Skip to main content
Forgotten Rare
Legal

Privacy Policy

Last updated: 2026-05-26

Your trust matters. This policy explains what we collect, how we use it, and the choices you have.

What we collect

  • Account info: email, display name, authentication details.
  • Content you enter: child profiles, appointments, medications, notes, symptoms, documents, journal entries.
  • Usage data: pages visited, features used, basic device/browser info.
  • Billing: handled by our payment provider - we never store full card numbers.

How we use it

  • To run the platform and the features you use.
  • To generate AI support when you ask for it (prompts are processed by our AI provider).
  • To process subscriptions and send essential account messages.
  • To improve safety, fix bugs, and prevent abuse.

Who can see your data

Your records are scoped to your account using row-level security in our database. Other users cannot see your child profiles, medications, symptoms, documents, family history, insurance logs, or binder entries. We do not sell your personal information.

HIPAA

Forgotten Rare is not HIPAA compliant. Please do not enter information you would not be comfortable storing outside of a HIPAA-protected environment, and avoid posting full identifiers paired with medical record numbers.

Your choices

  • Edit or delete your profile and child records at any time.
  • Export important summaries from inside the app.
  • Request account deletion or a copy of your data at privacy@forgottenrare.com.

Children

Forgotten Rare is intended for caregivers and adults. Accounts are not offered directly to children under 13.

Contact

Privacy questions: privacy@forgottenrare.com.