Encrypted in transit and at rest
Every connection uses HTTPS. Backups are encrypted before they leave our servers, and sensitive financial details are encrypted in the database.
Security
Your family’s hardest conversations, kept safe.
Care planning means sharing health wishes, money, and private reasoning. We treat it as the most sensitive data there is — hosted in the EU and built to GDPR from the start.
Privacy by design
Security is how we build, not something we add
Families trust us with conversations they have never had out loud. So the same protections apply to every family on every plan — free or paid — and they are part of how each feature is built, not a setting you have to find.
Read our privacy policyWe build to the EU General Data Protection Regulation: a lawful basis for every kind of data we process, a register of every service provider that touches it, and your rights honoured — access, export, correction, and deletion.
Our application, database and background services run in the European Union (Amsterdam), and backups are stored in the EU.
Optional tracking — such as session replay used to diagnose errors — only runs if you agree to it in our cookie settings.
Export your data in a portable format, correct what is wrong, withdraw consent, or ask us to delete your account and personal data.
Security controlsSecure defaults,
Secure defaults,
for every family
The same protections for everyone — never a paid add-on.
Private recordings
Video and audio answers play through signed, expiring links — only people with access to your care team can open them.
Access is logged
Sensitive access is recorded — including every time a Care Fund account number is revealed — so it can always be reviewed.
We never hold your money
The Care Fund is a social ledger. It tracks what your family pools and releases; the money itself stays in your family’s own accounts.
Sponsors see nothing
When someone sponsors a family, they learn a family was helped — never who they are, what they wrote, or how they decide.
Protected administration
Administrative access is restricted to named staff and protected with multi-factor authentication.
Family controlThe plan belongs
The plan belongs
to your family
The app keeps the record. The family makes the decisions.
- You choose who sees each recording
Every explanation you record is set to Only Me, My Teams, or Everyone — and you can change it.
- The family decides together
Money leaves a Care Fund only after the family’s agreed approvals — no one approves their own request.
- Every movement on the record
Contributions, approvals and releases land on an append-only audit trail the whole team can see.
Data controller
Who’s responsible
A Whole Family Matter B.V., Fluwelen Burgwal 58, 2511 CJ The Hague, Netherlands. KVK 42050497.
Questions about security?
Ask us anything about how we handle your family’s data. Found a security issue? Please report it — we take every report seriously.
Looking for answers on accounts, the Care Fund or sponsorship? Browse the frequently asked questions, or get started free.