Support / Privacy & data

Privacy & data

Binda holds deeply private information about someone you love. Here’s how it’s protected, who can see it, and how to remove it. For the full legal text, see the Privacy Policy.

How your data is protected

• Row-level security on every table. Your data is isolated at the database layer, not just hidden in the app. A request that isn’t allowed to see a record can’t retrieve it at all.
• No ads. We don’t show advertising.
• No selling data. We never sell your information.
• No third-party tracking SDKs. Binda doesn’t embed advertising or data-broker trackers.
• You choose sign-in. Use Sign in with Apple, Google, or email.

Who can see what

The family coordinator controls access. Roles start with sensible defaults and can be tuned per section:

• A doctor sees clinical information, not finances.
• A family member sees the family feed, not timesheets or clinical notes (by default).
• A caregiver sees their own work, not a coworker’s.
• Photos attached to notes stay inside the care team. An invited doctor never sees them, even with access to notes, and they are never sent to the AI that writes the summary. They reach the family feed only if the care manager deliberately shares them, photo by photo.
• Your own check-in (“How are you doing?”) is private to you. Nobody else in the circle — including the care manager — can read your answers or your result. If you ask your circle for support, they see only the needs you ticked, never a score.
• A paused team member sees nothing at all until the care manager resumes them.

See Team & permissions to adjust these.

Export your data

Your data is never trapped in Binda. Any time, you can download a complete copy of a care recipient’s record — to bring to a new doctor, a discharge meeting, or simply to keep. It’s free, unlimited, and available on every plan, including the free tier and after a subscription lapses.

1. Open Settings → Export my data (on the app or the web portal).
2. Choose what to include — medications, journal & notes, tasks, and documents (all selected by default).
3. Tap Export. Binda prepares a ZIP in the background — you can leave the screen.
4. When it’s ready, download it from the same screen. The link is private and time-limited.

The bundle contains readable PDFs (a medication log and journal you could hand to a physician) and raw CSV spreadsheets, plus your original uploaded documents and any photos attached to notes, as-is. You only ever export what you already have permission to see, and every export is logged so others with access to the record can see it happened.

Who we share data with

Binda relies on a small set of trusted service providers to run the app — never advertisers or data brokers. These include our database and authentication provider, our payment processors (Apple, Google, and Stripe), our email provider and, only when a care manager has turned it on, the AI service behind summaries. The full list, and what each one receives, is in the Privacy Policy.

Three places you decide

• AI help (note summaries, the week-at-a-glance face, automatic tags, the pill-photo check) sends notes — or the photo — to Anthropic’s Claude. It is off for every circle until the care manager turns it on, in the AI summary page or Plan settings → Privacy, and can be switched off again at any time. The decision is recorded. See how it works.
• Calendar sharing copies the schedule into whichever calendar app you subscribe with. Binda explains this before the link opens, and the care manager can stop calendar sharing for every subscriber at once. See putting the schedule in your calendar.
• Email notifications never carry care details. An email says that something happened — a new note, a reply, a request — and asks you to open Binda; the detail waits inside the app, behind your sign-in.

How to delete your account and data

You can delete your account any time, right inside the app:

1. Open Settings.
2. Tap Delete account.
3. Confirm. Your personal data is removed.

Can’t open the app? Email support@binda.health from the address on your account (subject: “Delete my account”) and we’ll delete it for you. We verify the request comes from your account’s email, then remove your data — no need to sign in or reinstall.

What’s deleted: your sign-in credentials, name, profile photo, and personal contact details. What’s retained: care records you created for a family’s care plan are kept as part of that person’s care history and re-attributed to “Former caregiver” (see below). Requests are processed within 30 days.

Privacy FAQ