Support

It keeps your health record in one place — medications, conditions, allergies, vital signs, vaccinations and documents — so that when someone treats you, you can hand over exactly what they need instead of trying to remember it.

Cavora records and organises what you enter. It does not diagnose, monitor or treat, and it gives no medical advice.

Yes — an email address and a password. Your record is tied to that account, and it is what lets you reach the same record from another device.

No, and this is the point. You show a QR code; it opens a read-only summary in whatever browser their phone or computer already has. No app, no account, no sign-in on their side.

Less than you would think. Allergies, current medications and an emergency contact are the three a clinician asks for first, and they take a couple of minutes. The rest can accumulate as you go — a reading here, a prescription photographed there.

When you create a share, Cavora mints a random one-time link and puts it in a QR code. The code carries the link and nothing else — no name, no diagnosis, no data. Whoever scans it sees only the sections you switched on.

You choose when you create it, and it expires on its own after that. You can also revoke it at any moment from the sharing screen, which takes effect immediately — a page already open stops working on its next request.

It is an optional PIN. It is deliberately notinside the QR code or the link, so it has to travel by voice — you read it out. That means a code photographed over someone’s shoulder, or a link forwarded on, is not enough on its own.

It is shown once and stored only as a hash, so nobody — including us — can look it up afterwards. If it goes astray, revoke the share and make a new one.

Yes. Every open is written to your access log, along with the name the viewer typed. That name is recorded as given and is not verified, and the log says so — it is a record of what happened, not proof of who it was.

Almost always the share has expired or been revoked — both are designed to happen. Create a new one from the sharing screen and show the fresh code.

If a PIN is switched on, they will be asked for it before anything is shown. Read it to them from your screen; it is not in the link.

Invite them by email from Family and carers in Settings. Choose whether they can see your whole record or only the parts they help with, and what they may do — view, add to it, or share it with a clinician on your behalf.

The invitation only works for the address you sent it to: they have to sign in with that same address, so a forwarded code is not a way in.

Yes. Anything a carer adds or edits is labelled in your timeline with the name you invited them under, so your own entries and theirs are never confused. Nothing they do is hidden from you.

At any time, in one tap, from the same screen. Access ends immediately — the next thing they try to load is refused by the database itself, not merely hidden by the app.

Check the spam folder first. Failing that, the code shown when you created the invitation works on its own — read it to them and have them enter it after signing in with the invited address. If the code has been lost, remove the invitation and make a new one.

Photographs of prescriptions, results, scan reports and letters, or PDFs and images already on your phone. They are filed by kind so the right one is findable at an appointment.

Every file is scanned for malware on our servers before it can go anywhere. A document that has not come back clean cannot be shared at all — that rule is enforced by the database, not by the app remembering to apply it.

A file may briefly show as still being checked just after upload. That is the scan running; it usually takes seconds.

No. There is no text recognition in Cavora today: it stores the original image or file exactly as you gave it, and the details on a document — its date, the clinician, the provider — are whatever you typed. Nothing is extracted, guessed or auto-filled.

We would rather have an obviously empty field than a plausible wrong one on a medical record.

Yes, if you included it. It opens in their browser through the same expiring link as the rest of your summary, and the open is written to the same access log.

Only vital signs your devices already record: heart rate, blood pressure, blood oxygen, glucose, body temperature and weight. It saves you typing in numbers your watch or cuff has already captured.

Never. The connection is read-only. iOS requires every app that can read Health data to declare a writing permission as well, which is why you may see it mentioned — but Cavora asks for an empty set of write permissions and adds nothing to Health.

That is iOS, not Cavora. The permission sheet is shown once per app; after that it will not reappear, whichever answer you gave. To change it, open the iPhone Settings app, then Health, then Data Access & Devices, choose Cavora, and switch on the types you want it to read.

Everything. Cavora is one subscription with no feature tiers — the trial is the full product, and it lasts 14 days from the day you start it.

In your device’s subscription settings, not in Cavora — Apple handles the billing, so only they can stop it. On iPhone: open Settings, tap your name at the top, then Subscriptions, then Cavora.

Cancelling stops the next renewal and keeps your access until the end of the period you have already paid for.

Tap Restore Purchases on the subscription screen. This is the usual cause: a subscription belongs to your Apple ID, while your record belongs to your Cavora account, and if you signed in with a different Cavora account than the one you bought on, the two need reconnecting. Restoring does exactly that.

If it still shows Free afterwards, write to us with the email address on your Cavora account and we will look at it from our side.

Your record stays yours. Reading and exporting everything you recorded keeps working — we will not hold a medical history hostage. What stops is adding to it and sharing it, until the subscription resumes.

Refunds are handled by Apple rather than by us, through reportaproblem.apple.com. Tell us as well if something went wrong — we would like to know.

In a managed PostgreSQL database and a private storage bucket at Supabase, our hosting provider. It is encrypted in transit and at rest, and access is enforced at the database layer: an account can reach its own record and records explicitly shared with it, and nothing else.

The privacy policy sets this out in full.

In the app: Settings, then Delete account. It removes your record — every entry, every uploaded file, every share — and then the account itself. Each step is checked as it runs, and anything that fails is named to you rather than skipped silently.

If you cannot get into the app, this page explains how to ask us to do it.

Yes. You can export a visit summary as a PDF from the app, and you can request a full copy of your data by writing to privacy@cavorahealth.com.

Use “Forgot password” on the sign-in screen and follow the link that arrives by email. If the message does not appear, check spam — and check you are using the same address you signed up with, since that is the only one the reset can be sent to.

Correct, and we would rather say so than have you hunt for it. The calendar shows readings, doses, results, vaccinations and notes on the day each happened. Doctor visits are recorded in their own section, with their own reminders, and are not yet drawn onto the month grid. It is on the list.

When you photograph several pages at once, this version stores the first page and records how many there were. The remaining pages stay on your device. If a document matters in full, add each page as its own document for now.