Security
Caregiving means trusting a tool with some of the most personal information there is — medications, diagnoses, appointments, financial details. We don't take that lightly. Here's exactly how we protect it.
Your information is encrypted at every stage — while it's stored, and while it's moving between your device and ours — using AES-256 encryption, the same standard used by banks and financial institutions. Nothing you store in Welluna sits unprotected.
Your family's information belongs to your family — not to us, and not for sale. We do not sell your data, ever. You control exactly who can see it: only the people you explicitly invite into your care circle can access it, and you can adjust or revoke that access at any time. You can also request a copy of your data or ask us to delete it whenever you choose.
Welluna is built on enterprise-grade cloud infrastructure with multiple layers of protection and redundancy behind it. We hold our technology partners to strict security standards, and we continue to invest in that infrastructure as we grow.
Welluna uses encrypted connections for data in transit and encrypted storage for sensitive care information. Access to production systems is limited to the people who need it to build, operate, and support the service.
Every login requires multi-factor authentication — a verification code sent to your email by default, with the option to use an authenticator app instead — so access to your account never relies on a password alone. Sessions automatically time out after a period of inactivity, and administrative access is kept separate from family accounts and tracked through audit logging.
Care circle members only see what they've been given access to. View-only members can see care information without being able to make changes, and the family owner controls who is part of the care circle at all times.
Administrative activity is logged and auditable, and production systems are kept separate from development environments. Security issues are treated as a priority — families rely on this information being available and accurate when they need it.
Welluna is designed to be HIPAA-aligned in how it supports family caregiving — not as a substitute for your medical providers' own records. We do not sell personal health information, and we continue improving our privacy protections as Welluna grows.
