Your information.
Your choices.

Effective November 1, 2026 • Elder Desk by DLUXU • Contact: deandra.smith@gmail.com

At a glance

The general Elder Desk does not send your typed contact details or wishes to a DLUXU database. Saving on this device is optional and off by default.
When you opt in, information is stored in this browser until you erase it or clear browser data. The app does not encrypt this local copy. Other people using this browser or a compromised device may be able to access it.
The private family area uses owner authorization on the server for its page and every download. It is not a publicly shared family folder.
No service is risk-free. These controls are verified features, not a guarantee against every disclosure, a HIPAA certification, or a determination that every jurisdiction’s law is satisfied.

What is stored, where, and why

Area	Information & purpose	Retention & control
Contacts and setup	Names and phone numbers of people you choose, language, city/ZIP, text size and voice preference. Used to display your personal desk and call links.	Memory for this visit by default. Optional browser storage persists until deletion. My setup has export/import controls; Erase saved settings deletes the app’s stored copy.
Final Wishes	Optional wishes, cost estimates and care-conversation notes. No answers are required.	Memory by default. Optional unencrypted browser autosave. Use Erase my wishes, or turn off Remember. Your downloaded backups and printouts are separate copies.
Private family files	Existing source documents and working copies supplied or authorized by the owner. Used for private family organization.	Stored with the hosted application; restricted to the authorized owner. Owner-requested removal requires a site update. Source/deployment history and provider backups may retain earlier versions; immediate deletion from every backup is not promised.
Hosting and sign-in	Hosting/authentication providers process requests and account identity needed to serve pages and check access; technical logs may include IP addresses, browser details and timestamps.	Provider retention is governed by their terms and settings. No local deletion button can erase provider logs. Request details from DLUXU before supplying sensitive records.

Consent, sharing and device permissions

Enter another person’s details only when you have permission or lawful authority. A family relationship alone does not establish legal authority over someone’s medical records. Use the minimum information needed. Do not enter Social Security numbers, account passwords, government IDs or insurance identifiers in the general planner.

Contact import, where supported, asks you to choose contacts; manual entry remains available. Voice reading uses your browser/operating system’s speech service and installed voices; some voices may involve the device provider. External Medicare, insurance, YouTube and other links take you to separate services with their own policies. Calls open your device’s phone app. These pages do not automatically email, text, contact providers, dispatch help or collect petition signatures.

The Elder Desk modules contain no advertising pixels, analytics scripts or automatic sale/share of the personal entries. This statement does not describe unrelated DLUXU pages or third-party websites. New integrations or collection features require an updated notice and applicable consent before use.

Access, correction and deletion

Correct contacts through setup; remove a contact and re-add it if its details change. Edit wishes directly. Turn off Remember or use the erase controls to remove stored copies in this browser. Browser privacy settings can also clear site data. This does not remove downloads, printouts, other-device copies or provider records.

For hosted family-file access, correction or removal, email the privacy contact with the minimum details needed. We will verify authority before releasing records or changing access. Do not send passwords or full medical records in a privacy request. Applicable response duties depend on your location and the facts; this notice does not waive statutory rights.

Security measures and incident response

HTTPS protects website traffic in transit. Private files require server-side owner checks and responses use no-store/noindex headers. Private records are excluded from publicly delivered client code. Those headers limit caching and indexing; they are not encryption or a substitute for authentication.

If you suspect unauthorized access, contact DLUXU promptly, secure your account and device, and avoid sending sensitive incident details through public comments. DLUXU must assess containment, evidence preservation and applicable notices to affected people and regulators. Notification timing and recipients depend on the governing law. Never assume every incident has the same deadline.

Official legal sources and their scope

These links explain relevant obligations. Whether each law applies requires the organization’s role, actual processing, contracts, affected individuals and jurisdictions to be evaluated.

D.C. Code § 28-3852.01 — reasonable security safeguards, service-provider agreements and secure disposal. Technical controls alone do not establish compliance with contractual and operational duties.
D.C. Code § 28-3852 — breach notification, together with § 28-3851 definitions. Other states may impose additional duties.
FTC guidance: Protecting Personal Information — collect only what is needed, protect it, dispose of it appropriately and plan for incidents. FTC mobile-health-app tool explains potentially applicable federal laws and truthful privacy/security representations.
FTC Health Breach Notification Rule guidance, 16 CFR Part 318 — applies to covered personal-health-record vendors, related entities and service providers, including some non-HIPAA health apps. Applicability is not established merely by calling a product a family organizer.
HHS: personal mobile devices and health information and HIPAA breach rule, 45 CFR §§ 164.400–414. HIPAA applies to covered entities and business associates; a personal-use app is not automatically covered. Elder Desk does not claim HIPAA certification or that provider business-associate agreements have been established.

This version is a U.S.-focused family tool. A full privacy/security and legal applicability review, including relevant state consumer-health laws and international laws when applicable, is required before expanding hosted health-record collection, family sharing, cloud syncing or healthcare-provider use. No such features are enabled by this notice.

Signed-in saving and recovery

When you sign in with your DLUXU desk code and PIN, contacts, settings and final-wishes entries are saved to your private account on the hosted database. Each request checks your active account; other account holders cannot read your saved records. Previous saved versions are retained so a credential reset does not erase your records. Guest tools still use visit-only or optional browser storage.

PINs are hashed, session cookies are Secure and HttpOnly, sessions expire, and repeated incorrect PIN attempts are limited. A verified recovery email can be added from My account. Recovery changes the credential and revokes old logins; it does not delete planning records. Keep your email secure. These controls do not make the site a certified clinical record system.

Share a final-wishes copy only by choosing Share / download a copy. You choose the recipient in your device sharing app or attach the downloaded file yourself. No family member receives it automatically. Shared copies do not update when the original changes.

Saved account records and their version history remain until you request deletion from DLUXU; sign-out and a PIN reset do not delete them. Browser backups on older sites remain separate. Contact DLUXU to request access, corrections or deletion.

Your information.Your choices.