Private means private.
A care record is some of the most personal information a family has. Here is how Kithra is designed to treat it — in plain English, with no security theatre.
You control access
You decide who sees what, section by section, for each person you invite. A record for a child is held by the family who set it up, and can be shared with a carer they choose. You can reduce or remove anyone’s access at any time. Every time someone opens a health section, or access is changed, it is written to a history the family can read.
Encryption
Data is encrypted in transit (TLS) and at rest. Sign-in is protected by a PIN lock after inactivity on shared devices.
Your rights under UK GDPR
The person the information is about keeps their data-protection rights. You can use the controls in the product, or ask us to give you a copy, correct something, export it, pause our use of it, object, or delete it. We will ask you to confirm who you are first — so nobody else can ask for someone’s care record — and we answer within one month.
Export any time
Whoever set the vault up can export it, any time, in a format other software can read. For a child’s record we check who is asking and whether it is right for the child before we send it.
No selling, no ads
Care records are never sold and never used for advertising. There are no advertising slots anywhere in the product.
Not a medical device
Kithra records and organises information. It does not diagnose, interpret information clinically, or replace professional advice. In an emergency, always call 999.
How your information is protected is described above. See also our privacy notice for how personal data is handled.
Access, drawn as a picture.
Owner
Whoever set the vault up can invite or remove people, choose what each of them sees, and use the data-rights controls.
Circle members
The people you invite see only the sections you gave them. Nothing else is visible, and nothing is shared outside the circle.
Carers & professionals
A carer you’ve connected gets working access to the sections you choose, and nothing more. That applies whether the person cared for is an adult or a child — you choose either way.
A private record, with access kept deliberate.
Read the full policies, or just start — access control is built into the free tier too.