Effective June 21, 2026

Privacy Notice

Pre-launch draft. This notice must be reviewed by qualified privacy counsel and updated with the operating company’s legal name, mailing address, and working privacy contact before public release.

What Porchlight Relay does

Porchlight Relay helps families coordinate care, daily schedules, medication check-ins, messages, and caregiver access. It is not a medical provider, emergency service, pharmacy, or clinical record system.

Information we collect

• Caregiver account details such as name and email address.
• Optional caregiver mobile numbers and SMS consent records when a caregiver chooses text alerts.
• Care-recipient names, relationship labels, schedules, messages, and medication reminders.
• Medication check-in status and timestamps entered by caregivers or a paired tablet.
• Security and operational records such as sessions, device labels, audit events, and IP addresses.

Use the least detail needed

Porchlight Relay works best when families enter only the information needed for coordination. Where possible, use short labels or initials instead of full legal names, and use generic medication labels such as "Morning meds" instead of specific medication names unless the exact name is necessary for safe caregiver follow-up. Avoid adding diagnoses, financial details, account numbers, or other sensitive details that caregivers do not need.

How we use information

We use information to operate the private care circle, synchronize the day page, send requested notifications, secure accounts, prevent abuse, troubleshoot problems, and maintain backups and audit history.

Text messaging privacy

Porchlight Relay text alerts are optional. If a caregiver enters a mobile number and opts in to SMS alerts, that mobile number and SMS consent record are used only to provide requested Porchlight Relay text notifications and related support.

Text messaging originator opt-in data and consent are not shared with any third parties, affiliates, or lead generators for marketing or promotional purposes. We do not sell mobile numbers or SMS consent data.

When information is shared

Care-circle information is shared with authorized members of that circle and service providers that host, secure, monitor, or deliver the service. Current providers include Render for hosting and databases, Resend for transactional email, Better Stack for service monitoring, and Twilio for text-message delivery if SMS alerts are enabled. We do not sell personal or consumer health information or use it for targeted advertising.

Retention and deletion

Active care-circle data remains until the owner deletes the care circle. Account security and operational records are retained only as needed for security and service operation. Deletion removes active data; encrypted backup copies expire according to the hosting provider’s backup schedule unless retention is legally required.

Your choices

The care-circle owner can download a readable JSON copy of care-circle data, manage access, revoke tablets, and permanently delete the care circle from Settings. Caregivers may ask the owner to correct or remove information.

Security and incidents

We use encrypted connections, hashed credentials, role-based access, passkeys, session controls, audit logs, backups, and external monitoring. No system is perfectly secure. We will investigate suspected incidents and provide legally required notices.

Children and authorization

Porchlight Relay is intended for adults. A caregiver adding another person’s information must have permission or other lawful authority to do so.

Contact and changes

A working privacy email and postal contact will be published before public launch. Material changes will be posted with a new effective date.