Privacy & Security

Your records are private by design

How we store, protect and share your information — in plain English.

What we store and where

We store the information you choose to enter into your care records — such as medicines, conditions, clinicians, appointments, notes and preferences — together with your account details (name and email address).

Data is held in a secure hosted database. We only use your information to provide the service to you and the people you share with. We never sell your data.

Passwords and sign-in

Passwords are hashed using an industry-standard one-way algorithm and are never stored in plain text. We cannot see your password.

Password reset links are single-use and expire after one hour.

Automatic sign-out

To protect records on shared or unattended devices, you are signed out automatically after 30 minutes of inactivity.

Sharing is opt-in

A care record is private to its owner by default. Access is only granted when the owner invites someone by email.

Invited carers can view and add to the record but cannot delete it or change who has access. The owner can revoke access at any time, which takes effect immediately.

Audit logs

Every addition, change and deletion within a care record is recorded with who made it and when. Owners and carers can see recent activity on the record’s Overview tab. Medicine dose changes also keep their own history.

Your rights (including GDPR)

You have the right to access, correct and delete your personal information. You can edit any entry at any time, and you can update your name, email and password from Account settings.

Right to deletion

Owners can delete an individual care record at any time. You can also delete your entire account from Account settings, which permanently removes your account, every record you own and all associated data. This cannot be undone.

Cookies

We use essential cookies only to keep you securely signed in. The public pages of this website may display advertising in future; if so, any advertising partner (for example Google AdSense) may use cookies in line with their own policies. Advertising is never shown inside your private records.

Not medical advice

Personal Care Records is an organisational tool. It does not provide medical advice, diagnosis or treatment. In an emergency, call your local emergency number.

Questions about privacy? Email[email protected]

Last updated September 2026