Privacy Policy

Information we collect

We collect account details such as name and email address, care-circle membership, role and permission settings, invite status, and the care information you choose to enter or upload. That may include medications, vitals, meals, appointments, tasks, notes, contacts, documents, planning information, and communication-channel links such as Telegram identities.

On public pages, we may collect limited analytics such as traffic source, campaign labels, public page visited, and general device, browser, and location information. We do not send care-circle content, names, email addresses, invite links, auth tokens, or authenticated care activity to analytics.

How we use information

We use information to provide the app: authenticating accounts, enforcing circle permissions, showing the right care history to the right people, sending invites and reminders, processing billing, maintaining security, supporting the service, and understanding how people find and use our public pages. We do not and will not sell personal or health information.

Sharing and access

Care information is shared only with the members of a care circle according to the permissions set for that circle. We use service providers for hosting, database, authentication, email delivery, payments, error monitoring, limited public-page analytics, and messaging delivery. They process information only as needed to operate Eldercare Log.

Your choices

You can update profile details, leave circles, and change notification preferences in the app. The care recipient or a circle admin can open Account settings to download a personal export (JSON plus vault files), delete that circle’s care data while leaving an empty circle so members can still sign in, or delete their own account. Account deletion on a shared circle waits until that care data is wiped. A care-data wipe removes medications and logs, updates, calendar, health and diet, allergies, documents, and vault files. The empty circle and memberships stay. Billing continues after a wipe. Wipe is allowed while Stripe billing is live and does not cancel Stripe — the empty circle may remain a paid circle. Marketing and first-week leads are out of the wipe, and lifecycle audit events are kept. Backups and operational logs may retain a copy for a limited operations window. This is not a HIPAA claim. Account delete and circle teardown still require a canceled plan. If a sole-member circle still has live Stripe billing, cancel the plan first from Circle settings. Other roles do not see those destructive controls. Circle admins can manage membership and permissions. To ask for access, correction, export, or deletion help, email help@eldercarelog.com.

Retention and security

We keep information while an account or care circle is active and as needed for legal, security, or operational reasons. The app uses row-level security, role-based permissions, encrypted transport, protected document storage, and production monitoring designed to avoid exposing care details.