Privacy comes first

CareHaven holds some of the most personal information you will ever keep about someone you love. That is exactly why it is built to stay yours.

Here is the short version: your care log lives on your device, protected by your iPhone's own encryption and lock. Your care records are yours. You choose which records to share and which caregivers to invite. If you choose to sync it, each caregiver you invite signs in with their own Apple account. No CareHaven account is required. Sync and caregiver sharing require an Apple account. We never sell your family's care information, and nothing follows you around. When you want help from CareHaven's smart features, obvious identifying details — like the name of the person you care for — are stripped out on a best-effort basis before anything leaves your phone. One exception: a picture you make for a cue with Apple's Image Playground is made by Apple, and Apple decides where (see Across your Apple devices).

What this means, plainly

Your data lives on your device. Everything you log — daily notes, the diary, photos, medications, the seizure log, milestones, emergency info — is stored in your iPhone's own protected storage, secured by your device's encryption and your passcode or Face ID. Today, we don't have access to the care log stored on your device or in your private iCloud. Available

You do not need an account. There is no sign-up, no password to create, no email to hand over to start using the app. You open it and begin. Available

No tracking in the app. The CareHaven app does not track you. There are no third-party analytics tools in the app watching what you do. Available

Your backups are encrypted. When you save a backup of your data, it is locked with strong encryption (AES-256-GCM) so only you can open it. You can move it safely between your iPhone, iPad, and Mac. Available See Back up & restore your data.

Smart help is private by design. When you ask one of CareHaven's smart features for help, obvious identifying details — like the name of the person you care for — are stripped out on a best-effort basis before any request leaves your device. It's not perfect, but it meaningfully lowers what's exposed. Available More in Smart help.

Syncing is optional and you choose it. CareHaven works on its own with no internet connection at all. Sync is optional and off by default. Turn it on and your care log syncs through Apple's iCloud (CloudKit) — encrypted by Apple in transit and at rest; you choose which caregivers to invite and which sections to share. Available See Sharing care with others (sync).

Copies you hand out are separate. Someone who receives a PDF or a complete handoff link can pass it on. Those copies are separate from access to your shared profile.

You can add another lock

If you want an extra layer, you can set a PIN and unlock with Face ID, and have the app lock itself after a quiet stretch. The most sensitive plans — like a crisis plan or a Letter of Intent — are also kept out of your phone's system-wide search, so a glance over your shoulder does not give them away. Available

The longer story

This page is the promise in plain terms. If you want the full detail — exactly how your data is encrypted, how sharing works, what happens (and does not happen) when you use smart features, and how to lock the app down — read Privacy & security (in depth).