Your care information stays yours.

The person remains the authority

You choose the support purpose, the information involved, the audience and the expiry. You can review, correct, pause, revoke or delete access. A role such as family member, coach or care partner does not create access by itself.

What a private update may contain

A deliberately limited update can include a result label, estimate, unit, confidence or uncertainty, source, time and the minimum context needed to understand it. It has a named audience and a bounded expiry.

What it excludes by default

Raw measurements, raw observations, medical records, diagnoses, medications, household transcripts, prompts, access tokens and unrelated household activity are excluded. Private care information does not enter public stories, general search, advertising, recommendations or model training.

How access is checked

Opening a private update requires the authorized account and device, an active grant, current membership, a valid signature and an unexpired artifact. Access is denied when any required condition is missing. Occupancy, a family role or access to a NuaHome household is not proof of identity or consent.

Care-circle boundaries

• An invitation names an exact person, purpose and duration.
• Access to one update does not expose messages, cameras, household history or other support paths.
• Revocation stops future access and invalidates cached private updates.
• NuaCares warns that someone may retain a screenshot or export made before access ended.

Medical and safety boundary

NuaCares supports reflection, preparation and coordination. It is not a medical device, diagnosis service, treatment provider or emergency response service unless a separately certified capability explicitly states otherwise. Contact a qualified clinician for medical decisions and local emergency services when someone may be in immediate danger.