Privacy Policy

This Privacy Policy describes how SMST Lifestyle Solutions ("we", "us", "our") collects, uses, and protects information in connection with the Micare desktop application and the website at getmicare.com (collectively, the "Service"). By using the Service you agree to the practices described in this policy.

Micare is developed and operated as a personal software project. We have designed it to collect as little data as possible. Most data never leaves your device.

1 Who we are

Data controller: SMST Lifestyle Solutions, Malaysia.
Contact: getmicare@getmicare.com

All references to "Micare", "the app", or "the Service" in this policy refer to the Micare desktop application and associated website operated by SMST Lifestyle Solutions.

2 Data we process on your device

The Micare app reads the following information locally on your device only. This data is never transmitted to our servers or any third party:

• System volume level and mute state — read every second to detect changes and display the volume overlay.
• Battery percentage and charging status — read periodically to display battery state.
• Currently playing media — title, artist, and playback state are read from the Windows media session API. Album art is written to your system's temporary folder (%TEMP%) using a content hash as the filename. These files are not actively deleted by Micare; they persist until your OS clears the temp folder in its normal operation.
• Trial start timestamp — the date of your first launch is stored locally in settings.json to manage your 40-day trial.
• App preferences — your colour, position, and display settings are saved locally to %APPDATA%\com.micare.app\settings.json.

3 Google Calendar integration

Connecting Google Calendar is entirely optional. If you choose to connect:

• We use OAuth 2.0 with PKCE (Proof Key for Code Exchange). Your Google password is never seen, stored, or transmitted by Micare.
• OAuth access and refresh tokens are stored exclusively in your Windows Credential Manager — a secure, encrypted, OS-level keystore. Micare has no server that stores these tokens.
• Calendar event data is fetched directly from Google's API to your local device. It is never sent to any Micare-controlled server.
• We request only the minimum necessary permissions: calendar.readonly (read events) and calendar.events (required by Google for read access to event details).
• You may disconnect at any time via Settings. Disconnecting immediately deletes all stored tokens from Windows Credential Manager.

Your Google data is governed by Google's Privacy Policy in addition to this policy.

4 Website & waitlist data

When you submit your email address on getmicare.com:

• Your email is transmitted via an encrypted Cloudflare Worker and stored in MailerLite, our email marketing platform, acting as our data processor.
• We use it solely to notify you about Micare's launch and related updates.
• We do not sell, share, or transfer your email address to any other party.
• You may unsubscribe at any time via the link in any email we send. On unsubscription your address is removed from our active list. You may also email us to request permanent deletion.
• Retention: Email addresses are retained until you unsubscribe or request deletion. We will delete all waitlist data within 90 days of Micare's public launch.

MailerLite (data processor) is subject to its own Privacy Policy and is contractually bound to process data only on our instructions.

5 Legal basis for processing (GDPR)

If you are located in the European Economic Area, United Kingdom, or another jurisdiction with equivalent data protection law, we rely on the following legal bases:

• Contract performance — processing your trial timestamp and settings data to operate the app you have chosen to use.
• Legitimate interests — reading local system data (volume, battery, media) to deliver the core functionality of the app. This data never leaves your device.
• Consent — connecting Google Calendar. You may withdraw consent at any time by disconnecting in Settings.
• Consent — subscribing to the waitlist. You may withdraw at any time by unsubscribing.

6 Your rights

Depending on your jurisdiction, you may have the right to:

• Access — request a copy of personal data we hold about you.
• Correction — request we correct inaccurate data.
• Deletion — request we delete your personal data. For app data stored locally, you may delete it directly from your device at any time. For waitlist data, email us or unsubscribe.
• Objection / restriction — object to or request restriction of certain processing.
• Portability — request your data in a machine-readable format.
• Withdraw consent — for any consent-based processing, you may withdraw at any time without affecting lawfulness of prior processing.

To exercise any right, contact us at getmicare@getmicare.com. We will respond within 30 days. We may need to verify your identity before acting on a request.

If you are in Malaysia, you may also refer to the Personal Data Protection Act 2010 (PDPA) for your rights. If you are in the EU/EEA, you may lodge a complaint with your local supervisory authority.

7 Data retention

• App settings and trial data — stored locally on your device. Deleted when you uninstall the app or manually delete the app data folder.
• Google Calendar tokens — stored in Windows Credential Manager. Deleted immediately when you disconnect via Settings, or when you uninstall the app.
• Album art cache — written to your system temp folder. Not actively deleted by Micare; cleared by normal OS temp folder maintenance.
• Waitlist emails — retained until you unsubscribe or request deletion, or until 90 days after Micare's public launch, whichever comes first.

8 Children's privacy

Micare is not directed at children under the age of 13, or under the applicable age of digital consent in your jurisdiction. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at getmicare@getmicare.com and we will promptly delete it.

By using Micare, you represent that you are at least 13 years of age.

9 Third-party services

Micare integrates with or uses the following third-party services. Each is governed by its own privacy policy:

• Google Calendar API — Google Privacy Policy. Used only if you connect your calendar.
• MailerLite — MailerLite Privacy Policy. Used for the waitlist email list only.
• Cloudflare — Cloudflare Privacy Policy. Used for website hosting and as a proxy for email form submissions.

We do not integrate advertising networks, analytics platforms, or tracking SDKs of any kind in the Micare app.

10 Security

We take reasonable technical measures to protect data within our control. Google OAuth tokens are stored in the OS-level credential store, not in plain-text files. Data submitted via the waitlist form is transmitted over HTTPS. However, no system is perfectly secure. We cannot guarantee absolute security of data transmitted over the internet or stored on your local device.

11 What we never do

• We do not sell your data to anyone, ever.
• We do not display advertising of any kind.
• We do not embed analytics, telemetry, or crash-reporting SDKs in the app.
• We do not transmit your media, volume, battery, or calendar data to any server.
• We do not store your Google credentials — they live only in your OS keystore.
• We do not use Google user data for any purpose other than displaying your calendar events in the app.
• We do not allow any person to read your Google data.

12 Governing law

This Privacy Policy is governed by and construed in accordance with the laws of Malaysia, including the Personal Data Protection Act 2010 (PDPA). Any disputes arising under this policy shall be subject to the exclusive jurisdiction of the courts of Malaysia.

Where required by applicable law in your jurisdiction (including GDPR for EU/EEA residents), additional rights and protections apply as described in Sections 5 and 6 above.

13 Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by an updated "Last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of the Service after changes are posted constitutes your acceptance of the updated policy.