Leo/For/Partners
⌘ A role for one person

One person. Connected on your terms.

The Partner role is intentionally narrow: one specific person — spouse, friend, an adult you look after, an aging parent — who sees only the parts of your record you choose to share. View-only. Bidirectional. Audit-logged. Either side can unlink anytime.

Status · in development·Beta · free for 6 months (when pricing launches)·Connection · one person, view-only
YOUYOUR PERSONK7M2RXTHE LINK
§ 01 · The shape of it

It can be the person you live with. Or just the one who picks up the phone.

Leo's Partner role is deliberately general. It's for the one person you want close enough to your health to see what's actually going on — without giving them the keys to your account.

A spouse
you live with this together
A close friend
the one who answers at 2am
An adult you look after
dependent, sibling, partner with reduced capacity
An aging parent
you check in, they check in
An accountability partner
habits, recovery, anything you'd rather not do alone
“Not a friends list. Not a feed. One thread between you and the one person you want to share it with.”
§ 02 · The link

Two codes. One acceptance. Either of you can start it.

Each Leo account has a 6-character patient code. You enter your partner's code (with an optional note); they tap accept. That's it. The link is bidirectional — either of you sees the other's shared record. Either of you can unlink. Every change is audit-logged.

INITIATORenters partner's codeK7M2RX6-CHARACTER LINK CODEACCEPTORtaps accept
① Either side starts
② Other side accepts
③ Audit-logged. Unlinkable.
§ 03 · The flow of information

Six toggles. Three on by default. Three off.

Privacy-first by design. Your medications, vital signs, and schedule flow to your partner the moment you link. Emotions, health events, and journal entries stay yours until you explicitly turn them on.

⌘ You hold
Your record
flows to
⌘ They see
What you grant
Medications
Doses, schedule, adherence
On by default
Vital signs
Heart rate, BP, oxygen
On by default
Schedule
Appointments, reminders
On by default
Emotions
Mood logs across the day
Off by default
Health events
Flares, symptoms, episodes
Off by default
Journal
Private entries are always private
Off by default
Private entries stay private — always. Journal posts you flag as private are filtered server-side and never shared, regardless of the toggle.
⌘ Their view of you
A
Alex
Last activity · 8 min ago
7-day streak
83%
Today's adherence
5 of 6 doses
One left for tonight.
Recent symptoms
Migraine2h ago
FatigueYesterday
Brain fog2d ago
§ 04 · The line

View-only is real.

A partner can send encouragement messages and gentle medication nudges. They cannot log doses on your behalf. They cannot edit your record. And there are entire surfaces of Leo they don't see at all.

Never shown
Cycle tracking
Excluded from the partner view entirely. Not a toggle.
Never shown
Productivity & habits
Patient-side only. No partner mirror.
Never shown
Health ID card
Your offline emergency record stays with you.
Never shown
Private journal entries
Anything flagged private is filtered server-side.
§ 05 · Adjacent roles

Looking for a Caregiver instead?

Partner and Caregiver are different shapes in Leo. Partner is personal and one-to-one. Caregiver is professional and one-to-many, with permissions to log doses and add clinical notes. Pick the role that fits the relationship.

Partner
  • One person you connect with
  • Bidirectional — either side initiates
  • View-only access to what you grant
  • Personal: spouse, friend, adult you support, accountability partner
  • Send encouragements & gentle nudges, but no logging on your behalf
Caregiver
  • Multiple patients / clients
  • Unidirectional — caregiver → patient
  • Can log doses, add clinical notes
  • Professional: nurse, home health aide, paid carer
  • Different permission model — designed for the work, not the relationship
§ 06 · The offer

The first 6 months of partner-link features are on us.

You're helping us build this. Partner-linking will be a paid tier when Leo moves to pricing. Pairs in the beta who share feedback ride free for 6 months from launch day. Your free 6 months don't start now — they start the day pricing exists.

⌘ What you do
  • Apply with your partner
  • Use Leo for real, together
  • Tell us what works and what doesn't
⌘ What you get
  • Free 6 months of partner-link features once pricing launches
  • Your free 6 months start then, not now
  • A voice in what this becomes
Pricing TBD. No card on file. No commitment beyond the beta agreement.
§ 07 · Honest scope

What we'd like to ship — and haven't.

The partner surface is intentionally restrained. Here's where it stops today and what we're weighing for next.

◦ Not yet
Partner-initiated push notifications

Today partners send in-app encouragements and nudges. System push when their linked person logs a flare or misses a dose isn't built yet.

◦ Not yet
Partner-side dose logging

The method exists in the service layer (PartnerService.logDoseForPartner) but isn't wired into the UI — view-only by design while we work through the trust model.

◦ Not yet
Partner view of cycle data

Cycle and menstrual tracking are deliberately excluded from the partner view today. Whether to make this a togglable permission is open.

◦ Not yet
Partner-accessible Health ID & progress widgets

Productivity surfaces and the offline Health ID card are patient-side only. A pared-down partner version would be useful.

◦ Not yet
Multiple partner links

Hard-capped to one active partner today. Whether to allow more (e.g., two close confidants) is a design call we haven't made yet.

Leo doesn't share your data with anyone outside the link you create. HIPAA-ready architecture; BAA with Google Cloud in progress.
⌘ For Partners

One person. On your terms.

Six-character link code. Six permission toggles. View-only by default. Audit-logged. Unlinkable from either side. Free for 6 months for beta pairs when pricing launches.