ExpressAgainThe owner and the caregiver role see everything in the circle. The family role gets the feed, the Love Bucket, visits, her schedule, the Status Board, Health Tracking, her day and the kitchen to read, and never her medical pages, the vault or bills. Friends (extended) get the friends feed, the Love Bucket and visits, and never the patient's day-to-day. These walls are enforced on the server; hiding a menu item is only the courtesy.
Clinical logins see the shared clinical window for one circle — her day, medications, targets, tracking, notes, reports — never the family feed or her device data, and each discipline gets only its own action tabs. The agency office sees its team, shifts and invoices and never the clinical record. The vault lives only on the device it was created on. Bills and Payments is caregiver logins only.
Public links (a visit link, a booking link, a quote link, a questionnaire) show no medical information and no patient name beyond a first name the family chose to share.