Privacy comes first
CareHaven holds some of the most personal information you will ever keep about someone you love. That is exactly why it is built to stay yours.
Here is the short version: your care log lives on your device, protected by your iPhone's own encryption and lock. If you choose to sync it, only the people you specifically invite into your circle — signed into their own Apple account — can open it. Not us, not anyone else. There is no account to make. Nothing is sold, and nothing follows you around. When you want help from CareHaven's smart features, obvious identifying details — like the name of the person you care for — are stripped out on a best-effort basis before anything leaves your phone.
What this means, plainly
Your data lives on your device. Everything you log — daily notes, the diary, photos, medications, the seizure log, milestones, emergency info — is stored in your iPhone's own protected storage, secured by your device's encryption and your passcode or Face ID. Not us, not anyone else, can read it. Available
You do not need an account. There is no sign-up, no password to create, no email to hand over to start using the app. You open it and begin. Available
No tracking, no ads. CareHaven does not track you and does not show ads. There are no third-party advertising or analytics tools watching what you do. Available
Your backups are encrypted. When you save a backup of your data, it is locked with strong encryption (AES-256-GCM) so only you can open it. You can move it safely between your iPhone, iPad, and Mac. Available See Back up & restore your data.
Smart help is private by design. When you ask one of CareHaven's smart features for help, obvious identifying details — like the name of the person you care for — are stripped out on a best-effort basis before any request leaves your device. It's not perfect, but it meaningfully lowers what's exposed. Available More in Smart help (Apple Intelligence).
Syncing is optional and you choose it. CareHaven works on its own with no internet connection at all. Sync is optional and off by default. Turn it on and your care log syncs through Apple's iCloud (CloudKit) — encrypted by Apple in transit and at rest, reachable only by the people you specifically invite. Available See Sharing care with others (sync).
You can add another lock
If you want an extra layer, you can set a PIN and unlock with Face ID, and have the app lock itself after a quiet stretch. The most sensitive plans — like a crisis plan or a Letter of Intent — are also kept out of your phone's system-wide search, so a glance over your shoulder does not give them away. Available
The longer story
This page is the promise in plain terms. If you want the full detail — exactly how your data is encrypted, how sharing works, what happens (and does not happen) when you use smart features, and how to lock the app down — read Privacy & security (in depth).