Security
Keeping your Circle's information private
Care information is sensitive. Here's a plain-English look at how CareCircle Family looks after it.

Private to your Circle
Circle information is shared by invitation and according to each member's role. Membership does not automatically give access to every record: documents, finances, medications, Memories and Wishes have additional restrictions.
Access checked at the database
Every record is scoped to a Circle at the database level, so access rules are enforced on every read and write, not just in the app's screens.
Roles and permissions
Each member has a Circle role โ including Owner, Family member, Primary carer, Friend/helper, Professional/carer or View only โ that determines what they can see and change. The person receiving care can have their own simplified My Circle screen.
Documents and receipts
Files are kept in private storage and are never available at a public address. When you open one, CareCircle Family generates a short-lived secure link just for that request.
Signing in
Accounts can use the sign-in options shown on the CareCircle Family sign-in screen. Account controls are available only after signing in.
Export and deletion
Members with the export option in More can download records their role permits; restricted records are not included. Signed-in members can delete their account from More โ Your account. Owners choose whether to transfer or delete each Circle they own; shared history may remain for other members without the deleted account attached.
Responsible disclosure
If you believe you've found a security issue, please contact us at us@carecirclefamily.app so we can look into it promptly.