Data & Privacy
CareCircle handles sensitive, family-related information. This page summarizes the security and privacy principles CareCircle is built around. It is not a substitute for our Privacy Notice or Terms of Service, which take precedence.
Family-level data isolation
Every CareCircle account is scoped to one family. Database-level access rules are designed so no family can read or modify another family's data.
You record it, we store it
Medication instructions and routines are recorded exactly as entered by you or your healthcare professional. CareCircle does not modify or interpret this information.
Data export
Account owners can export their family's data at any time, including routines, confirmations, measurements, and medication lists.
Account & member deletion
You can remove a caregiver's access, leave a care circle, or permanently delete an account and its associated data, at any time.
No regulatory compliance claims
CareCircle does not currently claim HIPAA, UK GDPR, PIPEDA, PHIPA, NHS, or other regulatory compliance. These principles guide our engineering decisions, but formal certification or independent assessment has not yet taken place.