our hosting provider (Google Firebase Hosting, acting as our processor) produces short-lived technical logs — such as your IP address and the page requested — used only to serve the site and keep it secure. Some pages embed videos hosted by Vimeo; these are configured in Vimeo's "Do Not Track" mode, so playing a video connects your browser to Vimeo but does not set tracking cookies. Vimeo's own privacy policy applies to that connection.
We count page visits in aggregate using a cookie-free method: when a page loads, your browser sends us the page address and the referring page, and on our server we derive a short-lived anonymous identifier from your IP address and browser type (a keyed hash that cannot be reversed and changes every day) solely to estimate how many distinct visitors we have. Nothing is stored on your device, no identifier persists beyond a day, and the resulting statistics are aggregate visit counts only.
This website sets no cookies — neither our own nor third parties'. That is why you do not see a cookie consent banner: under the UK's Privacy and Electronic Communications Regulations (PECR), consent is only required for cookies that are not strictly necessary, and we use none at all. If we introduce cookies in the future, we will update this policy and, where the law requires it, ask for your consent first.
Under UK GDPR you may have the right to access, correct, or erase your personal data, to object to or restrict its processing, and to data portability. Requests relating to care records are directed to the responsible care provider; for account or app-related requests contact us at the address above. You may also complain to the Information Commissioner's Office (ICO).
We may update this policy from time to time; the "last updated" date above reflects the latest revision.
Note: this is a baseline policy provided to meet app-store and general transparency requirements. It should be reviewed and finalised with the care provider's Data Protection Officer / legal adviser before being relied upon.