Active care and privacy
Explore how assigned caregivers will record care, follow owner instructions and share private updates. This preview does not start a visit, verify an arrival or reveal entry details.
One-hand care sequence
Explore the mobile sequence from instructions through checkout. Each step names the evidence it creates and the privacy boundary it must preserve.
Show only booking-required pet, routine, veterinary, and emergency information for the assigned care window.
Live route sharing is not available. The planned policy restricts any precise route to the booking owner during active care and excludes public links, notifications and analytics.
The public screen now shows NWS/NOAA conditions from approximate U.S. network location with source and update time. Booking weather will use the service address; missing or stale data can never be labeled safe.
Veterinary contact, transport permission, treatment limits, owner spending instruction, emergency contacts, and consent history are encrypted and versioned per booking and pet. Only the assigned eligible caregiver can read the current record during the active window, and each read is logged.
A configured service adapter can submit an authenticated inside, outside, or unavailable result tied to the exact session and assignment. Only a fresh inside result unlocks caregiver check-in; exceptions require review and create no automatic discipline.
The individually assigned caregiver records immutable completion or reopen events. Medication uses specific factual outcomes, encrypts any note, preserves earlier events after reopening, and never lets a caregiver change the owner’s plan or present medical advice.
Checkout and reporting remain separate. The caregiver’s submitted report is encrypted before storage and available only in the booking owner’s protected active-care timeline; completion still does not invent a payout.
Care-image delivery remains unavailable until the required processing services are connected. The intended flow limits uploads to the assigned caregiver during care, keeps originals private, and checks files and removes location metadata before owner access.
Owners, the provider, and eligible assigned caregivers receive a private booking thread for bounded time windows. Message text is encrypted and excluded from notification previews, while obvious payment, access-secret, and coordinate patterns are rejected.
An authorized participant can open an encrypted, categorized case with dated history. Immediate danger still goes to emergency services or a veterinarian first; intake creates no automatic suspension, penalty, cancellation, blame, or response-time promise.
Owners save booking-specific entry instructions under a separate keyring without plaintext being echoed into history. The restricted reveal path requires the exact accepted caregiver, checked-in window, a fresh signed inside-arrival result, and a separate signed reauthentication result. It is audited, never cached, clears after 60 seconds, and is consumed after one use. A browser still cannot guarantee screenshot blocking.
Activation gates
Confirmed-session preparation, individual caregiver controls, signed check-in and reauthentication evidence, verified-arrival one-time entry reveal, immutable medication and task events, versioned emergency authorization, separately encrypted entry storage, automatic grant expiry and checkout revocation, private care-media intake, encrypted booking messages, participant case creation, checkout, reporting, owner progress, and completion guards are implemented. The real reauthentication start service, media worker, real location/map adapter, reviewed exceptions, service-address weather, staffed case triage, deletion jobs, payment confirmation, and real providers must still be configured and tested before public live care.
