Privacy policy
Effective September 26, 2026
The short version: your family's records are yours. Only you and the people you invite can see them. We do not sell your information, show ads, or use tracking cookies.
What we collect
- Your account: your email address and a scrambled (hashed) version of your password. We never see or store your actual password.
- What you record: the names you enter for the person you care for and their household, medical expenses (dates, amounts, who was paid, what was paid back), drives to appointments, caregiver agreements and hours, and notes.
- Files you add: photos and PDFs of receipts, statements, and signed care agreements.
- Plan details: whether you have a plan and when it renews. Card details are entered on Stripe's page and held by Stripe. We never see your full card number.
- Security records: failed sign-in attempts and the network (IP) address they came from, kept for a short time to stop password guessing. A history of changes to each record ("who entered what"), shown to everyone with access to that record.
- Help messages: anything you send us through the Help page, with your email.
We do not ask for Social Security numbers or VA file numbers, and we ask you not to enter them.
How we use it
- To run VetCareLog: keep your record, total it, and build your worksheet, receipts binder, and spreadsheet. The worksheet and binder are made on your own device.
- To manage your plan and free trial.
- To send the emails you ask for: password reset links and, if you leave them on, a monthly reminder. Reminders never include medical details, and every one has a one-click way to stop them.
- To keep accounts safe and to answer your questions.
We do not sell or rent your information, use it for advertising, or share it with the VA or anyone else on your behalf.
Who can see your records
You, and the people you invite to that record, with the access you choose (add and edit, or view only). We can reach stored information only when it's needed to run the service, keep it secure, answer a request from you, or meet a legal obligation.
Companies that help us run VetCareLog
These providers process information only to provide their part of the service:
- Cloudflare hosts the website and stores receipt files.
- Turso hosts the database.
- Stripe handles payments.
- Brevo sends email, once email is switched on.
- Google Fonts provides the lettering on our pages, which means your browser asks Google's servers for font files.
Cookies and storage on your device
We use one cookie to keep you signed in. Your browser also remembers a few preferences, such as which person you last viewed, whether you paused motion, and whether you hid the getting-started list. We use no advertising or tracking cookies.
Keeping it safe
Connections are encrypted (HTTPS). Passwords are stored only as a hash. Every request checks that you have access to the record. Sign-in pauses after repeated wrong passwords. Invite links work once, only for the invited email.
Your choices
- Download your data: Plan and settings, then Download my data.
- Delete your account: Plan and settings, then Delete my account. This erases the records you own and their files, and cancels any plan. Entries you added to someone else's record stay part of their record, shown as added by a former member. Deleted information may remain in encrypted backups for a limited time before it is overwritten.
- Stop reminder emails: the link in any reminder, or the switch in Plan and settings.
Health information
VetCareLog is a record-keeping tool you choose to use. It is not a health care provider, health plan, or part of the VA. We protect what you record as private and use it only as this policy describes.
Children
VetCareLog is for adults. Accounts are not for anyone under 18.
Changes
If we change this policy in a way that matters, we'll update the date above and tell account holders before the change applies.
Questions
Send us a message on the Help page.