You're trusting us with deeply personal information about someone you love. Here's exactly how we keep it safe.
In plain English: while your notes travel between your phone and us, they're scrambled so nobody can read them on the way (in transit) — and they stay scrambled while stored on our servers, so even someone with access to the disk sees gibberish (at rest). Only your account can unlock them.
Your account is the only key. Database policies enforce that you can only ever read or change your own family's data — never someone else's.
Your care records are stored on EU-region infrastructure (AWS eu-west-1, Ireland, via Supabase) and handled under UK and EU GDPR. We never sell your data and never use it for advertising.
Your daily logs, handover notes and journal entries are not sent anywhere by default. Sierra's care tips use only the loved one's first name and dementia type. The optional mood and behaviour analysis sends the notes you type into that tool to our AI provider so it can answer — nothing else is shared, and you choose when to run it.
Export your data or delete your account at any time from billing. Deletion removes your profile, notes, attachments and subscription record.
Card details never touch our servers. Stripe (PCI-DSS Level 1) handles checkout and stores the payment method.
If you spot something that looks like a security or privacy issue, please email hello@thecarecompanion.com and we'll respond within two working days.
Last reviewed: 19 October 2026