Privacy Policy

Account information: name, email address, password (stored only as a salted bcrypt hash), language and display preferences.

Family care information you or your invited household members enter: person profiles, medications, appointments, observations, documents, tasks, readings, meal and wellness records.

Technical information: session identifiers, IP address, and browser type for security and audit purposes.

To provide the service: showing the right information to the right household members according to the permissions you configure.

For safety features you enable: deterministic check-in and medication rules can create alerts to designated family members.

For optional AI assistance: when you use an AI Skill, the minimum necessary context is sent server-side to the configured AI provider. AI features are clearly labeled, never used for advertising, and your private content is not used to train models.

We never sell health information or build advertising profiles from it.

We never place raw journal text, medication instructions, or health notes into analytics.

We never make records public. Documents use authenticated, expiring access only.

All traffic is encrypted in transit (TLS). Sensitive fields and every uploaded document are additionally encrypted at rest with AES-256-GCM.

You can export your household's data and delete your account at any time from Settings. Deletion removes personal records subject to legal retention duties.

Household administrators control membership and permissions. Every access to sensitive records is audit-logged and reviewable.

You may request a copy of your data (a JSON export of your household is built in, and key documents have printable versions) or correction of inaccurate records at privacy@eldercarehub.app.

We use Google Analytics on our public marketing and sign-in pages only, and only after you consent through the cookie banner. Analytics is never loaded inside the signed-in application, so pages that show health information are never measured by any third party.

ElderCareHub is the data controller for your account and platform data. We process personal data on these legal bases: performance of our contract with you (providing the service), your consent (optional features such as AI assistance, the analytics cookie, and any location-based features), and our legitimate interests (security, fraud prevention, and service integrity).

Health-related information is special-category data. It is processed only because you and the household members you invite choose to enter it, on the basis of explicit consent (Article 9(2)(a) GDPR). You can withdraw consent at any time by deleting records or your account.

You have the right to access, rectify, erase, restrict, and object to processing of your personal data, the right to data portability, and the right to withdraw consent at any time without affecting prior processing. To exercise any right, email privacy@eldercarehub.app — we respond within 30 days. You also have the right to lodge a complaint with your local supervisory authority.

The service is hosted on infrastructure in the United States (Render for compute and database, Cloudflare for encrypted file storage). All health-related fields and files are encrypted before storage, and the encryption keys never leave our server environment.

Where EU, UK, or other law requires safeguards for international transfers, we rely on our infrastructure providers' data processing agreements incorporating Standard Contractual Clauses, alongside the technical measures described in our Security page.

The interface is available in nine languages. Legal documents are provided in English; the English version is authoritative.