Privacy Policy

Last updated:

The short version. We collect the least we can get away with. No ads, no trackers, no selling data, no sharing with data brokers. The health-adjacent things a circle records — check-ins, medication doses, care notes — are visible only to the people invited to that circle.

Who we are

Lantern is operated by [YOUR COMPANY NAME], [address]. For any privacy question, or to exercise the rights below, email privacy@example.com.

What we store

Account: your email address, your name if you give one, and a salted, hashed password. We never store your password itself.
Circle: the name you give the person you care for (e.g. "Mom"), their timezone, and the check-in schedule you choose. We do not ask for their full name, address, date of birth, or any identity document.
Activity: check-ins, help presses and their short description, medication names, doses and times, whether a dose was marked taken, phrases spoken with the tap-to-speak feature, and notes written by family members.
Notifications: a push subscription token per device, so we can alert you.
Billing: if you subscribe, Stripe processes the payment. We store your Stripe customer and subscription identifiers and your plan status. We never see or store your card details.

Sensitive information

Medication names and care notes can reveal health information. We treat this as sensitive: it is stored to provide the service to the circle you chose, it is never used for advertising or profiling, and it is never sold or shared for anyone else's marketing. Only members of that circle, and the person's own paired device, can read it.

Lantern is a consumer tool for families. It is not a medical record system and is not intended for use by healthcare providers as a clinical record.

What we do not do

No advertising. No advertising identifiers. No analytics or tracking pixels from third parties. No location tracking. No microphone or camera access. No sale of personal information. No sharing with data brokers.

Who processes data on our behalf

Cloudflare — hosting, database and delivery.
Stripe — payment processing, if you subscribe.
Resend — sending urgent alert emails, if email alerts are enabled.
Your browser's push service (Apple, Google or Mozilla, depending on your device) — delivering notifications. They receive an encrypted payload.

How long we keep it

Activity stays until you delete the circle or your account. If you cancel a paid plan, we do not delete your history — you simply see a shorter window of it until you upgrade again. Delete your account and we remove your account, your circles you own, and their activity within 30 days.

Your rights

Depending on where you live (including under UK/EU GDPR and similar laws), you can ask us for a copy of your data, ask us to correct it, ask us to delete it, or object to processing. Email privacy@example.com and we will respond within 30 days. You may also complain to your local data protection authority.

Children

Lantern is not directed at children under 13 and we do not knowingly collect their information.

Consent of the person being cared for

If you set up a circle for another adult, you are telling us that they know about it and agree to it, or that you have the legal authority to make that decision for them. Please do not use Lantern to monitor an adult without their knowledge.

Changes

If we change this policy we will update the date above and, for anything significant, tell you by email.

Lantern is not a medical device, medical alert service, or emergency service. See our Terms.