Last updated 12 November 2026

Privacy policy

Care Cart helps you compare South African medical aid plans. This policy explains what we collect, why, and the choices you have, in line with the Protection of Personal Information Act (POPIA).

Who we are

Care Cart is operated by its operator (named here before accounts open). Our Information Officer is named here before accounts open. You can reach us at the contact details published here before accounts open.

Without an account

You can use Care Cart without signing in. Your family size, budget, income (if you enter it) and picks are kept on your phone only. If you share your location to find hospitals, distances are worked out on your phone; your location is never sent to us or stored.

With an account

• Sign-in: Apple or Google tells us your name and email address (Apple may give us a private relay address instead). We never see your password.
• Your answers: family size, budget, income if you entered it, what matters to you, and the plans you are comparing, so they follow you to other phones.
• Health needs, only if you say yes: in the Care Cart app you may connect Apple Health or Health Connect. Your health readings stay on your phone. With your explicit consent, only simple needs worked out from them are saved to your account: whether you take chronic medicine, broad condition groups (for example “diabetes”), whether you are expecting a baby, and a general activity level. We use these only to show which plans and benefits fit you.

What we never do

• We do not sell your information or share it for advertising.
• We do not use health data for marketing, and we do not share it with medical schemes, insurers or brokers.
• We do not store your health readings, medicine names or location.

Where it is kept

Account data is stored in South Africa, in Amazon Web Services' Cape Town region, encrypted at rest and in transit. Access is limited to the systems that run Care Cart.

Your rights

• See and download everything we hold: Account, Download my data.
• Stop sharing health needs at any time: Account, Health data, Stop sharing. What was shared is deleted.
• Delete your account and all its data: Account, Delete my account.
• Correct your information, object to processing, or complain to us at the contact details published here before accounts open, or to the Information Regulator (inforegulator.org.za).

How long we keep it

Until you delete your account. Encrypted backups are kept for up to 35 days and then removed.

Not advice

Care Cart shows information from schemes' published brochures. It is not financial advice and does not recommend a plan. Confirm details with the scheme or an accredited financial adviser before you join.