Privacy & Security for Clinicians

Each family sees only its own data

• •Every health record (check-ins, medications, labs, flares, appointments, journal, documents) carries an access list of the family members allowed to see it.
• •The database itself enforces that list on every read, update and delete. It is not just hidden in the app screens.
• •A co-parent or caregiver joins only by a single-use invitation link that expires. Accepting it is checked on the server.
• •No one at another family, and no community member, can open a child's health records.

Uploaded files stay private

• •Lab reports, visit notes and photos are stored in private storage, never at a public web address.
• •When a parent opens a file, the app creates a temporary link that stops working after one hour.

How the AI helper works

• •The "Ask" helper uses Anthropic's Claude through a server-side function. The API key never reaches the phone or browser.
• •Only the conversation the parent types is sent. It is not used for advertising, and under Anthropic's commercial API terms it is not used to train models.
• •The helper is told it is not a doctor. It explains and helps parents prepare questions; it does not diagnose or change treatment.

Community safety

• •Parents post under a display name they choose. Children's full names are not shown.
• •Any parent can report a post. A post reported twice is hidden automatically until an admin reviews it.
• •Votes, saves and replies go through a checked server function, so one user cannot edit another's post.

Children and parental control

• •Accounts belong to parents. Kid mode is a simpler view inside the parent's account, not a separate login.
• •We follow COPPA: parents control what is entered and can review, edit or delete it at any time.
• •Deleting the account removes the family's profiles and health records.

What clinicians receive

• •Clinicians do not get accounts and cannot browse a family's data.
• •Families choose what to share by generating a visit summary themselves and bringing or sending it to the appointment.
• •All data is entered by families and is not clinically verified. Please treat it as patient-reported information.

Infrastructure

The app runs on the Base44 platform, which provides sign-in, the database and file storage. All traffic is encrypted with HTTPS. We never sell data and show no advertising.