LVRHealth — Privacy Policy

LVRHealth (“App”, “we”, “us”) is designed to be privacy-first. Your health information is stored on your device and is not sent to us. We do not require an account, and we do not collect, sell, or share your personal data for advertising. This policy explains what data the App handles and the one optional feature that transmits data to a third party.

The following is created by you and stored locally on your device only:

• Medications & Inventory: Medications, dosages, schedules, and pill-inventory counts.
• Logs: Dose logs, including whether a dose was taken, skipped, or missed, times, and any skip reason you record.
• Appointments: Appointments you add.
• Lab Reports: Lab reports and lab results, including the original report images or PDFs you import or scan.

This data is stored in the App’s private on-device storage. We (the developer) do not have access to it. If you have your device’s own backup enabled (for example, encrypted device backup), your own backup may include this data under your control — we never receive it.

The App contains no advertising, no third-party analytics, and no tracking SDKs. We do not build user profiles, and we do not use any Apple Health / HealthKit data.

To help auto-fill lab values, the App offers an optional feature that sends a report image or PDF to a third-party AI service, Google’s Gemini API (Google Generative Language API), to extract structured values.

• Explicit Consent: This runs only after you explicitly consent to it. If you decline, the App uses an on-device parser and no report data leaves your device.
• Data Transmission: When used, the document you selected (the image or PDF) is transmitted to Google for processing and the extracted values are returned to your device.
• Third-Party Terms: Google’s handling of that data is governed by Google’s API Terms of Service & Privacy Policy.
• Optional Use: You can avoid this feature entirely and still use the App.

(Note: If you use the paid tier of Google Gemini API via Google Cloud Vertex AI or paid AI Studio keys, your data is not used for model training per Google’s enterprise terms.)

If you enable the optional app lock:

• Passcode: Your passcode is never stored in plain text. Only a one-way SHA-256 hash is stored, in the device Keychain, accessible on that device only.
• Biometrics: Face ID / Touch ID is handled entirely by iOS. The App receives only a success/failure result and never accesses your biometric data.

Dose reminders are delivered as local notifications scheduled on your device. They are not sent through our servers and contain no data transmitted to us.

We do not sell, rent, or share your personal or health data with any third party for their own purposes. The only outbound transmission is the opt-in cloud extraction described in Section 4.

Because your data lives on your device, you are in control:

• In-App Deletion: Delete an individual report, medication, appointment, or log within the App.
• Complete Removal: Delete all App data by deleting the App from your device.
• Backups: If you use your own device backup, remove the data there according to your device/OS instructions.

The App is not directed to children and is not intended for use by anyone under 16 years of age. We do not knowingly collect data from children.

Depending on where you live (for example, under the EU/UK GDPR or the Australian Privacy Principles), you may have rights to access, correct, or delete your personal data. Because all of your data is stored locally and under your control, you can exercise these rights directly within the App. For any questions, contact us below.

We use on-device storage, Keychain protection for the passcode, and (for the opt-in extraction) encrypted HTTPS transmission. No method of storage or transmission is completely secure, and we cannot guarantee absolute security.

We may update this policy from time to time. Material changes will be reflected by updating the effective date shown above.

For privacy questions or requests: hello@awkiss.com