> ## Documentation Index
> Fetch the complete documentation index at: https://aftercaredocs.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# Your Data and Privacy in AfterCare

> How AfterCare encrypts your documents, logs access, handles deduplication, and lets you delete your data completely at any time.

AfterCare handles medical documents, so protecting your data is not optional — it is built into how the service works at every layer. This page explains exactly what happens to your documents and recovery data, how AfterCare protects them, and the controls you have.

<Note>
  AfterCare does not share, sell, or transfer your medical data to any third party. Your documents and recovery information are used only to generate and display your own recovery guide.
</Note>

## Encryption at rest

Every document you upload is encrypted before it is stored. AfterCare uses AES-256-GCM encryption — the same standard used in healthcare and financial systems worldwide. In plain terms, this means:

* Your file is scrambled into unreadable data before it ever touches persistent storage.
* Each document is encrypted separately, so two identical files produce two completely different encrypted blobs in storage. No one can identify your document by comparing encrypted data.
* Without the matching key, the stored data is meaningless — even to someone with direct access to the storage infrastructure.

You do not need to manage keys yourself. Encryption and decryption happen automatically whenever the AfterCare service handles your document.

## Deduplication

If you upload the same document more than once, AfterCare recognises it automatically. Uploading an identical file a second time:

* Does **not** create a duplicate entry.
* Does **not** re-run the processing pipeline (saving time and cost).
* Does **not** store the file a second time.

This protects you from accidental double-uploads and ensures you are not charged processing time for the same paperwork twice.

## Audit logging

AfterCare records an access log every time your data is requested. This log follows a HIPAA-shaped pattern: it captures **who accessed what and when**, without ever recording the contents of your document, your extracted medical information, or your recovery plan text.

Each audit entry records:

* The action performed (for example, a document was viewed or a medication list was fetched).
* The resource identifier (the document or record involved).
* The timestamp of the access.
* The IP address of the request.
* The HTTP status code of the response.

This means that if there is ever a question about who accessed your data, there is a complete record — and that record cannot include the sensitive contents themselves.

## Deleting your data

You can delete any document and all associated recovery plan data at any time. Deleting a document removes the encrypted file, all extracted recovery data, and all audit records associated with that document.

<Tip>
  A self-service delete button is coming to the AfterCare dashboard in a future release. In the meantime, contact support to request deletion of any document and its associated data.
</Tip>

Deleting a document is permanent and cannot be undone.

## Local mode and your privacy

When AfterCare runs in **Local mode** (no account, no cloud), your data never leaves your browser at all.

* Documents are stored entirely within your browser on your own device.
* Recovery guide data is saved locally in your browser's storage.
* No network requests are made to any AfterCare server for storage or retrieval.
* Audit logging does not apply because no server handles your data.

<Warning>
  Local mode data is tied to the browser you used. Clearing your browser data, uninstalling the browser, or switching to a different device will permanently remove your locally stored documents and recovery guide.
</Warning>

## Summary of protections

| Protection | Detail |
| - | - |
| Encryption at rest | Military-grade encryption applied to every document before storage |
| Deduplication | The same document is never stored or processed twice |
| Audit logging | Access records without capturing document contents |
| Deletion | Full removal of file, plan data, and associated records |
| Local mode | Zero data transmission — everything stays on your device |
| No data sharing | Your medical data is never sold or shared with third parties |


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.