Privacy policy

Last updated: November 7, 2026

This policy explains how My Procare Images at myprocareimages.com handles information when you connect your Procare account, browse photos and videos, or download them. “We” means the operator of My Procare Images.

My Procare Images is an independent tool and is not affiliated with, endorsed by, or sponsored by Procare in any way.

Your Procare login

When you sign in, your email address and password pass over HTTPS through our Cloudflare-hosted service to Procare for authentication. We do not save your password in our database or browser local storage, and the app clears the password field after the sign-in attempt. Your own browser or password manager may offer to save it separately.

If Procare asks for verification, we pass your chosen method and verification code to Procare. We temporarily store an encrypted verification challenge, which stops working after ten minutes. An expired challenge record can remain until it is replaced, sign-in completes, or you end that app session.

Your saved session

After authentication, we store your Procare access token and related authentication cookies encrypted on Cloudflare. Our server uses them to request information on your behalf. The app does not put your Procare access token or password in browser local storage.

Your browser receives a separate, random app-session cookie. It is marked Secure, HttpOnly, and SameSite=Strict. It identifies your private app session and is configured to last up to 400 days; browsers may shorten this. Procare can expire or revoke its session sooner, so saved access is not guaranteed for that length of time.

We also keep the students Procare authorizes you to access, sign-in attempt counts and times for rate limiting, and download-job information used for progress and retries. There is currently no automatic age-based deletion of these server records. Cookie expiration or clearing your browser cookies does not itself delete the server records.

Student information and the photo catalogue

We receive student names, identifiers, profile-image links, and photo information from your authorized Procare account. Cached photo information can include photo identifiers, dates, captions, media type, video and original image links, thumbnail links, and the source activity needed to refresh those links. These links can be sensitive, even when the photo file itself is not stored.

We save this catalogue on Cloudflare so returning visits can show saved history immediately while updates run in the background. Sessions with the same authorized student roster can reuse a shared student catalogue. Access is checked against the students returned by Procare; this is not a public photo gallery. Login credentials and download jobs are kept in separate private app sessions.

Catalogue records persist across sign-ins and do not currently have an automatic expiration period. A completed verification scan may remove stale entries. Ending an app session does not delete the shared catalogue; contact us to request its deletion.

Viewing and downloading photos

When you view or download a photo or video, our service fetches it from Procare or its image providers and streams it to your browser. Our photo responses are marked private and no-store. Image and video bytes are processed in transit and in your browser; we do not permanently save image or video files on our servers. Videos stream into your browser’s native player, including range requests for seeking. Video files are not stored in the app’s IndexedDB cache; available video posters are cached as thumbnails.

ZIP archives are assembled in your browser. We retain download-job metadata such as the student, selected photo IDs, filename, filters, successful items, and failed items so you can retry failures. Hiding a download result does not delete its server metadata; starting a new export replaces the previous export set, and ending that app session deletes its private job records.

Files you save remain on your device until you delete them. We cannot remove those files or copies you share. We do not use your photos or videos for advertising or AI training, sell them, or publish them in our social sharing preview.

Information stored in your browser

The photo editor runs inside your browser. Crop, rotation, and adjustment settings are saved locally by photo identifier so you can resume editing in this browser. Edited copies are rendered and saved on your device; they are not uploaded to our servers or Procare. Editing does not change the Procare original.

We use browser local storage to remember your selected student, page, dates, filters, layout, sorting, which photos the app has successfully transferred, and favorites saved as student and photo identifiers. Favorites can include photos from any student you can access and stay in this browser; they do not sync to other devices. Download markers are local app history, not a complete record of everything downloaded through Procare or another device. Temporary download state and a service worker support browser downloads.

We also use IndexedDB in your browser to cache photo identifiers, dates, captions, student names and identifiers, and thumbnail images. This lets filtering, sorting, date albums, and pagination run on your device and reduces repeat requests to Cloudflare. The app checks for catalogue updates after thirty minutes of active use; you can also rescan manually. The thumbnail cache is limited to 50 MiB or 300 images, whichever comes first, and older thumbnails are removed as needed. Thumbnail images are refreshed after seven days and student avatars after one day. A small cache of recently opened originals stays in page memory, limited to three images or 30 MiB; those originals are not saved to IndexedDB. Browser caches contain personal information and are not encrypted by the app. Use a device and browser profile you trust.

You can remove this browser data through your browser’s site-data settings. Ending a session does not automatically clear local preferences, download markers, catalogues, or cached thumbnails. Clearing browser data also does not delete our server catalogue or files already saved to your device.

Providers, security, and support messages

Cloudflare hosts the app and its stored session and catalogue data. Procare and its image providers supply authentication and account content. These services receive the information needed to perform those functions, and may process technical request information such as IP addresses, browser information, timestamps, and security events under their own policies. Processing can occur outside your country.

We use HTTPS, encrypted saved authentication data, and session-based access controls. These measures reduce risk but cannot guarantee that internet transmission or storage is completely secure. Our app does not intentionally log passwords, access tokens, or verification codes.

Please do not email passwords, verification codes, session tokens, or children’s photos.

See Cloudflare’s privacy policy, Procare’s privacy notice, and Google’s privacy policy for their respective practices. We may disclose information when required by law or necessary to address abuse or protect the service.

Your choices and deletion requests

• Logout: removes the current private app session’s stored authentication, student, photo, and download-job records and clears its session cookie. It does not end sessions on other devices, revoke all Procare sessions, or delete the shared catalogue.
• Clear browser site data: removes local preferences, download markers, and cookies. This disconnects the browser without requesting deletion of server records.
• Request server-data deletion or access: email privacy@myprocareimages.com. We may need to verify your authority before locating or deleting private or shared student records. We will explain any information we cannot remove or must retain. We cannot delete Procare’s records or downloaded files on your device.

Depending on where you live, you may have additional rights to access, correct, delete, or restrict processing of your personal information. Contact us to make a request. Changes to the underlying school or Procare records should also be directed to your school or Procare.

Children’s information

This tool is intended for adult parents, guardians, and other adults with authorized Procare access. It processes children’s names, profile images, and photo and video information supplied through that access. Only connect accounts and download or share content you are authorized to use. Contact us if you believe children’s information has been accessed or used improperly.

Contact and updates

For privacy questions and deletion requests: privacy@myprocareimages.com. For help using the app: support@myprocareimages.com. For general questions: info@myprocareimages.com.

We will update this page and its date when our practices change. Review it before connecting your account if you want to check the current handling of your information.