Privacy
Care Keep holds medical, legal and financial details about someone you love. Here is exactly what happens to them.
What we hold. Whatever you put in: the name and details of the person you care for, their medications, appointments, health conditions and allergies, care costs, contacts, uploaded legal documents, saved logins, and the notes in your care log. Plus your own name, email address, and the timezone your browser reports — that last one only so reminder emails land on the right day for you.
Where it lives. In a hosted Postgres database and private file storage, in the United States. Uploaded documents are never publicly addressable; they are fetched through short-lived signed links.
Saved logins. Usernames, passwords and security answers in the logins section are encrypted with AES-256-GCM before they are written down, using a key held separately from the database. Someone who obtained a copy of the database alone could not read them.
Payment. Handled entirely by Stripe. We never see or store your card number.
Counting visits. We use Vercel Web Analytics to see which pages people actually reach. It sets no cookies and does not fingerprint you or follow you to other sites. Record identifiers are stripped out of the address before anything is sent, so a page inside your household is only ever counted as its shape — that someone opened a contact — never which one.
Who can see your household. Only the people you invite. Roles limit what each of them can change, and every record is scoped to your household at the database level, not just in the interface. The activity log records who changed something and when — never the value they changed it to.
What we never do. We do not sell your data, share it with advertisers, or use it to train AI models. We use it to run Care Keep for you, and for nothing else.
Getting it back, or getting rid of it. The household owner can export everything at any time from Household settings — a zip of every record plus your uploaded documents. An owner can also delete a care recipient and all of their records from the Care recipients page. To delete your whole household and account, email admin@thecarekeep.com and we'll do it — there is no button for that yet.
Emails. We send reminders about things needing attention, and the emails needed to run your account, such as confirming your address or resetting your password. Reminders can be turned off per person in Household settings. We do not send marketing.