Privacy Policy

01Your Health Entries

CareLog lets you record personal health information such as blood pressure, heart rate, blood glucose, body weight, height, age, and gender. Because this information is sensitive, we handle it differently from everything else described in this Policy:

• Where it is kept. On your device. By default, health entries are not uploaded to our servers.
• When we can see it. Only if you voluntarily turn on a cloud synchronization or data-sharing feature.
• Who else receives it. Nobody through our partners — the advertising and analytics SDKs in the App do not capture your health vitals or personal medical information.
• How to remove it. Delete entries whenever you like in the App’s settings, or uninstall the App.

02Other Information We Obtain

Apart from your health entries, we obtain the following categories of information:

03How We Use Information, and Why

We use the information described above to:

• Run the App — record your measurements, build trend charts, send reminders, and display the interface;
• Understand and improve CareLog — study usage patterns, investigate technical problems, and decide which features to develop next;
• Help you — answer your questions, troubleshoot problems, and provide technical assistance;
• Personalize your experience — tailor content, suggestions, and advertising to your general interests and the way you use the App;
• Keep things safe — detect, investigate, and prevent unauthorized access, abuse, and other harmful activity;
• Meet legal requirements — comply with applicable laws, regulations, legal processes, and enforceable government requests.

Legal bases for processing (EEA, UK, and Switzerland)

Where the GDPR or equivalent law applies, we rely on one or more of these legal bases: your consent; the need to perform our contract with you by providing the App’s services; our legitimate interests in analytics, security, and improving the Service; and compliance with our legal obligations.

04Device Permissions

CareLog may ask for the Android permissions listed below to support particular features. Each one is optional: you can allow or revoke any permission at any time in your device’s settings, and declining will not affect the App’s core functionality.

05Analytics and Advertising Partners

To keep CareLog free and to keep improving it, we integrate SDKs from third-party analytics and advertising providers. These providers may independently collect device identifiers, IP addresses, advertising IDs, and interaction data, which they handle under their own privacy policies. They are bound by appropriate confidentiality and data-protection obligations, and they do not receive your health entries, such as blood pressure, heart rate, or glucose readings.

Analytics

• Google (Analytics, Firebase & ad services)
• Adjust
• Snowball

Advertising and mediation

• AppLovin
• BidMachine
• CloudX
• Fyber (Digital Turbine)
• Google AdMob
• InMobi
• Meta Audience Network
• Mintegral
• Moloco
• Pangle
• PubMatic
• TopOn
• TradPlus
• Unity Ads
• Vungle

06When Information Is Disclosed

We do not sell, rent, or trade your personal information. Information is disclosed only in the limited situations below:

• Vendors and partners that help us operate the App, analyze usage, or deliver ads, under contractual confidentiality and data-protection terms;
• Legal requirements, where a law, regulation, legal process, or enforceable government request requires disclosure;
• Protection of the rights, property, or safety of the CareLog Team, our users, or the public;
• Corporate transactions, such as a merger, acquisition, reorganization, or sale of assets — in which case we will tell you about the change and any choices you have;
• Aggregated or de-identified form, meaning information that has been combined, anonymized, or otherwise processed so that it cannot reasonably be used to identify you.

07Retention and Deletion

Usage and analytics data that is collected automatically is kept only for as long as needed to fulfil the purposes described in this Policy, which are generally internal analysis and improving the Service. Information you send in a support request is kept only as long as needed to resolve your request and to meet legal record-keeping requirements.

Health entries stored on your device remain entirely under your control. You can delete them at any time in the App’s settings, or by uninstalling the App.

08How We Protect Information

We use a combination of administrative, technical, and organizational measures to protect the information in our care, including:

• encryption of data in transit using Transport Layer Security (TLS);
• role-based access controls, so that only authorized personnel can reach internal data;
• contractual data-protection obligations for our third-party vendors; and
• regular security assessments and vulnerability reviews.

Even so, no method of transmitting or storing data electronically is completely secure. We cannot guarantee absolute security, and you provide information at your own risk.

09International Transfers

When information about users in the European Economic Area, the United Kingdom, or Switzerland is transferred to other countries, we rely on appropriate safeguards — such as the Standard Contractual Clauses approved by the European Commission, or other mechanisms recognized under applicable data protection law — so that it remains protected at a level consistent with the GDPR.

10Your Privacy Rights

10.1 EEA, UK, and Switzerland

If you live in the European Economic Area, the United Kingdom, or Switzerland, the GDPR and similar laws give you the right to:

• access a copy of the personal data we hold about you;
• rectify personal data that is inaccurate or incomplete;
• erase your personal data, subject to any legal duty we have to retain it;
• restrict how we process your data in certain situations;
• port your data, receiving it in a structured, commonly used, machine-readable format;
• object to processing based on our legitimate interests or carried out for direct marketing; and
• withdraw consent at any time where we rely on it, without affecting the lawfulness of processing carried out before you withdrew.

We will respond within one month of receiving your verified request.

10.2 California

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act, gives you the right to:

• know the categories and specific pieces of personal information we have collected about you;
• delete personal information we have collected, subject to certain exceptions;
• correct personal information that is inaccurate;
• opt out of the sharing of your personal information for cross-context behavioral advertising. We do not sell personal information, but some advertising-related data sharing may count as “sharing” under the CPRA; and
• be free from discrimination — we will not deny you the Service, charge you a different price, or give you a lower quality of service because you exercised these rights.

We do not sell your personal health data.

11Children

CareLog is not meant for anyone under thirteen (13), and we do not knowingly collect personally identifiable information from children under 13. If we find out that a child under 13 has given us personal information, we will delete it promptly. Parents or guardians who believe their child has provided personal data to us should contact us using the details in Section 13.

12Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make a material change, we will revise the effective date shown at the top of this page and, where practical, let you know within the App. If you keep using the App after an update, you are accepting the revised Policy.