Draft — pending legal review
Data & Privacy
CareCircle handles sensitive, family-related information. This page summarizes the security and privacy principles we are building toward. It is not a substitute for our Privacy Policy or Terms of Service, both of which are also currently in draft form.
Family-level data isolation
Every CareCircle account is scoped to one family. Database-level access rules are designed so no family can read or modify another family's data.
You record it, we store it
Medication instructions and routines are recorded exactly as entered by you or your healthcare professional. CareCircle does not modify or interpret this information.
Data export
Account owners will be able to export their family's data, including routines, confirmations, measurements, and medication lists.
Account & member deletion
You will be able to remove a caregiver's access, or permanently delete an account and its associated data, at any time.
No regulatory compliance claims
CareCircle does not currently claim HIPAA, UK GDPR, PIPEDA, PHIPA, NHS, or other regulatory compliance. These principles guide our engineering decisions, but formal certification or independent assessment has not yet taken place.