Privacy at YPC
Last updated August 28, 2026
The short version
YPC gives patients and the people they invite a private place to coordinate care. We use your information to run your account, show your care circles, send notifications you ask for, and understand basic app use.
People in a care circle can see information shared with that circle. Some health details, including medications and private check-in details, are limited to the patient and confirmed primary caregivers. Choose carefully what you share and whom you invite.
What YPC stores
- Account details. Your name, email address, profile image, and sign-in identity.
- Circle details. Member names and roles, invitations, contact details, care preferences, and details about the patient's condition and care team.
- Content you add. Updates, photos or audio attachments, reactions, polls, check-ins, symptoms, medications and dose records, help requests, notes, visits, questions, and remembrance or legacy entries.
- Notification details. Push tokens, device platform, locale, time zone, notification settings, and delivery records.
- App-use events and errors. If analytics is enabled, PostHog receives event names, error reports, and coarse details such as role, app mode, categories, counts, and flags. Product events exclude names, notes, free text, and patient or caregiver IDs.
- Device copies. The app may keep an encrypted copy of recent circle data on your device so you can read it when the network is unavailable.
Who processes it
| Company | What it does for YPC | Information involved |
|---|---|---|
| Clerk | Account sign-in and identity | Account and authentication details |
| Convex | App database and server functions | Account copies, circle content, settings, and push tokens |
| Vercel | Hosts these public web pages | Web requests and standard hosting logs |
| PostHog | Product analytics and error reporting, when configured | Coarse app-use events and diagnostics |
| Expo | Relays mobile push notifications to Apple and Google | Push tokens and notification content |
| Apple and Google | Deliver mobile push notifications | Push tokens and notification content |
These companies process information for the services listed above. Their own policies also apply when they process information for YPC.
How long YPC keeps information
YPC keeps account and circle information while the account or circle is active. Account deletion removes your account details, settings, push tokens, and care circle memberships. It also removes content tied to those memberships, except for two types of shared circle content. Love notes already released to a circle remain, but the author name changes to "Someone from your circle." Saved places remain without a link to the member who added them. If the departing member is the patient, or no other patient or represented primary caregiver remains, the app deletes the whole circle and all of its content. Encrypted offline circle copies expire after seven days.
Some de-identified or aggregated analytics and crash information may remain after account deletion. Service providers may also keep limited backups or logs under their own retention rules.
Delete your information
You can delete your account inside the app. If you cannot sign in, you can ask us to do it for you. Read the steps and what deletion affects on the account deletion page.
Questions
Email joethorngren@gmail.com with questions about this policy or your information.