Can Carakin read my family's medications and documents?

No. Care content is encrypted on your devices before it is stored. Servers hold ciphertext Carakin cannot decrypt.

What happens if a solo admin loses all devices and the recovery code?

The encrypted family data cannot be recovered by you or by Carakin. Create and store a recovery code while you still have an unlocked device.

What information is not encrypted?

Account sign-in details, family name, membership roles, invites, and similar setup records are needed to run the service. Care schedules, documents, photos, and health content are encrypted.

Security & Recovery

Carakin is built so family care content stays readable on your devices - not on our servers in plaintext.

What gets encrypted

Before upload, your devices encrypt things like medications, appointments, tasks, notes, documents, profile photos, personal kin details, and health check-ins / synced metrics. The cloud receives ciphertext. Carakin does not hold your family decryption key and cannot open that content.

We do keep a small amount of readable setup data so the product works: your sign-in identity, family name, who is a member, roles, invites, and device access requests. See the Privacy Policy and Data Policy for detail.

Diagram: your device encrypts care content, Carakin servers store ciphertext only, other unlocked devices decrypt with the family key — Care content is encrypted on your devices. Servers keep ciphertext; unlocked family devices can decrypt it.

New devices need approval

Opening Carakin on a new phone or computer does not automatically unlock the family vault. An already-unlocked device (or a recovery code) is required so the family key can be wrapped for the new device. Admins see pending encryption requests on Today and under People → Users, and can manage devices in Settings.

Recovery codes - especially for solo admins

If you are the only admin: Losing every unlocked device and the recovery code means permanent loss of encrypted family data. Carakin support cannot reset or decrypt it. Create a recovery code as soon as the family is unlocked, store it offline or in a password manager, and ideally add a second admin you trust.

Create or restore a recovery code from Settings → Security on the web, or the matching encryption / restore screens on Android.

Save recovery code screen with the one-time code and confirmation checkbox — Save the recovery code somewhere outside Carakin

Practical habits

Create a recovery code before you wipe a phone or reinstall the app.
Keep at least one spare unlocked device or a second admin when you can.
Revoke devices you no longer use - see Devices & restore.

How a new device gets encryption access

Signing in proves the account. An unlocked admin then wraps the family key for that specific device. Servers never receive device private keys or a readable family key.

Five-step diagram: a new device signs in and creates keys, the server stores the account and access request, an unlocked admin encrypts the family key for the new device, the server stores the encrypted device wrap and schedules, and the approved device decrypts the schedules locally — Account and membership details are readable setup data. Family keys, schedules, and care content remain encrypted; device private keys never leave their devices. Select the diagram to enlarge it.

Step-by-step: Devices & restore | Export or delete a family | Back to Resources home | Get started