Privacy Policy

FamilyHealthBook (“we,” “us,” or “our”) operates the website and service at familyhealthbook.com. We are committed to protecting the privacy of you and your family. This Privacy Policy describes what information we collect, how we use it, and the choices you have.

By creating an account and using FamilyHealthBook, you consent to the collection, use, and disclosure of your information as described in this policy. If you do not agree with these practices, you should not use the service.

We use the information we collect to:

• Provide, maintain, and improve the service for you and your family
• Authenticate your identity and secure your account
• Store and organize the health records and documents you enter or upload
• Generate summaries, timelines, and reports from the data you provide
• Offer optional AI-assisted features such as document organization and summaries
• Send service-related communications such as account updates and security notices
• Detect, prevent, and respond to fraud, abuse, and security issues
• Comply with our legal obligations

We do not sell your personal or health information. We do not use your health records to train external machine learning models.

Your data is stored in a managed PostgreSQL database hosted on Supabase. Access to your records is protected by Row Level Security (RLS) policies, which enforce that only you (and family members you have explicitly authorized) can read or modify the records associated with your account.

Uploaded documents are stored in private, access-controlled object storage. Files are not publicly accessible and can only be retrieved through an authenticated session.

Data is encrypted in transit using TLS and at rest by the hosting provider. We follow security best practices including least-privilege access controls and regular review of our access policies.

While we take reasonable measures to protect your information, no method of transmission or storage is completely secure. We cannot guarantee absolute security.

We retain your information for as long as your account is active or as needed to provide the service. Because FamilyHealthBook is designed to preserve health information over a lifetime, records remain available until you choose to delete them.

If you delete individual records or documents, they are removed from your account and are no longer accessible through the service. If you delete your entire account, we will remove your personal data within a reasonable period, except where we are required to retain limited information for legal, accounting, or security purposes.

We use cookies and similar technologies to keep you signed in, remember your preferences, and understand how the service is used. Essential cookies are required for the service to function. You can control non-essential cookies through your browser settings.

For detailed information about the specific cookies we use and how to manage them, please review our Cookie Policy.

We rely on trusted third-party providers to operate the service. These providers have access to your information only as necessary to perform services on our behalf and are obligated not to use it for other purposes.

When AI features are enabled, limited portions of your health data may be sent to an AI provider to generate summaries or answer your questions. See our AI Disclosure for details.

FamilyHealthBook is designed for families, and parents or legal guardians may maintain health records for their children. The service is not directed at children creating their own accounts, and a parent or guardian must create and manage accounts on behalf of minors.

As the account holder, you are responsible for the information you enter about your children and for managing their records until they are old enough to manage their own account. We do not knowingly collect personal information directly from children under 13 without verified parental consent.

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons. When we do, we will revise the “Last updated” date at the top of this page. For significant changes, we will provide a more prominent notice, such as an email or an in-service notification.

We encourage you to review this page periodically. Continued use of the service after a change takes effect constitutes your acceptance of the updated policy.

If you have questions about this Privacy Policy or your personal data, please contact us: