Support / Privacy & data

Privacy & data

Binda holds deeply private information about someone you love. Here’s how it’s protected, who can see it, and how to remove it. For the full legal text, see the Privacy Policy.

How your data is protected

• Row-level security on every table. Your data is isolated at the database layer, not just hidden in the app. A request that isn’t allowed to see a record can’t retrieve it at all.
• No ads. We don’t show advertising.
• No selling data. We never sell your information.
• No third-party tracking SDKs. Binda doesn’t embed advertising or data-broker trackers.
• You choose sign-in. Use Sign in with Apple, Google, or email.

Who can see what

The family coordinator controls access. Roles start with sensible defaults and can be tuned per section:

• A doctor sees clinical information, not finances.
• A family member sees the family feed, not timesheets or clinical notes (by default).
• A caregiver sees their own work, not a coworker’s.
• Photos attached to notes stay inside the care team. An invited doctor never sees them, even with access to notes, and they are never sent to the AI that writes the summary. They reach the family feed only if the care manager deliberately shares them, photo by photo.

See Team & permissions to adjust these.

Export your data

Your data is never trapped in Binda. Any time, you can download a complete copy of a care recipient’s record — to bring to a new doctor, a discharge meeting, or simply to keep. It’s free, unlimited, and available on every plan, including the free tier and after a subscription lapses.

1. Open Settings → Export my data (on the app or the web portal).
2. Choose what to include — medications, journal & notes, tasks, and documents (all selected by default).
3. Tap Export. Binda prepares a ZIP in the background — you can leave the screen.
4. When it’s ready, download it from the same screen. The link is private and time-limited.

The bundle contains readable PDFs (a medication log and journal you could hand to a physician) and raw CSV spreadsheets, plus your original uploaded documents and any photos attached to notes, as-is. You only ever export what you already have permission to see, and every export is logged so others with access to the record can see it happened.

Who we share data with

Binda relies on a small set of trusted service providers to run the app — never advertisers or data brokers. These include our database and authentication provider, our payment processors (Apple, Google, and Stripe), our error-reporting and product-analytics tools (which you can opt out of), and our transactional email provider. The full list, and what each one receives, is in the Privacy Policy.

How to delete your account and data

You can delete your account any time, right inside the app:

1. Open Settings.
2. Tap Delete account.
3. Confirm. Your personal data is removed.

Can’t open the app? Email support@binda.health from the address on your account (subject: “Delete my account”) and we’ll delete it for you. We verify the request comes from your account’s email, then remove your data — no need to sign in or reinstall.

What’s deleted: your sign-in credentials, name, profile photo, and personal contact details. What’s retained: care records you created for a family’s care plan are kept as part of that person’s care history and re-attributed to “Former caregiver” (see below). Requests are processed within 30 days.

Privacy FAQ