Clear safeguards for a deeply personal kind of information.

NurtureCanvas is a consumer-directed care organizer. This page explains the practical protections built into the service, what our providers do, and what remains under your control.

What NurtureCanvas does

It stores information an adult account holder deliberately enters, keeps separate care profiles organized, and formats selected information into briefs and handoffs. It does not diagnose, recommend treatment, contact providers, or make decisions about a person.

Account protection

• Private records require a signed-in ChatGPT account.
• NurtureCanvas receives the account name and email needed to identify the account; it does not receive a ChatGPT password or conversation history.
• Server-side ownership checks separate each account’s records and uploaded documents.
• Private app pages and record responses are marked not to be stored in ordinary browser caches.

Data and document safeguards

• Connections use HTTPS encryption.
• Uploaded files are limited to supported document and image formats, checked against their reported type, and limited in size.
• Browser security policies restrict framing, device permissions, external connections, and executable content.
• Users can correct records, download a structured backup, and permanently delete saved care data and uploaded documents.

Sharing stays deliberate

Adding a person to the care circle does not grant access. NurtureCanvas does not automatically email, message, or open records to anyone. The account holder must review and deliberately copy, print, save, or otherwise share a brief or handoff.

Core service providers

OpenAI services provide ChatGPT sign-in and Sites delivery; Cloudflare infrastructure provides network, database, and document-storage services; and Stripe processes subscription checkout and billing. NurtureCanvas does not receive a full payment-card number.

Advertising and analytics

NurtureCanvas has no third-party advertising pixels and does not sell personal information or consumer health data. Limited first-party product events may be counted to understand whether people reach key setup steps. These events do not contain care-record text, document names, account email addresses, or advertising identifiers, and NurtureCanvas does not add IP addresses to the product-event table.

Your responsibilities

Use an email account and device only you control, sign out of shared devices, store only information needed for coordination, verify exported information, and share it only with authorized recipients. Foster, kinship, school, employment, legal, and healthcare information may be subject to separate policies or laws.

Questions or suspected exposure

Email info@sailpsych.com for a privacy request, security question, account concern, or suspected unauthorized access. See the full Privacy Policy and Consumer Health Data Privacy Policy for additional details.