Privacy and data use

Care pages can contain names, notes, needs, check-ins, photos, visit signups, meal signups, care-log entries, preferences, and member invite emails.

Visitors can use a private share link without creating an account. We store a visitor-session cookie so the same browser can edit or cancel its own contributions.

Visitor access is controlled by the private share link. Anyone with that link may be able to view and contribute to enabled visitor sections.

Members sign in by magic link. Admins can invite members, rotate the private share link, review reported content, and schedule page deletion.

The visitor-session cookie is used to remember a browser on a specific care page. It supports check-ins, visit and meal signups, ownership of visitor-authored content, and abuse prevention.

Authentication cookies are handled by Supabase for signed-in members. We do not use cookies for third-party advertising.

Admins can schedule a care page for deletion. Deleted pages are hidden immediately and retained briefly so admins can restore an accidental deletion.

Members can delete their login. That removes account access, memberships, and pending invites for that email, but authored care-page records and display names remain with the family's shared page history unless an admin deletes that content or the page is purged.

Admins can download a structured care-page export that includes page records, member and invite details, visitor session metadata, content reports, and audit logs. Exports exclude private share-link tokens and visitor session cookie tokens.

For data questions or deletion help, contact support@coordinatedcare.app. Do not send urgent medical information to support.