Privacy Policy

1) Summary (Plain English)

• No account.
• No server uploads. Your cases, images, pins, notes, and exports are stored locally on your device by default.
• You control your data. We do not see or access it.
• Optional services. If you enable iCloud, Photos Library, or make purchases via the App Store, Apple may process data under their own terms.
• Diagnostics (optional). Crash logs and analytics may be shared with Apple if you opt in at the system level; we may view aggregated diagnostics to improve stability, but we don’t receive PHI.
• Usage and ad measurement. The App sends a small set of usage events (such as “app opened” or “first case saved”) to Google Firebase, Meta and RevenueCat so we can see which features are used and which ads bring people to the App. These events never contain your cases, images, notes or any patient information. You can refuse ad tracking in the iOS prompt or in Settings → Privacy & Security → Tracking.
• Pro features may require network for purchase validation; core planning works offline.

2) Data We Store or Access

On-device content (local only):

• Cases, source images, thumbnails
• Pins (locations, labels, unit/volume values, styles)
• Notes and export files (PDF/PNG)
• Preferences (theme, defaults), and local entitlements state

We do not receive this content. It remains on your device unless you export/share or enable your own cloud backup.

3) Data We Do Not Collect

• We do not collect names, emails, or phone numbers of your patients.
• We do not collect your cases, images, pins, notes, or exports on our servers.
• We do not show ads inside the App. We do use the Meta SDK to measure our own ads (see section 7).
• We do not sell data.

4) Payment & Entitlements

Purchases are processed by Apple via the App Store (and may be mirrored by an entitlement provider). Apple may collect purchase metadata, device identifiers, and subscription status to manage your entitlements. See Apple’s privacy policy for details.

5) Optional Cloud & Sharing

• iCloud Drive / iCloud Backup (optional): If you enable iCloud for device backup or files, Apple may store encrypted copies of your App data under Apple’s terms.
• Photos Library (optional): If you save exports to Photos, they are stored in your Photos Library under Apple’s policies.
• Manual sharing (optional): If you export and share files via Mail, Messages, AirDrop, or other apps, those apps and recipients will receive the content you choose to send.

6) Device Permissions & Purpose

• Camera: Capture live photos for planning (Pro).
• Photo Library (read): Import patient photos into cases (Pro).
• Photo Library Add: Save exported images to your Photos.
• Face ID/Passcode (system-level): Optional additional security before opening the App.

Permissions are requested and used only for the functions described.

7) Diagnostics, Analytics & Ad Measurement

Usage analytics. We use Google Firebase Analytics to count how features are used — for example, that onboarding was finished, a paywall was shown, or a case was saved. Events carry counts and settings (such as how many pins a case has), never the content of a case, image, note or any patient information.

Ad measurement. We use the Meta (Facebook) SDK to learn which of our ads led people to install and use the App. It receives the app being opened, onboarding finished, a paywall being shown and your first saved case. Our subscription provider, RevenueCat, reports trial starts and purchases to Meta for the same purpose. With these events Meta receives an anonymous app-install ID, your device’s vendor identifier, IP address and device model — and, only if you tap “Allow” on the iOS tracking prompt, your device’s advertising identifier (IDFA). If you choose “Ask App Not to Track”, the IDFA is never collected and Meta only uses Apple’s privacy-preserving measurement. You can change this anytime in Settings → Privacy & Security → Tracking. Meta processes this data under its own Privacy Policy.

Crash reports. If you opt in to share diagnostics with developers in iOS settings, Apple may provide us anonymized/aggregated crash data (e.g., iOS version, device model, stack traces). We use this solely to improve stability and performance. We do not receive PHI through diagnostics and do not attempt to re-identify users.

8) Children’s Privacy

The App is for professional use and not directed to children under 16. We do not knowingly collect personal information from children.

9) Security

Your content is stored locally on your device. We recommend enabling a device passcode/Face ID and keeping your iOS updated. If you enable iCloud or other backups, your data security is also subject to those providers’ safeguards.

10) Your Rights (GDPR/CCPA-style)

Although we do not maintain server-side copies of your content, you may contact us to exercise standard privacy rights (access, correction, deletion, portability, restriction, objection) regarding any limited information we control (e.g., support emails).

• Access/Deletion requests: benjamin@valethero.org
• Content you created on your device can be managed or deleted directly within the App or by deleting the App (which removes local App data). If you use iCloud or device backups, you may also need to manage or delete those backups via Apple.

11) International Users

If you use the App outside the U.S., you are responsible for complying with local laws. Any processing we perform (e.g., support inbox) occurs in the U.S.

12) Retention

• Local App data: Stays on your device until you delete it or uninstall the App.
• Support communications: Kept for as long as reasonably necessary to address your inquiry and maintain records, then deleted or anonymized.

13) Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “Effective date.” Continued use after changes constitutes acceptance.