Privacy policy

Your account: your name, email address, password (stored only as a secure hash) and an optional profile photo.

Your care plan: what your family enters: document checklists, hospice notes, supplies, tasks, visitors, meals, groceries and end-of-life checklists, plus optional service photos.

What we never ask for: Social Security numbers, bank or card numbers, or medical records. Please don't enter them anywhere on the site.

Only family members who join with your invite code. Each request is checked by our database's access rules, not just by the app's screens, so one family can never read another's plan.

If you create a public help link, visitors see only your loved one's first name as you entered it, the meal train link, and the groceries, supplies and help items you've explicitly marked public. Private items, visitors, documents, notes and who's covering each task are never included.

Photos are stored privately and shown only through short-lived secure links to signed-in members.

All traffic is encrypted with HTTPS. Data is encrypted at rest by our hosting provider. Access to every table is restricted by row-level security rules, the vetted business directory can only be edited by Beacon & Breathe staff, and we do not sell or rent your information, ever.

We use Lovable's built-in visitor analytics to understand how the site is used. It uses no cookies, stores nothing on your device, doesn't keep IP addresses and doesn't identify visitors. Lovable collects this data for us. Lovable's privacy policy explains how it handles it.

It records the pages visited, where visitors came from, their country, browser, operating system and device type, how long they stay, how fast pages load, errors, and which buttons and links are clicked. Detailed data is kept for 90 days and daily summaries for a year. This is recorded for every visitor, without cookies and without identifying anyone.

Lovable Cloud hosts our sign-in, database and private photo storage. It receives your account details and care plan so the app can work.

Google Fonts serves the site's typefaces; your browser requests them from Google, which receives your IP address and browser details.

Google sign-in (for accounts created that way earlier) shares your name and email from Google with us.

Outside links (LegalZoom, Amazon, Google Maps, Meal Train, government sites and businesses in our directory) only receive information when you choose to open them, and follow their own privacy policies.

Your sign-in session is kept in your browser's local storage so you stay signed in; signing out removes it.

You can edit your name and photo anytime on your Account page. To delete your account or your family's plan, email us and we'll remove it. We keep data only as long as your account is active.

Questions about privacy? Email noellegiebe@gmail.com.