Private means private.
A care record is some of the most personal information a family has. Here is how Care Vault is designed to treat it — in plain English, with no security theatre.
You control access
Eligible adult records use section-level permissions for authorised circle members. Child records are restricted to authorised family managers and are not currently shared with carers. Access can be reduced or removed, and sensitive access and changes are recorded.
Encryption
Data is encrypted in transit (TLS) and at rest. Sign-in is protected by a PIN lock after inactivity on shared devices.
Your rights under UK GDPR
The person the information is about keeps their data-protection rights. Depending on the record and your authority, you can use in-product controls or ask us for access, correction, export, restriction, objection or erasure. Legal limits and short security checks may apply.
Export any time
Authorised managers can export eligible adult records in portable formats. Child access and export requests use a reviewed rights workflow so the requester’s authority and the child’s best interests can be checked.
No selling, no ads
Care records are never sold and never used for advertising. There are no advertising slots anywhere in the product.
Not a medical device
Care Vault records and organises information. It does not diagnose, interpret information clinically, or replace professional advice. In an emergency, always call 999.
How your information is protected is described above. See also our privacy policy for how personal data is handled.
Access, drawn as a picture.
Owner
For an eligible adult record, authorised managers can invite or remove circle members, set section access and use the available rights controls.
Circle members
For eligible adult records, authorised family and friends see only the sections their permission level allows. Child records are limited to family managers.
Carers & professionals
For eligible adult records, a linked carer can receive limited working access. Child record sharing with carers is currently switched off.
A private record, with access kept deliberate.
Read the full policies, or just start — access control is built into the free tier too.


