Encrypted before relay storage
Care content is designed to be encrypted on an approved iPhone before it leaves the device.
Privacy architecture
Readable on approved devices. Encrypted in between.
Care Relay is being built so the shared service can move care information without holding the keys needed to read it.
This explains the product architecture. A final legal privacy notice will be published before public release.
01Approved iPhoneReadable locally
02Encrypted relayCiphertext only
03Approved iPhoneReadable locally
The encrypted path
Four deliberate steps. No hidden back door.
- 01
Review
A family member checks the source on an approved iPhone.
- 02
Encrypt
The app encrypts the care content before it leaves the device.
- 03
Relay
The service stores and delivers an unreadable encrypted package.
- 04
Open
Another approved device decrypts the relay for local use.
Product commitments
Less data. Fewer assumptions.
Privacy is a product constraint, not a setting added later.
Keys stay with the family
The relay service is not designed to possess the keys needed to decrypt shared care content.
Metadata is kept narrow
The service needs limited account, device, membership and routing information to deliver encrypted packages.
No advertising or profiling
No behavioural advertising, cross-app tracking, data brokerage or third-party analytics SDKs.
Recovery without a back door
The organiser holds the recovery path.
Care Relay uses approved organiser devices and a user-held Recovery Kit. StrataLane cannot recreate a lost Recovery Kit or recover readable care content.
Anyone with the Recovery Kit and account access may be able to recover the circle. It should be stored somewhere private and separate from the iPhone.
Clear limits
What Care Relay does not do.
- It does not store shared care content in iCloud.
- It does not upload or continuously mirror an address book.
- It does not collect background location or HealthKit data.
- It does not sell care data or use it for advertising.
- It does not ask people to send care content or a Recovery Kit in ordinary support requests.