Privacy Policy & Terms

CarePlus Passport stores the health information you or your providers add: your basic profile, medications, allergies, conditions, timeline entries, documents and images you upload, records requests, and the log of who accessed what and when.

We never sell or share your health data for advertising. We do not use your health information for marketing, and we do not share it with insurers, data brokers, or anyone else. Full stop.

Only you. Other people see your records only when you create a share for them. Shares contain an unguessable private link with no patient data in the address, require the recipient to state their name, organization and role (which must match what you specified), expire within at most 72 hours, and can be revoked by you instantly. Every open or refused attempt is logged.

Your records are stored with row-level access control so your data is visible only to your account. Uploaded files are stored privately and are never publicly accessible. Share links use long random tokens. Nothing about your health is stored in your browser. Access attempts are rate-limited and locked out after repeated failures.

At any time you can: export all of your data as PDF or JSON, mark records as sensitive so they are excluded from shares by default, revoke any share instantly, and delete your account and all of your data permanently.

When you delete your data or account, your records, shares, uploads, requests and logs are permanently erased and cannot be recovered.

• ·CarePlus Passport is a tool for organizing your own health information. It is not a medical device and does not provide diagnoses or treatment.
• ·You are responsible for the accuracy of the information you enter and for choosing who you share it with.
• ·Shared links are protected by identity verification, expiry and revocation, but no system is perfectly secure — share thoughtfully.
• ·This service is provided as-is. In an emergency, call your local emergency number — do not rely on this app.