Privacy
the operator of this Care Log runs this Care Log. Questions about your data: the person who set up your account.
What we can see, and what we cannot
We can see account details (names, usernames, email addresses) and access records (who signed in or made a change, when, and from which address). That is all we use to run the service and answer support questions.
We do not see your family's personal information: names of the people cared for, notes, readings, medicines, wound notes, photos and the like. It is encrypted before it is stored, our support tools do not show it, and our staff do not open it. Only the people in your family's Care Log can read it. A stolen copy of the database or of a backup is unreadable without our separate encryption key.
To be plain about the limits: the service has to decrypt your information to show it to you, so the system itself can open it. It is not locked so that even we could never open it. We do not, and our rules forbid it, except where the law requires us to hand it over.
What we keep
- Account details: display name, username and a scrambled (hashed) password. We cannot read your password.
- What your family and helpers enter: patient name, daily tasks and ticks, blood pressure readings, medicines and doses, wound notes and photos (photos are deleted automatically after 30 days), sign-off notes, appointments, notes for the next shift, other health readings and the emergency information card.
- Email address (family accounts, optional): used only to reset a password, confirm the address and send the alerts the family switches on. Emails are sent through the operator's email provider.
- Who did what: each entry carries the name of the person, their type (family, doctor, nurse, aide) and the time.
- A security log: sign-ins and changes, with the IP address, so problems can be traced.
- Sign-in cookie: one cookie that keeps you signed in. No advertising or tracking cookies, and no third-party scripts.
Who can see it
Only people in your family's Care Log: the family accounts, and the doctors, nurses and aides the family gave access to (family accounts choose which sections each group can see). Other families cannot see your data. The people who run the server can technically reach the database, and only do so to keep the service working, for backups, or when the law requires it. We do not sell your data and we do not use it for advertising.
Where it is stored and for how long
On the server run by the operator of this Care Log. Data is kept until your family deletes it. Nightly backups are kept for 14 days, so deleted data disappears from backups within about two weeks.
Your choices
- Download everything: a family account can download all of the family's data (a zip with spreadsheets, files and photos) from the family portal, under Your data.
- Delete everything: a family account can erase the whole family's data, including photos and sign-ins, from the same page. It cannot be undone.
- Correct a mistake: entries can be voided but not edited, to keep an honest history. Ask us if something must be removed.
Security
Connections are encrypted, passwords are hashed, sessions expire, and the app blocks repeated wrong passwords. No system is perfectly safe, so please do not enter more than is useful for care.
Not a medical record
Care Log is a notebook for sharing care notes. It is not a medical record and is not meant to be used as one.
Contact
the operator of this Care Log, the person who set up your account.