Privacy Policy

Last updated: October 12, 2026

Overview

Esperanza Health ("the App") is built by Esperanza Health ("we," "us," or "our"). We take your privacy seriously. This policy explains what data the App collects, how it is stored, and your rights regarding that data.

The short version: your data stays on your device and in your personal iCloud account. We never see it, collect it, or share it. If you choose to share a patient's record with family through Care Circle, Apple's iCloud delivers it only to the people you invite.

Data Storage

All data you enter into Esperanza Health — including patient profiles, medications, appointments, vitals, documents, voice recordings, care team information, and emergency card details — is stored locally on your device using Apple's Core Data framework.

Your data automatically syncs to your personal iCloud account via Apple's CloudKit. This sync is managed entirely by Apple and is subject to Apple's privacy policy.

When you fill in a medication from a photo of its label, the App reads the label on your device, using Apple's text recognition and, on iPhones with Apple Intelligence, Apple's on-device model. The photo is not kept, and nothing is sent to Apple's servers or to us.

Data We Collect

We do not collect any personal data. Specifically:

• We do not collect names, email addresses, or contact information
• We do not collect health or medical information
• We do not collect location data
• We do not collect usage analytics or telemetry
• We do not use cookies or tracking technologies
• We do not collect device identifiers
• We have no user accounts or login systems

Voice Recordings and AI Transcription

The App allows you to record voice memos related to healthcare visits and conversations. All voice recordings are stored locally on your device. AI transcription is performed entirely on-device using Apple's built-in speech recognition framework.

No audio data is sent to external servers, and no third-party AI services are used.

Third-Party Services

Esperanza Health does not integrate with any third-party analytics, advertising, or data collection services. The only external service involved is Apple's iCloud (CloudKit), which syncs your data automatically when signed into your Apple ID and, if you use Care Circle, shares a patient's record with the people you invite.

Care Circle (Sharing a Patient's Record)

Care Circle lets you share one patient's record with family members or other caregivers you choose. Sharing is always started by you and is off until you invite someone.

• Who can see it. You invite each person by the email address of their Apple ID. Only the people you invite can open the record; a forwarded link does not work for anyone else. To find the person, the address you type is sent to Apple's iCloud, not to us.
• What they see. Everyone you invite sees the whole record of that patient, including medications, appointments, vitals, documents, insurance, and emergency contacts. Voice recordings stay on the device that made them and are not shared.
• What they can do. You choose a role for each person: a Caregiver can add and edit; a Viewer can only look. You can change a role or remove a person at any time.
• Where it is stored. The shared record stays in your iCloud account. Apple's iCloud sharing keeps a copy on each invited person's device so it works offline. The record never passes through our servers, because we have none.
• Who did what. Each change is shown in the patient's Activity list with the name of the person who made it, taken from their iCloud name or the name they set in the App, so everyone in the Care Circle can see who added or changed something.
• Ending sharing. If you stop sharing, the record is removed from everyone else's devices and stays on yours. If someone leaves, the record is removed from their device and nothing is deleted for anyone else. If you delete a shared patient, or use "Delete All Data", the record is removed for everyone in the Care Circle.

The App keeps the names and Apple ID email addresses of the people in a patient's Care Circle on your device so it can label activity. They are removed when the patient is deleted from your device.

Data Sharing

We do not share, sell, rent, or trade your data with any third parties. Since we never have access to your data in the first place, there is nothing for us to share.

The only ways your data leaves your iCloud account are the ones you choose: Care Circle, described above, and exports.

The App does allow you to export certain information (such as emergency cards as PDFs) for your own use. Any sharing of exported data is initiated and controlled entirely by you.

Data Retention and Deletion

Since all data is stored on your device and your iCloud account, you have full control over it at all times. You can delete individual records within the App, or delete all data using the "Delete All Data" option in Settings.

Uninstalling the App removes all locally stored data. To remove iCloud data, you can manage this through your device's iCloud storage settings.

Children's Privacy

Esperanza Health is not directed at children under the age of 13. The App is designed for adult caregivers managing healthcare for their loved ones. We do not knowingly collect any information from children.

Security

Your data is protected by the security measures built into your Apple device, including device encryption, passcode/Face ID/Touch ID protection, and Apple's iCloud encryption. Since we do not transmit or store your data on any external servers, there is no additional attack surface beyond your own device and iCloud account.

Changes to This Policy

If we update this Privacy Policy, we will post the revised version within the App and update the "Last updated" date above. Continued use of the App after changes constitutes acceptance of the updated policy.

Contact Us

If you have any questions about this Privacy Policy, please contact us at: feedback@esperanzahealth.app

Your Rights

You have complete control over your data at all times. You may view, edit, export, or delete any and all data stored in the App. No request to us is necessary — the App gives you direct access to manage everything.