Privacy Policy

1) Summary (Plain English)

• No account.
• No server uploads. Your cases, images, pins, notes, and exports are stored locally on your device by default.
• You control your data. We do not see or access it.
• Optional services. If you enable iCloud, Photos Library, or make purchases via the App Store, Apple may process data under their own terms.
• Diagnostics (optional). Crash logs and analytics may be shared with Apple if you opt in at the system level; we may view aggregated diagnostics to improve stability, but we don’t receive PHI.
• Pro features may require network for purchase validation; core planning works offline.

2) Data We Store or Access

On-device content (local only):

• Cases, source images, thumbnails
• Pins (locations, labels, unit/volume values, styles)
• Notes and export files (PDF/PNG)
• Preferences (theme, defaults), and local entitlements state

We do not receive this content. It remains on your device unless you export/share or enable your own cloud backup.

3) Data We Do Not Collect

• We do not collect names, emails, or phone numbers of your patients.
• We do not collect your cases, images, pins, notes, or exports on our servers.
• We do not run ads or embed ad SDKs.
• We do not sell data.

4) Payment & Entitlements

Purchases are processed by Apple via the App Store (and may be mirrored by an entitlement provider). Apple may collect purchase metadata, device identifiers, and subscription status to manage your entitlements. See Apple’s privacy policy for details.

5) Optional Cloud & Sharing

• iCloud Drive / iCloud Backup (optional): If you enable iCloud for device backup or files, Apple may store encrypted copies of your App data under Apple’s terms.
• Photos Library (optional): If you save exports to Photos, they are stored in your Photos Library under Apple’s policies.
• Manual sharing (optional): If you export and share files via Mail, Messages, AirDrop, or other apps, those apps and recipients will receive the content you choose to send.

6) Device Permissions & Purpose

• Camera: Capture live photos for planning (Pro).
• Photo Library (read): Import patient photos into cases (Pro).
• Photo Library Add: Save exported images to your Photos.
• Face ID/Passcode (system-level): Optional additional security before opening the App.

Permissions are requested and used only for the functions described.

7) Diagnostics & Crash Reports

If you opt in to share diagnostics with developers in iOS settings, Apple may provide us anonymized/aggregated crash data (e.g., iOS version, device model, stack traces). We use this solely to improve stability and performance. We do not receive PHI through diagnostics and do not attempt to re-identify users.

8) Children’s Privacy

The App is for professional use and not directed to children under 16. We do not knowingly collect personal information from children.

9) Security

Your content is stored locally on your device. We recommend enabling a device passcode/Face ID and keeping your iOS updated. If you enable iCloud or other backups, your data security is also subject to those providers’ safeguards.

10) Your Rights (GDPR/CCPA-style)

Although we do not maintain server-side copies of your content, you may contact us to exercise standard privacy rights (access, correction, deletion, portability, restriction, objection) regarding any limited information we control (e.g., support emails).

• Access/Deletion requests: benjamin@valethero.org
• Content you created on your device can be managed or deleted directly within the App or by deleting the App (which removes local App data). If you use iCloud or device backups, you may also need to manage or delete those backups via Apple.

11) International Users

If you use the App outside the U.S., you are responsible for complying with local laws. Any processing we perform (e.g., support inbox) occurs in the U.S.

12) Retention

• Local App data: Stays on your device until you delete it or uninstall the App.
• Support communications: Kept for as long as reasonably necessary to address your inquiry and maintain records, then deleted or anonymized.

13) Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “Effective date.” Continued use after changes constitutes acceptance.