Privacy Policy

1. Information We Collect

We collect only the minimum information necessary to operate the Service.

1.1 Account Information

• Email address (for authentication)
• Account credentials (stored using secure hashing — we never store plaintext passwords)

We do not collect or store your name. The app refers to you only as "you" or via an optional pronoun preference you may set.

1.2 Health Information (PHI)

The core purpose of LMS Companion is symptom tracking. When you use the Service, you may enter:

• Daily symptom values (numeric severity scores, 0–10)
• Personal notes about how you're feeling
• Visit dates and questions for your care team
• Reminder preferences

This information is Protected Health Information (PHI). We treat it with the highest level of care and security.

1.3 Device Information

• We do not collect device identifiers, advertising IDs, or location data
• Crash reports (if enabled by your device OS) may contain anonymized stack traces but never PHI content

2. How We Use Your Information

• Provide the Service: display your symptom history, generate reports, and track patterns
• AI Observations (opt-in only): if you enable AI observations in Settings, anonymized symptom patterns (never notes, never names) are sent to a third-party AI provider. This feature is off by default and will only be enabled once a no-training data processing agreement is in place with the provider.
• Authentication: verify your identity when you sign in

We never use your data for:

• Advertising or marketing
• Training AI models
• Selling to third parties
• Profiling or behavioral targeting

3. How We Protect Your Information

• Encryption in transit: all data transmitted between your device and our servers uses TLS 1.2+
• Encryption at rest: your data is stored in encrypted databases
• Row-level security: database policies ensure you can only access your own data — no other user can read or modify your records
• Biometric app lock: the app requires biometric authentication (Face ID, fingerprint) or device PIN before displaying any health data
• Screen protection: health screens are hidden in the app switcher/recent apps
• No PHI in logs: our server logs never contain symptom values, notes, or other health data
• Dedicated infrastructure: your health data is stored on a dedicated, isolated database — never shared with other applications

4. Data Sharing

We share your data only in these limited circumstances:

• AI Observations (opt-in): anonymized pattern data (no names, no notes) sent to a contracted no-training AI provider, only after a data processing agreement is signed. Until then, AI observations remain disabled.
• Your care team (you control): you may export reports or share PDFs with your medical team using your device's share function — we never send data to anyone without your explicit action
• Legal obligations: only if required by law with proper legal process

We do not share data with analytics services, ad networks, or data brokers.

5. Data Retention & Deletion

• Your health data is retained as long as your account exists
• You may delete individual entries at any time within the app
• You may delete your entire account (see Account Deletion)
• Deleting your account removes your data right away; encrypted backups clear within 30 days, after which your data is gone from all systems.

6. Your Rights

You have the right to:

• Access all data we hold about you (visible in the app at all times)
• Export your data via PDF reports
• Delete your data partially (in-app) or entirely (account deletion)
• Opt out of AI observations at any time in Settings

7. Children's Privacy

LMS Companion is not intended for use by anyone under 18 years of age. We do not knowingly collect information from children.

8. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date. Continued use of the Service after changes means you accept the updated policy.

9. Contact Us