Privacy Policy

CareFolio is a personal health record app. It helps you keep your own health information — doctors, medications, appointments, conditions, allergies, insurance cards, and related documents — organized in one place. You own your data, and this policy explains what we collect, how we use it, and the choices you have.

We built CareFolio to be private by default. We do not sell your information, and we do not use your health data for advertising.

Account information. When you create an account we collect your email address and a securely hashed password (handled by our authentication provider).

Health information you enter. The records you choose to add — medications and reminder times, conditions, allergies, doctors and appointments, insurance and eye-prescription details, implants, labs, vaccines, screenings, emergency contacts, and profile details such as date of birth and sex.

Documents and photos you upload. Images or PDFs you attach, such as insurance cards, medication labels, or lab reports.

Limited technical data. Basic information needed to operate the app reliably and securely (for example, session information). We do not use third-party advertising or cross-site tracking.

We use your information solely to provide the app: to authenticate you, store and display your records on your devices, send the medication reminders you enable, and keep the service secure and working. We do not sell your data or share it for advertising.

Your data is stored in a managed PostgreSQL database and file storage operated by our infrastructure providers. It is encrypted in transit (HTTPS) and at rest.

Every record is protected by row-level security tied to your account, so one user’s data cannot be read by another. Access to production systems is restricted.

We share your information only with the service providers that make CareFolio run — our database, file storage, authentication, and hosting providers — and only so they can provide those services to us. We do not sell your data.

When you use the “Share summary” feature, a document is created and shared only with the people you choose, at your direction.

We may disclose information if required by law, or to protect the rights, safety, and security of our users and the service.

Access and edit. You can view and change your records at any time in the app.

Delete everything. You can permanently delete your account and all of your data from Profile → Delete account. This removes your records, uploaded files, and your login, and cannot be undone. You may also email us to request deletion.

Depending on where you live, you may have additional rights to access, correct, or delete your information; contact us to exercise them.

We keep your information for as long as your account is active. When you delete your account, your data is removed from our live systems. Residual copies may persist briefly in routine backups before being overwritten.

If you enable the optional biometric app lock, authentication is performed entirely by your device’s operating system (for example, Apple Face ID). CareFolio never receives, sees, or stores your biometric data — the device simply tells the app whether unlocking succeeded.

CareFolio is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.

We may update this policy from time to time. We will post the updated version here and revise the effective date above. Significant changes will be communicated in the app or by email where appropriate.

Questions about this policy or your data? Email us at privacy@carefolio.co.