How your data is protected

Where your records live

Everything — report files, extracted values, member profiles — is stored on a single private server operated by your family's administrator, not on a third-party records platform. Each family's data is isolated: no account can query another family's records.

Who can see what

A member's records are visible to: that member's own login, the family head, and anyone the head has explicitly shared them with (read-only or read-and-write, per person). Every member's profile page shows exactly who can see it. The platform administrator can access all families for maintenance and support.

What AI sees — and what it never sees

Two features use external AI services, and both are minimized:

• Report reading: before any report text is sent for value extraction, names, email addresses, and ID numbers are detected and removed on our server.
• Insights & questions: these send lab values, dates, and test names — never names, contact details, or the original documents. Every AI-generated analysis is labeled with the service that produced it.

The AI providers used here process data via their APIs, which are not used to train their models under their API terms. Original report files never leave the server.

How access is protected

• Passwords are stored only as strong one-way hashes — nobody can read them, including the administrator.
• Invites and password-reset links are single-use, expire within hours, and are stored only as fingerprints.
• Changing your password signs you out everywhere; you can also do that any time from Account → Sessions.
• All traffic is encrypted (HTTPS), and health pages are never cached by browsers or intermediaries.

What we never do

No advertising, no selling or sharing data with anyone, no third-party analytics or trackers. The vault exists for one purpose: keeping your family's health history organized and understandable, for your family alone.