Kithwell Privacy Policy

Kithwell is operated by Orbitia Labs LLC ("we," "us," "our"). This policy explains what information Kithwell collects, how we use it, and the choices you have. If you have questions, contact us at support@orbitialabs.com.

What we collect

Account information. Your email address, used to sign you in via a one-time code we send you. We don't use passwords.

Care circle data. Everything you and the members of your care circle enter into the app: medication names, dosages, schedules, and instructions; blood pressure, glucose, and weight readings; task and calendar entries; journal updates and notes; and, if you use the emergency Binder feature, allergies, medical conditions, blood type, advance directive status, and power-of-attorney name.

Photos. If you use the label-scan feature, a photo of a medication label is sent to Anthropic (maker of the Claude AI models) to extract the medication name, dosage, and instructions, then discarded — we don't retain the photo itself. You confirm and can edit everything before it's saved — nothing saves automatically from a photo alone, and if the label can't be read clearly, we tell you rather than guess.

Circle membership information. Names, initials, and roles (organizer, coordinator, or limited/aide access) of everyone you invite into a care circle.

Billing status. Whether a circle has an active Kithwell Plus subscription. We do not receive or store your card number — purchases go through Apple's or Google's payment systems directly.

Device push token. If you enable notifications, a token that lets us deliver alerts (like a missed dose or an upcoming refill) to your device.

Usage information. Basic technical data needed to operate the app — for example, error logs if something breaks, so we can fix it.

How we use it

We use your information solely to provide the Kithwell service to you and the members of your care circle: storing and syncing medications, vitals, tasks, calendar events, journal updates, and Binder information across everyone you've invited; sending you sign-in codes and, if enabled, push notifications about a missed dose or refill; billing the circle organizer for Kithwell Plus, if the circle has upgraded; and diagnosing and fixing bugs.

What we don't do

• We do not sell your data or your family's health information, to anyone, ever.
• We do not run ads, and we never will. We don't share your data with advertisers or data brokers.
• We do not use your health data to train AI models beyond the specific, opt-in features you use directly — see "AI features" below.

Who we share it with

We use a small number of service providers to operate Kithwell, each bound by their own data-processing terms:

• Supabase (hosting, database, and authentication) — stores all account and care-circle data. Access to any circle's data is restricted to that circle's members only, enforced at the database level.
• Resend (email delivery) — sends sign-in codes. Resend sees your email address and the content of transactional emails we send; it does not have access to your medications, calendar, or other care data.
• Anthropic (label-scan reading and visit-prep summaries) — receives a medication label photo when you use the scan feature, or your circle's current medications, recent updates, and next appointment when you tap to generate a visit-prep summary. Anthropic does not train its models on this data, and retains it only as long as needed to return a result.
• RevenueCat (subscription management) — receives purchase and subscription status to manage Kithwell Plus across the App Store and Play Store.
• Apple / Google — deliver push notifications and process in-app purchases through each platform's own infrastructure.

We do not share your information with any other third party, and we do not permit these providers to use your data for their own purposes.

AI features

Kithwell's AI features only ever draw on information already in your circle, and never share anything automatically. Label scanning turns a photo into an editable, structured entry that you must review and confirm before it saves. The opt-in visit-prep summary drafts talking points for an upcoming doctor's visit from your circle's current medications, recent updates, and next appointment — a person you designate reviews, can edit, and chooses whether to post it before anyone else in the circle sees it.

Your choices and rights

• Consent is layered, not bundled: adding health information to your circle and sharing it with a named third-party feature (like label scanning or the visit-prep summary) are two separate choices — using one doesn't automatically enable the other.
• Notifications can be turned off at any time in your device's system settings.
• Access and export: you can view everything in your account through the app at any time, and the Binder tab lets you generate a PDF of a patient's medications, vitals, and (on Kithwell Plus) full journal history whenever you need it.
• Deletion: you can request deletion of your account and associated data by contacting support@orbitialabs.com. Deleting the organizer's account does not delete data belonging to other members of a shared circle.
• Free tier data retention: we will never retroactively hide or lock data you already had access to, even if you don't upgrade to a paid tier. This is a permanent commitment, not a promotional offer.

Children's privacy

Kithwell is not directed at children and is not intended for use by anyone under 18 without the involvement of an adult family member managing the account.

Security

Data is encrypted in transit. Access to any care circle's data is restricted by row-level security policies scoped to that circle's membership — no member can read another circle's data, and no one outside a circle can read it at all.

Changes to this policy

If we make material changes to this policy, we'll notify active users by email before the changes take effect.

Contact us

OrbitiaLabs
support@orbitialabs.com