Kalvri Care
Privacy

How Kalvri handles your family’s information.

Last updated: May 24, 2026.

Preview placeholder — not legal advice.
This page is a plain-language preview of the privacy commitments we will make at production launch. It is not a substitute for legal advice and will be replaced by a counsel-reviewed Notice of Privacy Practices before Kalvri collects real protected health information.

1. What we collect

Kalvri Care is a coordination platform for family caregivers. We collect the minimum information needed to help your family run medication errands together. Specifically:

  • Account information for caregivers, invited family members, helpers, and platform admins — name, contact method (email or phone), and the role you selected at signup.
  • Patient context you choose to add — patient first name, relationship to the caregiver, pharmacy details, and the medication names you want surfaced on tasks. You control what gets recorded; nothing is auto-imported.
  • Task data and proofs — the tasks you create (e.g. a pharmacy pickup), helper status updates, message history, and proof artifacts (photos, signatures) helpers upload when work is done.
  • Audit log — every read and write on patient data is recorded with actor, action, target, and timestamp so your family can see what happened and when.
  • Basic device and session signals — IP, user agent, and approximate location of helper check-ins — retained for security and abuse prevention.

2. How we use it

  • Coordinate tasks. Route helper invites, deliver status updates, and surface completion proofs on the family timeline.
  • Power the family timeline.Show every member you’ve invited a shared, scoped view of what happened and what’s next.
  • Security and integrity. Detect abuse, investigate reports, enforce token scopes, and recover compromised accounts.
  • Service communications. Account, security, and subscription-related messages.

We do not sell your data. We do not use patient information for advertising. We do not train third-party advertising models on your family’s information.

3. How we share it

  • With helpers you invite — and only them. Helper invites carry a scoped token that exposes only the fields the caregiver chose for that task. Helpers cannot see your full medication vault, diagnoses, allergies, insurance, or payment information by default.
  • With subprocessors who keep the lights on. Hosting, email and SMS delivery, payment processing, background checks for the future Pro marketplace, and customer-support tooling. Each handles a narrow function under contract.
  • With Kalvri staff for support.Founder and admin access to your family’s data is logged in the same audit log your family can view. We act only at your request or to investigate abuse.
  • When required by law. We respond to lawful process and disclose only what is required. Where legally permitted, we notify the affected account.
  • Never with data brokers, advertisers, or anyone who would re-identify your family.

4. Where it lives

In this preview:records (patient, medications, tasks, helpers) live in your browser’s local storage. Nothing is transmitted to a Kalvri Care server. Clearing your browser data removes everything.

At production launch:

  • Encryption at rest and in transit for all patient data.
  • Field-level encryption for the most sensitive identifiers.
  • Least-privilege role-based access and signed Business Associate Agreements with every subprocessor that touches patient information.
  • Data hosted in U.S.-region facilities by an enterprise infrastructure provider with a SOC 2 program.

5. Your rights

  • View.See your full account, your family’s timeline, and the audit log of every action taken on the patient’s record.
  • Export.Download a portable copy of your family’s data in a machine-readable format.
  • Correct. Edit or remove a record you control, directly from Settings.
  • Soft-delete with a 30-day purge. Deleting a record marks it inactive immediately; a hard purge runs after 30 days. During that window an account owner can recover the record.
  • Revoke a helper.Revoking a helper’s token invalidates every active session derived from it, instantly.
  • Opt out of non-essential communications at any time, from Settings.

Send rights requests to privacy@kalvri.care. We respond within 30 days.

6. Children

Kalvri Care is built for adult caregivers. The platform is not intended for users under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has created an account, contact privacy@kalvri.care and we will remove the account.

7. Changes to this policy

We will update this notice as the product and our compliance posture evolve. Material changes are announced in-app and by email to the account owner at least 14 days before they take effect. The “last updated” date at the top of this page always reflects the current version.

8. Contact

Questions or requests can be sent to privacy@kalvri.care. For arbitration opt-outs, see the Arbitration Agreement.