Privacy Policy

Last updated 30 August 2026

The short version

Every family gets its own server instance. Your records and knowledge pages live on that instance and nowhere else. We do not sell your data, we do not share it with other families or with advertisers, and we do not keep a copy of it outside your server.

One important exception: to analyse documents and answer questions, the service sends the relevant content to third-party cloud AI providers. Section 4 explains exactly what that means.

1. One family, one instance

Your subscription provisions a server instance dedicated to your family: a virtual private server we set up for you, or a physical computer you keep at home. It is not a shared account on a shared system. Medical records, uploaded documents, everyday log entries and knowledge pages are stored on that instance. Other families run on their own instances and cannot reach yours.

2. What we do not do with your data

We do not sell or rent your health information. We do not use it for advertising. We do not pool it with other families' data, and we do not use it to build or train our own models. We do not retain your records beyond your private server: there is no central database of family health records at our end.

3. What we do hold

To run the service we hold account and billing details: the subscriber's name, email address, and the subscription status. Payments are processed by our payment provider, and we never see your full card details. We also hold operational information needed to keep your instance running, such as server status and error logs. Where those logs could contain fragments of your content, we keep them only as long as needed to fix the problem.

4. Cloud AI providers

The service depends on large language models that do not run on your instance. To read a document, structure a lab report, interpret something you have typed, revise a knowledge page, or answer a question, the service sends the relevant content to third-party cloud AI providers over an encrypted connection. That content can include medical records, test results, log entries, and the questions you ask.

Those providers process the content to return a result. We use them under commercial terms rather than consumer ones, and we select providers that state they do not use business API content to train their models. Their retention windows, security practices and legal obligations are theirs, not ours, and they may change. We cannot guarantee how a third party handles data on its own systems.

If you are not comfortable with health information leaving your instance for this purpose, this service is not the right fit, because the analysis cannot be performed without it.

5. Who in your family can see what

You decide who is invited to your instance and what is shared with them. Anyone you invite can see the records shared with them. When you add another person's health information, you confirm you have the right to do so and their consent where consent is required. Removing a member removes their access, not the records themselves.

6. Security

Access to your instance requires authentication, and traffic to and from it is encrypted in transit. If your instance is a computer in your home, its physical security is yours to manage. No system is perfectly secure, and we cannot promise that a determined attacker will never succeed.

7. Retention, export and deletion

Your data stays on your instance for as long as your subscription is active. You can export your records and knowledge pages at any time. If you cancel, you may ask us to decommission the instance, which destroys the data on it, or you may keep the machine and the data on it. We retain billing records for as long as tax and accounting law requires.

8. Children

The subscriber must be an adult. A caregiver may keep records about a child in their care. Children should not be given accounts of their own.

9. Legal requests

We cannot hand over records we do not hold. If we receive a lawful demand for account or billing information, we will comply where required, and will tell you unless we are prohibited from doing so.

10. Not a healthcare provider

We are not a healthcare provider and the service is not medical advice. See the Terms of Service for what that means, including what to do in an emergency.

11. Changes

We may update this policy. If a change materially affects how your data is handled, we will tell subscribers before it takes effect.

12. Contact

Privacy questions and data requests: contact@bytefuture.com

Back to Family Vault for Health Powered by ByteFuture