Privacy

Gerry holds some of the most private information a family has. This page says exactly what it stores, where that goes, and what it will never do. In plain words, because you should be able to decide without a lawyer.

The short version

• Your record is yours. Gerry never sends it to a clinician, an insurer, or anybody else. You hand it over yourself, when you choose.
• There are no advertising trackers in this app. Not one, anywhere.
• Nothing about your record is sold, shared for advertising, or used to build a profile of you.
• Nothing you record is sent to be used as training material, and nothing is used to improve Gerry itself.
• You can take everything with you, and you can delete all of it, from inside the app.
• Gerry asks for a ZIP code so the Resources shelf can show help near you. Nobody pays to be listed there.

What Gerry stores

This is the whole list, written from the database rather than from memory.

• Your account. The email address you sign in with, the name you sign entries with, and — if you signed in with Google, Apple or Microsoft — the fact that you did. Gerry never sees or stores your password for those. It also records when you agreed to the terms, when you agreed to what gets sent to OpenAI and Anthropic, when you confirmed you are 18 or older, and whether you asked for the newsletter.
• The people you track. Their name, what you call them, their relationship to you, a color, the conditions and symptoms you asked Gerry to watch for, and the date each of those started being tracked.
• What you record. The audio of what you said, the transcript of it, the observations pulled out and confirmed by you, the date they describe, the date you recorded them, and whether Gerry prompted you or you brought it up yourself.
• The medical record around it. Medications with doses, schedules, start and stop dates and why a drug was stopped; allergies and reactions; diagnoses; clinicians, their specialty and phone number, and when the next appointment is; questions saved for a clinician; and the summaries Gerry writes for you.
• Anything you choose to add. Documents and photos of notes you import, and their file names. Background you dictate or type about someone's history. Insurance details and advance directives, if you fill those in — nothing requires you to.
• Who else is involved. The caregivers in your Care Group, which people each of them may see, whether they may write as well as read, and invitations you have sent, including the email address you sent them to.
• A ZIP code. Yours, and optionally a different one for somebody you care for, with how far you are willing to travel. Only the Resources shelf uses it.
• Resources you save. Which listings you kept, so the shelf can show them back to you.

Recordings are deleted after 90 days

The audio is kept for ninety days and then removed automatically. The transcript and the observations stay — those are the record. The recording exists so you can check what was actually said while it still matters, not forever.

Where it goes

Gerry uses five companies to work. Each receives only what it needs to do its part, and none of them is permitted to use your information for their own purposes.

• Supabase stores the database, your sign-in, and the audio files.
• OpenAI receives the audio of what you record and returns the words. It is also sent a short list of words to expect — the medicines on your list and the things you are tracking — because that is what makes it spell medicine names correctly. It receives nothing else, and never a whole record.
• Anthropic receives transcripts and the text of your record when you dictate a day, import notes, ask a question, or generate a summary — so it can pull observations out of words and write things in plain English. It also receives documents and photos you choose to upload, such as a PDF from a visit or a picture of a paper log. It never receives audio.
• Resend receives an email address and a name when you invite somebody to help, so the invitation can reach them.
• Vercel runs the app itself and keeps ordinary server logs.

If you sign in with Google, Apple or Microsoft, that company confirms who you are and tells Gerry your email address. It is not told anything about your record.

Training

Your audio, transcripts and records are not used to train OpenAI's or Anthropic's artificial intelligence models. Gerry uses their paid business interfaces, whose terms say so — not the consumer products, where different terms apply.

Nothing you record is used to improve Gerry either. No transcript is read to make the app better, and none is kept anywhere except in your own record.

How long each company holds what it receives before deleting it is theirs to state rather than ours to paraphrase — a description written here would go quietly out of date. Read it from them: Anthropic's privacy policy and OpenAI's privacy policy.

What Gerry never does

• No advertising software. There are no ad networks, ad SDKs, or advertising identifiers in this app.
• No analytics on your record. No third-party analytics run on any signed-in page. Nobody is watching which symptoms you look at.
• No session recording. Nothing plays back what you did on screen.
• No selling or sharing for marketing. Ever, to anybody, for any amount.
• No sending your record to clinicians. Gerry prepares something you can hand over. Handing it over is your decision and your action.

