Private means private.
A care record is some of the most personal information a family has. Here is how Care Vault is designed to treat it — in plain English, with no security theatre.
You control access
Only people you invite can see the vault, and each person sees only what you set. Access can be reduced or removed at any time, and every note and change is attributed to the person who made it.
Encryption
Data is encrypted in transit (TLS) and at rest. Sign-in is protected by a PIN lock after inactivity on shared devices.
Your rights under UK GDPR
The vault’s contents belong to your family. You can access, correct, export, or delete your data — the rights UK GDPR gives you, built in as product features rather than a request form.
Export any time
Download the record — notes, visits, and documents — in portable formats whenever you choose. No lock-in.
No selling, no ads
Care records are never sold and never used for advertising. There are no advertising slots anywhere in the product.
Not a medical device
Care Vault records and organises information. It does not diagnose, interpret information clinically, or replace professional advice. In an emergency, always call 999.
Detailed security documentation and our data-processing terms will be published here before launch. See also our privacy policy.
Access, drawn as a picture.
Owner
You (and anyone you name) hold the keys: invite, remove, set access, export, delete.
Circle members
Family and friends see what their level allows — from the full record down to a simple summary.
Carers & professionals
Working access: the schedule, the notes they need, and the ability to write visit records. Nothing more.
Your family's record, on your family's terms.
Read the full policies, or just start — access control is built into the free tier too.