Relay
Relay privacy policy
Last updated 14 September 2026.
Relay replaces the seven sibling group chat with one typed feed about the person everybody is caring for. This policy explains what is kept and who sees it.
Most of what is stored is about someone else
This is the part that matters most, so it is here rather than at the bottom. The medications, appointments and updates in Relay describe the health of the person being cared for, and that person is usually not the one who set the circle up.
If they can be asked, ask them. A care circle formed around somebody without their knowledge is a decision about their autonomy, and it is not one this app can make or verify for you. If they cannot be asked, the authority you are relying on is a legal one that exists outside this app.
Who in the circle sees what
There are no private notes and no way to hide an update from one particular sibling. Family members all see the same feed, which is deliberate: the app exists so that the same facts reach everybody, and a feed with entries hidden from chosen people would recreate the problem it was built to solve.
There is one exception, and it is the only one. A helper, meaning a paid carer or a neighbour rather than family, sees the medical, mood and day-to-day updates and never sees financial updates at all. That is enforced by the database rather than by hiding a tab, so it holds regardless of which screen anyone opens. The role travels on the invite code, so it is set by whoever invites, not chosen by whoever joins.
Write updates on the assumption that every family member will read them.
What is stored
- Your email address, and whether the subscription is active.
- The circle, its members and the invites sent.
- Every update posted, with who wrote it and when.
- Medications, appointments and providers recorded for the person being cared for.
What is not stored
No password, because there is not one. Signing in is by a code sent to your email address. No location tracking, no clinical records from any provider, no insurance details and no payment card details. Relay holds what the family types, not anything drawn from a medical system.
Who can see it
Members of the circle, and nobody else using the app. Every table checks the signed in account against circle membership before returning anything. There is no clinician view and no access for any provider named in it. We do not sell any of it and we do not send it to advertisers. Nothing is sent to a language model.
Who else is involved
Supabase hosts the database and sends the sign in codes. RevenueCat sits between the app and the app store and tracks whether your subscription is active, receiving the purchase events and an identifier for your account. Apple handles the payment itself; card details go to Apple and never to us.
Deleting it
Deleting your account removes your own membership and profile. Updates you posted remain in the circle's feed, because a shared care record that developed gaps when one sibling left would be unreliable for the people still using it. Deleting the circle itself removes everything in it for everybody.
Contact
Relay is published by Jeffrey L Carrier.