How this system handles your information.
A private household tool. Built for one family. No advertisers, no marketing, no third-party sharing beyond the services that make it run.
Who this applies to
This privacy policy covers the Herrada Family Care coordination system, a private household tool used exclusively by members of the Herrada family. It is not a commercial service. There are no public users. Phone numbers are added one at a time by the household administrator after explicit consent from each family member.
What we collect
- Mobile phone numbers of family members who have consented to participate, provided directly to the household administrator.
- The text content of SMS messages, voicemails, and image attachments family members send to the system.
- Names and contact info of healthcare providers, medication details, and appointment notes that family members choose to record.
- Each family member's first name and role within the household (coordinator, contributor, viewer).
Where this data lives
All data is stored in a private Supabase database. Row-level security policies isolate each family's data so only authenticated members of that family can read or write it.
Third-party services
- Twilio — receives and delivers the SMS, MMS, and voice messages between family members and the system.
- Anthropic (Claude API) — processes inbound message text for the limited purpose of categorizing content (appointment vs. medication vs. note) and drafting confirmation replies. Anthropic does not retain message content beyond their standard processing window.
- Supabase — hosts the database and serverless functions.
- Vercel — hosts this web interface.
What we do not do
- We do not sell data.
- We do not share data with advertisers.
- We do not use data for marketing.
- We do not share data with anyone outside the Herrada family.
- We do not use data to train machine learning models.
How to opt out
Reply any of these keywords to any message from the system to immediately stop receiving messages and have your phone number removed:
You can also ask the household administrator (Alfonso Herrada) to remove your number directly. Removal is immediate.
Data retention
Care records are kept indefinitely as part of the household's care history, since longitudinal context is the purpose of the system. If a family member opts out, their phone number is removed but care records they previously contributed remain attributed to their name in the historical record. Family members can request full deletion of their attribution by contacting the administrator.
Security
- All data in transit uses TLS encryption.
- The database uses row-level security to isolate each family's data.
- Only authenticated family members can read or write through the application.
- The administrator follows standard practices for credential storage and access control.
This is a personal household tool. It is not intended to provide medical advice, replace healthcare providers, or be used for any purpose outside the Herrada family. The household administrator reserves the right to update this policy as the tool evolves.
Questions, concerns, or removal requests — reach out to the household administrator.