Privacy policy

This policy explains what happens to information in INR Tracker ("the app"), a warfarin dose and INR record for iPhone and Android.

The short version

• There is no account and no sign-up.
• Everything you record is kept on your device, in an encrypted database. We can't see it, and we don't receive a copy.
• Your records leave your device only in a backup or export you make or turn on, a report or email you send, or, still encrypted, in your phone's own device backup.
• The app has no analytics, no advertising and no tracking.
• Apart from automatic backups you turn on, the only thing the app sends over the internet by itself is a check with our payment provider, RevenueCat, to confirm whether you've made the one-time purchase. That check never includes anything you've recorded.

Who we are

INR Tracker is made by Stefan Tulac, an individual developer based in the United Kingdom ("we", "us"). For anything in this policy, email inrtrackersupport@gmail.com.

For the small amount of personal data we do receive (see "Information we receive" below), we are the data controller under UK data protection law.

What the app stores on your device

The app keeps what you enter in a database on your device:

• INR results and test dates
• your warfarin dose schedule, and the doses you record as taken or skipped
• vitamin K intake, including any foods you add
• physical activity
• health events, and any notes you write
• the target range and alert threshold you set
• clinic details you enter, such as the clinic's name, phone number and email address, your ID at the clinic, and notes
• clinic report records, reminder settings and app preferences
• a record of when you accepted the app's disclaimer

The database is encrypted. The key that opens it is created on your device and held in your device's secure storage (the iOS Keychain or the Android Keystore). None of this is sent to us.

Your device's own backup service, such as iCloud Backup or Android device backup, may include the app's database file. That copy stays encrypted, and the key that opens it can't be moved to another device.

The app also keeps a short log of technical errors on your device, so that you can share it with us if you ask for help.

When information leaves your device

Your records leave your device when you send them, or turn on something that sends them (your phone's own device backup is covered above):

• Backups. You can save a backup file anywhere through your device's share options, and protect it with a passphrase, using AES-256 encryption. A backup made without a passphrase can be read by anyone who has the file.
• Automatic backups. If you turn them on, the app writes backups on a schedule to your own iCloud Drive (on iPhone) or to a folder you choose (on Android), which may be in a cloud storage service. Automatic backups are not protected with a passphrase, so anyone with access to that iCloud Drive or folder can read them.
• Exports. CSV and JSON exports are not encrypted, and go wherever you send them.
• Clinic reports. A PDF report goes wherever you share, save or print it.
• Emailing your clinic. The app opens your own email app with a draft. Nothing is sent until you send it, and it goes through your email provider, not through us.
• Calling your clinic. The app opens your phone app with the clinic's number.
• The error log. It leaves your device only if you tap Share error log. It is meant to hold technical details rather than your records, but an error message can occasionally include a piece of information the app was working with, so look through it before you share it.

Once your information is with a cloud service, an email provider, or anyone you share it with, their own privacy terms apply: for example, Apple's for iCloud Drive, or Google's for Google Drive.

Information we receive

When you contact us

If you email us, we receive your email address and whatever you send, including any attachments such as an error log. We use it only to reply to you and to fix problems you report. We keep support emails for up to two years after the conversation ends, then delete them.

Please include only the health details needed to answer your question. If you do include health information, we use it only to answer you, and you can ask us to delete it at any time.

Legal basis: our legitimate interest in answering you and keeping the app working. Where you choose to send us health information, your explicit consent.

The one-time purchase

The app offers a one-time purchase through the App Store or Google Play. We use RevenueCat, Inc. to confirm and restore purchases. When the app opens, and when you buy or restore the purchase, the app contacts RevenueCat. RevenueCat receives:

• a random ID the app creates for this purpose, which is not based on your name, your email address or any account you hold
• purchase and transaction details from the App Store or Google Play
• technical details needed to handle the request, such as your device model, operating system version, app version, store country and IP address

RevenueCat never receives anything you've recorded in the app. We use this information only to confirm and restore your purchase.

RevenueCat is based in the United States. Where your personal data is transferred outside the UK, it is protected by the safeguards UK data protection law requires. See RevenueCat's privacy policy.

Apple or Google take the payment itself. We never receive your name, payment card or billing details. Apple's or Google's privacy policy applies to the payment.

Legal basis: to perform our contract with you, by providing and restoring the features you've paid for.

Crash reports and statistics from Apple and Google

If you've chosen in your device settings to share analytics with app developers, Apple or Google may give us crash reports and app statistics. Apple or Google prepare these, and they don't identify you. The app itself doesn't collect them.

What we don't do

• There is no account or sign-in.
• The app contains no analytics or advertising tools.
• We don't track you across other apps or websites.
• We don't sell your personal data, share it with advertisers, or use it for marketing.
• The app doesn't use your camera, photos, location or contacts.

Notifications

Reminders are scheduled on your device. They don't come from a server. A notification can appear on your lock screen. Dose reminders say "Today's dose is due." and don't show your dose amount. You can change what appears on your lock screen in your device's notification settings.

The app asks for permission to show notifications. On Android, it can also schedule them for an exact time and restore them after your device restarts.

Children

The app is intended for adults. It is not directed at children, and we don't knowingly receive personal data from anyone under 18.

Your rights

Your records are on your device, so you control them. You can view, change and export them in the app. When you delete an entry, it no longer appears in the app, but it stays in the database on your device and is included in backups and in CSV and JSON exports. Deleting the app removes its database from your device. Backups and exports you've saved elsewhere stay where you put them until you delete them. We don't hold a copy, so we can't recover your records if they are lost.

Under UK data protection law, you have rights over the personal data we do hold (support emails, and purchase records held by RevenueCat). You can ask to access it, correct it, delete it, restrict or object to how it's used, or receive a copy of it. Email us to use any of these rights. The purchase ID isn't linked to your name, so to find purchase records we may ask for details such as your App Store or Google Play order number.

If you're unhappy with how we've handled your personal data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk. We'd appreciate the chance to put things right first, so please contact us before you do.

Security

Your database is encrypted on your device, and passphrase-protected backups are encrypted with a key made from your passphrase. We don't run a server that holds your records. No method of storing or sending data is completely secure, so keep your device locked and your backup passphrase private.

These web pages

These pages are hosted on Cloudflare Pages. They use no cookies, analytics or tracking scripts. Cloudflare processes technical information, such as your IP address, to deliver the pages and protect them from abuse. See Cloudflare's privacy policy.

Changes to this policy

If we change this policy, we'll update this page and the date at the top. If a change affects what information leaves your device, we'll also say so in the release notes of the app update that makes the change.

Contact

Stefan Tulac
inrtrackersupport@gmail.com

See also the Terms of use.