Privacy & Security

Your health data deserves the highest protection

We know your health information is among the most personal data there is. That's why security and privacy aren't afterthoughts — they're foundational to everything we build.

How we protect you

Security built into every layer, not bolted on as an afterthought.

Data Security

Little C uses encrypted connections and database access controls. Some information is also stored in your browser; not all local data is encrypted. See the Privacy Policy for details.

We Never Sell Your Data

We do not sell personal or health information or share identifiable health data for advertising. Service providers still process information to operate Little C.

An Independent Companion

Little C is an independent, direct-to-consumer breast cancer companion. We do not claim HIPAA compliance or that your use of Little C is covered by a Business Associate Agreement (BAA).

Sharing You Choose

You can share information with caregivers, community members, or visitors to a public page. Recipients may keep copies of what you share.

Service Providers

Supabase stores account and health information, and Vercel hosts the app. Other providers support email, SMS, and rate limiting. See the Privacy Policy for their roles.

Transparent AI Processing

AI features send information to Anthropic or OpenAI; document analysis sends text to both. Vendors publish default API training exclusions, but may retain data. Little C has not verified account-specific protections and does not promise zero retention. See the Health Data Notice for details.

Your rights

Use these options to manage your information.

Access & Export

Download a JSON export of supported account and health records from Settings. Contact us for information not included in the export.

Deletion

Request account deletion in Settings. Provider records, backups, and copies shared with others may remain; see the Privacy Policy.

Correction

Edit your profile, health records, and personal information directly in the app.

Privacy Controls

Manage your matching profile in Community and caregiver roles in the Guardian Portal. The account AI setting disables Little C AI features and revokes external assistant connections. Re-enabling requires reconnecting assistants.

AI and your data

When you use our AI features — like the Navigator, document analysis, or symptom tracking — your health context is sent to third-party AI providers to generate personalized responses. Here's what you should know:

AI features use Anthropic and OpenAI; document analysis sends content to both providers

Messages, attachments, profile details (including your name), and relevant health records can be sent to generate responses

Provider retention and model-training use depend on applicable terms and account settings

Information is processed by Little C and its service providers, and may be accessed for operations and support

Deleting information in Little C does not recall copies already shared with others

Questions about your data?

We're happy to answer any questions about how we handle your information. Your trust means everything to us.