Privacy Policy

The short version

Family Stork holds your family's health records so you never have to scramble for them. The record belongs to the person it is about. We do not sell your data, we do not show ads, and nothing in a record is public unless you create a share link, which you can revoke at any time. Export of your record is always available and free.

What we collect

Account information (email, password hash, optional phone for reminders). Health records you upload or type: documents, photos, videos, timeline entries, medications and dose logs, notes, chat messages about the record, insurance details, and emergency-card information. Technical basics: IP address and access times, kept in a security audit log.

Children's information. Records about children are created and controlled by a parent or guardian. Family Stork does not knowingly collect information directly from children under 13, and accounts may not be held by children under 13. When ownership of a record is handed to the person it is about, they must be at least 13 and hold their own account.

How records are used

To run the product for you: building timelines from your documents, answering your questions from the record, preparing visit notes, and sending the reminders you turn on. Document text and images you submit are processed by an AI service (Anthropic) to extract and summarize your records; videos are stored but never sent to the AI. We use aggregate counts (number of accounts, documents processed) to operate the service. We do not sell personal information, and we do not use your family's health records for advertising.

Sharing, always at your direction

Records leave Family Stork only when you act: inviting family or a doctor to the care team, creating an emergency, caregiver, insurance, or moments link, giving a clinic your record's inbox email address, or exporting your record. Every share link is revocable, and every access to a record is written to an audit log you benefit from. Service providers that move data for us (cloud hosting, email and text delivery, AI processing) act on our instructions.

Security and retention

Records live on encrypted storage with daily encrypted backups. Access requires your account; sessions expire. If we ever discover a breach of unsecured records, we will notify affected users consistent with applicable law, including the FTC Health Breach Notification Rule.

Retention policy. We retain a record for one purpose: so the family that stewards it can keep it, and so the person it is about can receive it. A child's record is the child's — held in trust by their parent or steward, transferred to them through the handoff when they come of age, and retained only for as long as the family actively keeps it. We never retain records indefinitely for our own purposes: deleting a record permanently deletes its documents and entries (residual copies in encrypted backups expire on rotation, within six months), any steward or owner can delete at any time, and once a record is handed off its owner holds every one of those rights personally. Security audit entries are retained separately, as required for the integrity of the service.

Your rights

Export everything, any time, from the care-team page. Delete records or your account. Correct anything in a record (timeline entries are editable). Questions or requests: info@familystork.com. If you are in a state with a consumer health data law (for example Washington's My Health My Data Act), these rights apply to you without any extra steps; the same export, correction, and deletion controls serve everyone.

Children's privacy (COPPA)

We never collect information from children. Children under 13 cannot create accounts; a child's record is created and controlled entirely by their parent or steward, who is our user. The record is the child's — held in trust for the purpose of returning it to them through the handoff — and it is retained on the schedule in the Retention policy above: only while the family actively keeps it, deleted permanently whenever the steward (or, after handoff, the owner) asks. We do not use children's records for advertising, sell them, or use them to train AI models. From age 13, a record's subject can hold their own account with a confidential compartment: items they seal are visible to them alone — no parent unlock, no support override — and never appear on shared links, exports made by others, or AI surfaces rendered for others. Questions about a child's data: info@familystork.com.

Consumer health data

Because Family Stork exists to hold health information, we also publish a dedicated Consumer Health Data Privacy Policy covering the categories we collect, every third party that touches them, and your rights — including for Washington's My Health My Data Act.

Corporate transactions

If TruePrimAI, Inc. is involved in a merger, financing, acquisition, reorganization, or sale of assets, information may transfer as part of that transaction, subject to applicable law and this Policy. We will never sell your records, run ads against them, or use them to train AI models — a commitment that survives any such transaction.

Contact

Questions about privacy: TruePrimAI, Inc. · info@familystork.com.