Privacy
Carra is made and operated by You & Me Design LLC. In this policy, "we" and "our" mean You & Me Design LLC.
Where your data lives
Your health data is stored on your device, encrypted, and in your own personal iCloud account. We do not operate servers that store your health record. There is no account database of health records anywhere on our side.
What leaves your device
When you ask a question or import a document, the minimum necessary information is sent to our AI processing partner (Anthropic) to generate the answer or extraction. Before it is sent, your name is removed and clinical dates are reduced to month and year. Our own service is a pass-through: it keeps none of your content. It counts each request it handles (what kind, which model, how large) so we can see what running Carra costs and notice when something breaks; nothing about you or your content is in the count. Under our data processing agreement, the AI provider never uses what you send to train models and keeps it no longer than 30 days.
When your medications change, and when you use Ask, Carra may also send that same minimum information — never your name, your providers' names, or exact dates — to check current research on your medications and to keep its own read of your record current. That check can include a web search. When you type a medication's name, it is looked up in the U.S. National Library of Medicine's public list; only the name you type is sent.
Photos and paperwork you import are read on your device; the extracted, structured results are kept and the original image and text are discarded immediately after extraction. A recording is turned into text on your device and the audio is deleted. The text, with names, phone numbers and dates removed, is sent to pull out your notes, the same way a photo's text is, and it isn't kept.
What you share
A briefing or visit prep leaves the app only when you build one and choose to share it, and you review every line before it does.
Analytics and tracking
The app does not track you across other apps or websites and uses no analytics tools. When you sign in, your account keeps a daily note of how Carra is working for you: the app's version, your iPhone's model and iOS version, your plan, when you last opened Carra, whether iCloud sync is working, and how many requests of each kind you made. We keep it for 90 days so we can help when something goes wrong. It never includes your health record or anything you write. The request counts above and, once you sign in, your account's daily note are all we keep about how Carra is used. Nothing is collected for advertising, and nothing is ever sold.
Apple Health
If you connect Apple Health, that data is read on your device with your permission. It is not collected by us.
Deleting your data
You can erase everything at any time from Settings › Delete inside the app. Erasing clears this device and removes the copy in your iCloud. Carra on your other iPhone or iPad erases its copy the next time it opens. Because we hold no copy of your record, there is nothing on our side to delete; requests made in words are honored without conditions.
Your rights
You & Me Design LLC, as the operator of Carra, collects health information only to provide the service you ask it for. You may request access to or deletion of your data, and ask questions about this policy, by writing to support@carra.care. Health data questions are answered by a person. This page will be updated as the app moves from beta toward general release.