Privacy and security
How we protect your family's sensitive information.
Data encryption and protection
All data is encrypted in transit and encrypted at rest by our database provider. This means your information is protected whether it is being sent between your device and our servers or stored in the database. The app is hosted on Cloudflare, and your care data is stored with Supabase.
Row-level security and access control
Senior Support Resources uses Supabase with Row Level Security (RLS), which means access control is enforced at the database level, not just in the application code. Every database query is filtered by the requesting user's permissions. Even if there were a bug in the application code, the database itself prevents unauthorized access to data belonging to other care circles. You can only see data for circles you are a member of, and your role within the circle determines what actions you can perform.
Two-factor sign-in
If you manage a care circle (you created it or you are its primary caregiver), SeniorSupport asks for a six-digit code from an authenticator app on your phone each time you sign in, as well as your password. Family members and helpers you invite are not asked. You set it up the first time you sign in after it applies to you: scan a QR code with an app such as Google Authenticator, Microsoft Authenticator or 1Password, type the code it shows, then save the ten recovery codes you are given. Each recovery code works once. If you lose your phone, choose "Lost your phone? Use a recovery code" on the sign-in page: your old authenticator is removed, every device is signed out, and you set up your phone again. Two-factor cannot be turned off while you manage a circle. Setting it up signs out every other device, so a password alone never reaches your family's records.
What we never do with your data
We never sell your data to anyone, for any reason. We never show advertisements. We never share your information with third parties for marketing purposes. We never use your care data to train machine learning models. The only third parties that process your data are the service providers that run the app (hosting, database, email delivery, and product analytics), listed in our Privacy Policy. We do not monetize your data in any way.
Not a HIPAA service
Senior Support Resources is a caregiving coordination tool for families. It is not a covered entity under HIPAA and is not HIPAA compliant. We still take care with your data: members see only the care circles they belong to, data is encrypted in transit and at rest, passwords are hashed, and circle managers sign in with two-factor codes.
Tips for keeping your account secure
Use a strong, unique password that you do not use for other accounts. Do not share your login credentials with other family members; invite them to create their own accounts instead so that each person's activity is tracked individually. Log out when using shared or public computers. If you suspect unauthorized access to your account, change your password immediately. Contact support at support@seniorsupportresources.com if you notice any suspicious activity or have security concerns.