Privacy Policy

Privacy at a Glance

Information We Collect and Do Not Collect

Because your records never reach us, we cannot view, share, sell or hand them over, and we are unable to recover them for you if they are lost.

Data Stored on Your Device

Everything you add to the App is stored locally on your device, in the App's private storage:

Photos are saved again as new images when you add them, which removes their metadata, including the location where they were taken.

Reading Your Papers on Your Device

When you photograph or import a visit paper, lab result or prescription, the App reads its text with Apple's on-device text recognition and fills in the form for you to check. Nothing is filled in until you review it and tap Save. The image and its text are never sent to us or to any online service.

For harder papers you can choose to download an optional reading model (about 390 MB). It is a data file downloaded once from our public release on GitHub and then runs entirely on your device. The download request contains no information about you or your records; like any web request, it includes your device's IP address, which GitHub handles under its own Privacy Statement.

Reminders, Widgets and the Lock Screen

• Medicine and follow-up reminders are scheduled on your device, not sent from a server
• "Hide medicine names on the lock screen" ("Ẩn tên thuốc trên màn khoá") is on by default: notifications then say only that it's time for your medicine
• Home and lock screen widgets show only your next doses and next follow-up. With names hidden, they show no medicine or visit names at all
• Marking a dose as taken from a widget is saved on your device and applied the next time you open the App
• Adding a follow-up to your iPhone calendar uses Apple's own screen: you confirm the event yourself, and the App never reads your calendar

Backups and Exports

iCloud backup is coming soon. It will be optional and off until you turn it on, and your records will be encrypted on your device before they are stored in the App's private database in your own iCloud account, which only you can access. We will update this policy before it is released.

You can already export your records yourself: a PDF of your family's book, a picture of a medicine schedule or an emergency card. These files are created on your device and go only where you choose to save or send them.

Device Permissions

The App only asks for a permission when you use the feature that needs it, and works without any of them:

• Camera: to photograph visit papers, prescriptions and results. Photos are stored only on your device
• Photos: to find old papers in your library and add them, and to save a schedule or emergency card when you tap Save. Your library is searched on your device
• Microphone: only if you dictate a note by voice; speech is recognized on your device and never recorded or sent
• Notifications: for medicine and follow-up reminders, asked when the first reminder is created
• Face ID: to lock the App. Apple handles Face ID; the App never receives your face data

Purchases

XHealth Family is an auto-renewable subscription handled by Apple. We never receive your payment details. To verify the subscription and restore it on your other devices, the App uses RevenueCat, an in-app purchase service:

RevenueCat acts as our service provider and processes this data under its Privacy Policy. It is not used for advertising or to track you across other apps.

No Advertising, No Tracking

• XHealth shows no ads, in the free plan or in XHealth Family
• The App contains no advertising, analytics or crash-reporting SDKs
• The App does not use your device's advertising identifier and does not track you across apps or websites
• Your health data is never used for marketing, advertising or data mining
• If you opt in to share analytics with developers in your device settings, Apple may provide us with anonymous crash data that does not identify you or contain your records

Data Sharing and Disclosure

We do not sell, rent or share personal information. The App only uses RevenueCat for purchases (section 8), and GitHub hosts the optional reading model (section 4). Neither receives any health data. When you export a PDF, a schedule or an emergency card, the file goes only where you choose to send it.

If you email us for support, we use your email address and message only to reply to you, and we never share them. Please don't send us health records by email.

Data Security

Data Retention and Deletion

Your data stays under your control for as long as you keep it:

• Delete any visit, paper, medicine or family member inside the App at any time
• Profile → Backup → Delete all data ("Xoá toàn bộ dữ liệu") removes every record, photo and reminder from the device
• Deleting the App removes all of its data from that device
• Files you exported are yours to delete wherever you saved them
• Purchase records held by RevenueCat are kept only as long as needed to provide and verify XHealth Family, and can be deleted on request by contacting us
• Support emails are kept for up to 2 years, or deleted sooner on request

Health Information

XHealth is a record book. It is not a medical device and does not diagnose, recommend treatment, calculate doses or interpret your results. Text read from a photo is a suggestion until you confirm it. The App does not use Apple Health (HealthKit) and does not read health data from other apps.

Your Rights (GDPR, CCPA and Others)

Depending on where you live, you may have the right to access, correct, delete, export or restrict the processing of your personal data, and to withdraw consent. Because your records are held only on your device, you can exercise these rights directly in the App, without needing to ask us. We do not sell or share personal information as defined by the CCPA.

For any request about purchase records held by RevenueCat or support emails you have sent us, contact us at the address below. You may also lodge a complaint with your local data protection authority.

Children and Family Members

XHealth is meant to be used by adults, who may keep records for the family members they care for, including children and parents. Those records are stored only on the device of the person who added them. Please add someone else's records only if you look after their health or they agree to it.

The App is not directed at children under 13 (or the minimum age in your country), and we do not knowingly collect personal information from children. If you believe a child has sent us personal information by email, contact us and we will delete it.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time, for example when iCloud backup is released. When we do, we will update the "Last updated" date above and, for material changes, let you know in the App. Continued use of the App after changes take effect means you accept the updated policy.

Contact Us