Clear about what we do, and what we don't.

Why there are no cameras, and why that is not a feature we skipped

A camera in an older adult's home answers a question the family has, at a price the older adult pays, and the price is not obvious until it has been paid. People behave differently when they are watched, including in their own kitchen, and the change is not something they can switch off by deciding not to mind.

What follows is predictable and it is the part nobody plans for. A parent who feels observed engages less with everything else the family suggests, so the camera bought to increase safety reduces cooperation with the ordinary arrangements that produce most of it. The family, meanwhile, now has footage and no interpretation: knowing somebody sat in a chair for four hours tells you nothing about whether that is unusual for them.

So this is a decision rather than a gap in the roadmap. It will not be added later, and a product built around consent does not get to treat consent as a setting.

What we actually hold

The honest inventory, because "we take privacy seriously" is not information:

• Arrangements. What is happening, when, and who has agreed to do it. This is the substance of the service.
• Responses. Your parent's own yes, not this time, or nothing. Their words, chosen by them.
• Who is in the Care Circle, and how to reach them.
• Availability, never calendars. The system can work out that somebody is busy between one and four without knowing what they are doing, who with, or where. That distinction is the whole design of the asking step.

What is not in there: no location, no audio, no video, no health records, no diagnoses, no clinical notes. We do not ask for medical details to sign up, and we ask you not to send them.

The dignity rules, stated as rules

Privacy is the legal frame. Dignity is the one that decides whether an older adult tolerates any of this, and it is easier to keep if it is written down.

• Nothing is reported about your parent that they did not choose to send. The only thing that leaves their side is their own answer.
• Their side is arrangements, not observations. They are not shown the family's coordination view, and there is nothing about them in it to read.
• They can pause or stop without asking anybody. Not by requesting it from the family member who set it up.
• No answer is not a verdict. A missed response reads as unconfirmed, never as something wrong, because rounding silence up to alarm is how a family arrives at a door for no reason and how a parent learns to resent the whole arrangement.
• Nothing is assigned to somebody who did not accept it. That applies to the family too.

What we cannot protect you from

A page about safety that only lists protections is marketing. Four limits worth knowing before you rely on any of it:

• We are not an emergency service and cannot detect an emergency. No fall detection, no medical event detection, and we do not contact emergency services. That is a different product and you may well need one.
• Anyone you invite can see the Care Circle. The controls are about who is outside it, not about hiding family members from each other, and a family in conflict should invite carefully.
• We cannot make anybody do anything. We can show that a responsibility has no owner. Every arrangement still depends on people choosing to do things for each other.
• We do not verify what is entered. If somebody marks a thing done, the record says done. This is a shared account of what a family agreed, not an audit of what happened.

If something goes wrong

Anyone in a Care Circle, including the supported person, can ask us to pause the service, stop the prompts, or remove a family member's access, and can ask what is held about them. Write to us at contact and it is dealt with by a person.

What happens to a family's record after a membership ends is set out in the privacy policy, which is still in legal review. We would rather point at that than publish a retention promise we have not finished checking, because a privacy commitment made casually and corrected later is worth less than no commitment at all.