Your ZIP code, and the Resources shelf

Gerry asks for a ZIP code once, so the Resources shelf can show help that is actually reachable — the Area Agency on Aging that covers your county, not a national number. You can give a different one for the person you care for, because the help has to be near them rather than near you. It is used for nothing else, and Gerry never asks your phone for its location.

Nobody pays to be listed on that shelf. No organization can buy a place on it or a better position in it, and Gerry is not paid when you open one. The listings are in alphabetical order, which you can check by scrolling.

Gerry does count how often a listing was shown and opened, by day, so that the shelf can be improved — a category nobody opens is one doing nobody any good. Those counts carry no identifier of any kind, so they can say what was opened and never by whom. The listings you save are yours and are shown to nobody.

When an organization holds a record

Some people come to Gerry through an advocate or an agency rather than on their own. In that case the organization holds the record, its staff can see the people they are assigned to, and the family can be given access alongside them.

Two things are true whatever the organization decides. The family can take the record, and the organization can release it to them; and if the organization's licence ends, every record it holds is released rather than locked up or deleted. A record released to nobody at all is permanently deleted after fourteen days.

When you report an answer

If Gerry's Ask screen says something wrong, there is a Report link underneath it. A report records what you chose from the list, anything you wrote, and — only if you leave the box ticked, having seen exactly what it says — the question and the answer themselves. Nothing else from the record goes with it. Reports are kept for a year and read by a person. The notification that tells us a report arrived contains no health information at all.

What our servers write down

When something fails, Gerry writes a line saying what failed: a status code, the kind of error, how much came back. Never what was in it. No transcript, no document, no observation, and no answer from a model goes into a log. Ordinary web server records — the address a request came from, the page, the time — are kept by our hosting provider in the normal way.

Who can see a record

Whoever creates a person's record owns it. They can invite caregivers, and each caregiver is given access to specific people — not to everything. Somebody helping with your mother cannot see your own record unless you granted it, and a caregiver cannot invite anybody else or pass a record on.

Entries are signed with the name of whoever wrote them, so a record kept by several people can say who observed what. The owner can remove a caregiver's access at any time, and a caregiver can leave at any time.

What you can do

• Take it with you. Settings → Health → Care binder gives you a PDF of the whole record, and there is a data export alongside it that a program can read.
• Delete all of it, with or without the app. In the app: Settings → Delete my account. From anywhere: getgerry.app/delete-account, so you never have to reinstall Gerry to get out of it. Either way it erases the account, every record you own, every entry, and every recording. Days you logged in somebody else's record stay in their record with your name removed — those observations are about another person and belong to them, not to your account. If a particular entry contains something about you that you want gone, write to support@getgerry.app and say which one.
• Hand a record on. If somebody else should keep a record, transfer it rather than deleting it. Everything goes with it.

How long it is kept, and backups

Your record is kept until you delete it or delete your account. There is no expiry and no archiving — a record of somebody's decline is only worth having if it covers years.

The database is backed up once a day, and each backup is kept for seven days before it is written over. It exists so the service can be put back if something breaks, and for no other purpose. It does mean a copy of something you deleted can sit in a backup for up to a week. Nothing is ever restored from a backup to undo a deletion somebody asked for.

Children and teenagers

You must be 18 or older to hold a Gerry account. We do not knowingly create an account for anyone younger.

Children and teenagers are still tracked here, and that is deliberate — a parent keeping a record about their son's medication trial is one of the people Gerry was built for. That record belongs to the adult who created it, under their account, and that adult can give the young person their own sign-in to write in it. The account, and the agreement behind it, stay with the adult.

If you give a teenager their own sign-in, tell them what it means: the adult who owns the record can read everything written in it.

If something goes wrong

If information was ever exposed that should not have been, the people affected will be told, along with what happened and what to do about it. Not buried in a changelog.

Email we send you

Gerry emails you when something happens that you need to know about — an invitation, or somebody offering you a record. Those are part of the app working and cannot be turned off.

Anything else — news about Gerry, occasional product updates — only ever arrives if you asked for it. That box is never ticked for you, is never bundled with agreeing to the terms, and can be turned off in Settings at any time. What is in your record is never used to decide what you are sent.

Who we are

Gerry is made and run by BlueClaw LLC, in the United States, and that is where every decision on this page is made. Your record is held on servers in the eastern United States.

Questions

Write to support@getgerry.app and a person will answer.

Last updated 20 September 2026. If this changes in a way that affects what happens to your record, you will be told inside the app, not by this line quietly changing.