Skip to main content
Security & privacy

Private means private.

A care record is some of the most personal information a family has. Here is how Care Vault is designed to treat it — in plain English, with no security theatre.

🔑

You control access

Eligible adult records use section-level permissions for authorised circle members. Child records are restricted to authorised family managers and are not currently shared with carers. Access can be reduced or removed, and sensitive access and changes are recorded.

🔒

Encryption

Data is encrypted in transit (TLS) and at rest. Sign-in is protected by a PIN lock after inactivity on shared devices.

⚖️

Your rights under UK GDPR

The person the information is about keeps their data-protection rights. Depending on the record and your authority, you can use in-product controls or ask us for access, correction, export, restriction, objection or erasure. Legal limits and short security checks may apply.

📦

Export any time

Authorised managers can export eligible adult records in portable formats. Child access and export requests use a reviewed rights workflow so the requester’s authority and the child’s best interests can be checked.

🚫

No selling, no ads

Care records are never sold and never used for advertising. There are no advertising slots anywhere in the product.

🩺

Not a medical device

Care Vault records and organises information. It does not diagnose, interpret information clinically, or replace professional advice. In an emergency, always call 999.

How your information is protected is described above. See also our privacy policy for how personal data is handled.

Who can see what

Access, drawn as a picture.

Owner

For an eligible adult record, authorised managers can invite or remove circle members, set section access and use the available rights controls.

Circle members

For eligible adult records, authorised family and friends see only the sections their permission level allows. Child records are limited to family managers.

Carers & professionals

For eligible adult records, a linked carer can receive limited working access. Child record sharing with carers is currently switched off.

A private record, with access kept deliberate.

Read the full policies, or just start — access control is built into the free tier too.