Privacy policy

What Trellis is

Trellis is a shared organizer for families coordinating care for a loved one: tasks, appointments, medication schedules, notes, documents, and spending. It is family-entered information — Trellis is not a medical provider, does not provide medical advice, and is not an emergency-response system.

What we store, and who can see it

Everything you record belongs to your care circle. Access is role-based and enforced on the server for every single request: viewers read, caregivers do the day's work, family sees financial and legal material, and owners administer. Sensitive reads (like opening a document or exporting records) are written to the circle's audit trail, which circle owners can review at any time.

Your rights: take it or erase it

The circle owner can download a complete export — every record, every document file, and the full audit trail — at any time, including after a subscription lapses. The owner can also permanently delete the circle: stored files are removed and every database record is erased. What remains afterwards: member sign-in accounts (they exist independently of any one circle), our payment processor's own billing records at Stripe, and short-lived operational logs that contain internal IDs only — never names, notes, medication details, or amounts. You can also delete your own account once you don't own any circles.

What we deliberately avoid

No advertising, no sale of personal data, no third-party analytics scripts. Payment card details never touch our servers — checkout and billing management happen on Stripe-hosted pages. Our application logs carry internal identifiers only; the content of your circle never appears in them.

Trellis Intelligence (optional AI)

Off by default, for every circle. Only the circle's owner can turn it on; while it's on, specific content is processed by our AI provider under zero-data-retention terms.

What can be sent while it's on

• The daily brief's and Sunday review's activity summaries — doses logged, task titles, journal counts and tags, tomorrow's appointments.
• A note you type or dictate into Quick Capture (with your own med-checklist for that day) or into the circle starter's setup questions.
• A photo you deliberately scan — receipt, pharmacy label, or document — transcribed and never kept.
• A question you ask, together with the matching records you are allowed to see.
• Visit-prep and caregiver-handoff summaries.
• That month's expense totals and readiness counts — only when a caregiver or family member runs the expense month-in-review.

What never happens

• Journal text, documents, and money amounts never enter the daily or weekly briefs.
• Nothing is sent for circles that haven't opted in, and members below a record's visibility floor can never surface it through AI.
• The provider doesn't store it and never trains on it; we don't keep or log the AI's input or output either. Questions and answers are never stored.
• The circle's audit trail records only that a brief, capture, question, or summary happened — plus the owner's on/off choice, never content.
• Gentle drift observations are computed on our own servers without any AI processing.

Turning it off on the Privacy page stops all AI processing immediately; without it, Trellis works exactly as before.

Where data lives

Data is stored with managed providers (database, object storage, email delivery, payments) under encryption in transit and at rest. Reminder emails you opt into carry a one-click unsubscribe. Web Push is optional per device and can be turned off anytime.

Questions

Write to the address in the app footer of your workspace and we will answer plainly.