Health is the most personal thing there is. When you use InCircle, you're trusting us with information about your body, your care, and the people you love. We don't take that lightly. We designed InCircle so that you — not us — own and control every piece of your health information. This page explains exactly how we keep that promise.

What we collect — and why

We only collect what we need to make InCircle work well for you. We will never request your Medicare number, insurance details, or government identifiers as a condition of using the service.

Data What it includes Why we need it
Account basics Your name and email address So you can sign in and we can contact you if needed
Health notes & summaries Appointment records, action steps, and notes you choose to save The core of what InCircle does — this is yours, you create and control it
Sharing preferences Who you've invited to view your record and what access you've granted So the right people can see what you've chosen to share
Usage data Anonymised, aggregated information about how the app is used To fix bugs and improve features — never linked to your health content

What we will never do

Some things are simply off the table. These are unconditional commitments — not subject to change without your explicit consent.

Commitment What this means for you
Never sell your data Your information will never be sold to insurers, pharmaceutical companies, data brokers, or anyone else. Ever.
Never share with employers or agencies Your health information will never be shared with your employer, government agencies, or any third party without your explicit, informed consent.
Never use for advertising Your health notes will never be used to target advertising — to you or to anyone else.
Never train AI on your data We will not allow AI or machine learning models to train on your personal health data without your full knowledge and consent.
Never make it hard to leave Exporting your data or deleting your account will always be simple and immediate. We won't create friction to keep you locked in.

Who can see your information

Your health records are private by default. The short answer is: only the people you choose.

Who Under what conditions Your control
You Always — no restrictions Full access to everything you've created
People you invite Only the specific records you've chosen to share with them (family members, carers, providers) Review and revoke access at any time from your settings
InCircle staff Only when you report a technical problem and investigation is required All access is logged and audited — we never browse out of curiosity

How we protect your data

We treat your health information with the same care you would. Here's what's in place to keep it safe.

Protection What this means in practice
Encryption in transit All data moving between your device and our servers is protected using TLS. If anyone intercepted it, they'd see nothing readable.
Encryption at rest Your stored data is encrypted using AES-256 — the same standard used by banks and healthcare systems worldwide.
Minimal internal access InCircle employees can only access your data when there is a documented, legitimate reason. All accesses are logged and reviewed.
Regular security reviews We conduct ongoing security testing and work with independent experts to find and fix vulnerabilities before they can cause harm.
No advertising trackers We don't embed Facebook pixels, Google Ads tags, or any other third-party advertising scripts in InCircle.

You're always in control

This is your data. You have meaningful, practical rights over it — and we make them easy to exercise. To use any of these, go to your account settings or contact us directly.

Your right What you can do How to use it
Access View all data we hold about you at any time Available in your account settings
Export Download a complete copy of your health record in a portable format One-click export — no forms, no waiting
Correct Update any information we hold about you that is inaccurate Edit directly in the app, or contact us
Delete Permanently remove your account and all associated data Account settings — deletion is immediate and complete
Manage sharing Control exactly who can see which records, and revoke access instantly Sharing controls in your account settings

Cookies and tracking

We keep cookie use to the bare minimum. We don't track you across the web or build an advertising profile based on your behaviour.

Type Purpose Linked to your health data?
Necessary cookies Keep you logged in and make core app features function No
Analytics Understand broad, anonymised usage patterns (e.g. which features are used most) so we can improve the product Never — all analytics data is aggregated and anonymised

When this policy changes

Type of change How we'll tell you
Meaningful changes We'll notify you by email and in-app before the change takes effect — clearly, not buried in small print.
Minor clarifications We'll update the "last updated" date at the top of this page. No notification, but always visible here.

Questions? We're here.

Privacy questions shouldn't be hard to get answered. If you have any concern — big or small — please reach out.

Talk to us about privacy

We read every message and aim to respond within two business days.

privacy@incircle.health