Your family’s information, handled carefully.

MayLou is a family care-coordination service headquartered in Pell City, Alabama. When this page says “we” or “MayLou,” that is who you are dealing with. You can reach a real person at hello@maylouonline.com — not a ticket queue.

Information you give us

• Your account: your email address, your name, and a password (stored only as a cryptographic hash — we cannot read it). Optionally a phone number, if you add one.
• About the person being cared for: their name, and optionally their birth year, city, and a photo. If your family fills in the care profile, this extends to date of birth, known health conditions, allergies, fall risk, code status and who holds power of attorney, blood type, religious preference, likes and dislikes, dietary rules, goals of care, emergency contacts, and any vital signs (blood pressure, weight, and so on) that members log. These are among the most sensitive things MayLou holds; they are visible only inside your care hub, protected by the same row-level rules as everything else, and only family members and the coordinator can change them.
• Care information your family enters: medications and their doses, schedules, pharmacy, refill dates, and the history of changes with the reason given; appointments and aide shifts with times and locations; tasks and who they are assigned to; journal notes and any photos attached; and documents you upload to the vault.
• Your preferences: how often you want to be emailed, and which member usually handles which medication slot.

Information we generate

• Activity entries. MayLou writes a journal line when meaningful things happen — a task completed, a medication paused, a member joining. This is the shared record that makes the product work.
• Invitation links, which are random single-use tokens tied to a role.
• A record that you agreed to these documents. When you accept the Terms and this policy, we store your account ID, which version you accepted, and the moment you did it — nothing else. It exists so that both of us can point to what was agreed and when. It cannot be edited afterwards, by you or by us, and it is deleted along with everything else if you close your account.
• Basic technical logs from our hosting and database providers, used to keep the service running and secure.

Information from other services, only if you connect them

• Google sign-in. If you sign in with Google, we receive your email address and name. Nothing else.
• Google Calendar (optional, MayLou Plus). If you choose to connect a calendar, we request read-only access and import only the title, time, and location of events from the calendars you pick. We cannot create, edit, or delete anything in your Google Calendar. Your Google authorization token is stored encrypted in a dedicated secrets vault, never in an ordinary database table. Disconnecting deletes both the token and every imported event.
• Payments. If you subscribe to MayLou Plus, Stripe handles the transaction. We never see or store your card number — we keep only Stripe’s customer and subscription identifiers so we know your hub is paid.

MayLou runs on services in the United States. We use as few as we can, and each one only does one job:

When you choose to prepare a visit summary, the records you selected are sent to Anthropic (our AI processor) to be organized into a draft, which you review before anything is saved or shared. Anthropic does not train on this data and deletes it within 30 days. Nothing is sent unless you tap “Prepare the draft.”

We do not sell your information, rent it, or share it with data brokers, and we do not use it to train artificial intelligence models.

Only people invited to it. Each member holds a role that decides what they can do, and those limits are enforced by the database itself, so they hold even if someone tries to work around the app:

• Coordinator — full access, plus managing members and the plan.
• Family — full access to care information; cannot remove members or delete the hub.
• Aide — can see the schedule, tasks, and medications, add journal notes, and check off medications. Cannot open the document vault, and can only update tasks assigned to them.
• Viewer — the large-print, read-only view intended for the person being cared for. Can see, cannot change anything.

Our team does not read your hub. A small number of people have database access for maintenance and support, and use it only when necessary to fix a problem or when you ask us for help.

• Export everything. Settings → Export gives you a complete machine-readable file and a printable page, at any time, without asking us.
• Correct anything. Every piece of information in a hub can be edited by members with the right role.
• Delete your hub. A coordinator can permanently delete a care hub from Settings. This removes the medications, tasks, calendar, journal, documents, and every membership. It cannot be undone, and we do not keep a shadow copy.
• Delete your account. There is a button for this in Settings. It closes your account and removes you from every hub you belong to, immediately — no request, no waiting period. One thing to know: notes you wrote in someone else’s hub stay with that family as part of their care record, but your name comes off them. That is deliberate. A journal entry describing how someone’s morning went is a record of their care, and erasing it would take something from the family rather than from us. Hubs where you are the only member are deleted outright. If you would rather have those notes removed as well, email hello@maylouonline.com and we will do it by hand within 30 days.
• Choose your email. Notification preferences live in Settings, and every email we send has an unsubscribe path.

If you live in California, Colorado, Connecticut, Virginia, or another state with a consumer privacy law, you have rights to know, correct, delete, and to not be discriminated against for exercising them. The tools above are how we honor those rights for everyone, not just where required. Write to us and we will help.

Your hub’s contents stay until you delete them — care records are worth keeping, and families often look back years later. Deleted hubs are removed from our live database immediately; encrypted backups roll off within 30 days. Expired invitation links are cleaned up automatically. Error reports are kept for 90 days.

• Encrypted in transit (TLS) and at rest (AES-256) by our infrastructure providers.
• Access rules enforced in the database itself, and tested automatically on every change we ship.
• Documents and photos live in private storage, reachable only through short-lived links generated after we check your membership.
• Passwords are hashed, never stored in readable form. Third-party authorization tokens live in an encrypted vault.
• Automated daily backups.

No system is perfect, and we will not pretend otherwise. If a breach ever affects your information, we will tell you promptly and plainly, with what we know and what we are doing about it.

MayLou is built for adults coordinating care and is not directed at children under 13. We do not knowingly collect their information. If you believe a child has created an account, write to us and we will remove it.

If we make a meaningful change, we will update the date at the top and email the coordinator of every active hub before it takes effect. We will not quietly broaden what we do with your information.

Questions, requests, or concerns about privacy go to hello@maylouonline.com, and a person will answer.