The short version
- We collect what you enter and what we need to keep your account safe.
- You choose who can see your records. Some things are private to you and nobody else can see them.
- We do not sell your data or show advertising.
- You can export or delete everything at any time.
What we collect
- Account: name, email, password (stored only as a one-way hash), your role, and when you accepted these documents.
- Health information you enter: blood pressure, glucose, weight and other vitals, medications and dose logs, symptom notes, appointments, goals, vaccinations, emergency contacts, care-plan tasks and, if you use them, period and pregnancy tracking, mood and anxiety check-ins, uploaded documents (lab results, scans, prescriptions) and condition programmes.
- Security information: sign-in times, IP address, device and browser type, and approximate country when available. We use this to protect your account, show you your activity, and warn you about sign-ins from a new place.
- Phone number, only if you add it for WhatsApp messages. It is stored encrypted.
- Location, only when you press SOS and your device allows it. It is sent with that alert and not tracked otherwise.
How we use it
To run the app for you: show your records and charts, send reminders and alerts, let people you approve see what you share, protect your account, and meet legal duties. We do not use your health information for advertising or profiling.
Who can see it
- You.
- Guardians you approve see your blood pressure, medications, vitals, notes, appointments, goals, vaccinations, care-plan tasks and emergency contacts, and receive alerts.
- Clinicians you approve see the same, for 12 months unless you remove them sooner.
- Private to you: period tracking, pregnancy, mood check-ins, uploaded documents, condition programmes and security details. Guardians and clinicians cannot see these.
- Every time a guardian or clinician views your records it is recorded in your access log under More → Privacy & data.
Service providers
We use providers to run the service, such as email delivery and hosting, and, if you turn it on, WhatsApp (Meta) for messages. They process data on our behalf to provide those services. WhatsApp and email messages deliberately avoid health details such as readings or medicine names, but the fact that a reminder or alert exists may be visible to anyone who can see your lock screen. We may disclose information when the law requires it or to protect someone's safety.
Security
We protect your data with encryption in transit, hashed passwords, optional two-factor authentication, temporary lockouts after repeated failed sign-ins, email checks before an account can be used, sign-in alerts, and the ability to see and end your signed-in devices. The optional screen lock hides the app on your device. No system is perfectly secure, so please use a strong password, keep your devices updated and turn on two-factor authentication.
How long we keep it
Until you delete it or your account. Deleting your account permanently removes your records and uploaded files. Security logs are removed with the account. Backups are rotated and expire after a short period.
Your choices and rights
- Download a copy of your data and delete your account under More → Privacy & data.
- Remove a guardian or clinician at any time under More → Care team & family.
- Ask us to correct information, or raise a concern, using the contact details below. You may also have rights under data protection law where you live, including the right to complain to the data protection authority.
Children
The app is meant for adults. A parent or guardian may record a child's vaccinations or health details in their own account. Do not create an account for a child who is too young to agree to these terms.
Changes
If we change this policy in an important way we will ask you to review and accept it again before you continue.
Contact
For questions or requests about this document or your data, use the contact details given by the service operator.