Privacy Policy

1. Introduction

Flareline ("we", "us", or "our") is a chronic-illness tracking app that helps you monitor symptoms, triggers, medications, and appointments. We take your privacy seriously — especially given the sensitive nature of health data. This policy explains what we collect, why, and how it is protected.

2. Information We Collect

• Account data: email address and display name provided at sign-up.
• Health data: check-ins, symptom logs, trigger logs, medications, conditions, and appointment notes you enter.
• Photos: optional photos attached to check-ins, stored encrypted in private cloud storage.
• Device data: push notification token (if you grant permission), used only to deliver in-app notifications.
• Purchase data: subscription status managed by RevenueCat. We do not store payment card information.

3. How We Use Your Information

• To provide and personalise the app's health-tracking features.
• To generate AI-powered weekly summaries of your health trends (Premium feature). Data is sent to Anthropic's API solely to produce your summary and is not used to train AI models.
• To generate appointment preparation reports (Premium feature).
• To send you push notifications you have opted into.
• To manage your subscription and billing via RevenueCat.
• We do not sell, share, or rent your health data to third parties.

4. Data Storage and Security

Your data is stored in Supabase (PostgreSQL), hosted on AWS infrastructure in the United States. Photos are stored in a private object-storage bucket — no public URLs are generated; access is via short-lived signed URLs tied to your authenticated session. All data is transmitted over TLS/HTTPS.

5. Third-Party Services

• Supabase — authentication and database hosting.
• RevenueCat — subscription and purchase management.
• Google Play / Apple App Store — payment processing for subscriptions.
• Anthropic — AI text generation for weekly health summaries (Premium).
• Expo / Firebase Cloud Messaging — push notification delivery.

Each third-party service operates under its own privacy policy and data processing agreements.

6. Data Retention and Deletion

Your data is retained for as long as your account is active. You may request deletion of your account and all associated health data at any time by emailing techhorizoninnovationspk@gmail.com. We will complete deletion within 30 days.

7. Children's Privacy

Flareline is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

8. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of material changes via email or an in-app notice. Continued use of the app after changes constitutes acceptance of the updated policy.

9. Contact Us

If you have questions about this privacy policy or your data, please contact us at techhorizoninnovationspk@gmail.com.