Privacy Policy

1. Introduction

Welcome to My Daily Health Journal ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal health information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our health tracking application and related services.

2. Information We Collect

2.1 Health Information

We collect health-related information that you voluntarily provide, including:

• Weight measurements and tracking data
• Blood pressure readings
• Blood sugar levels
• Medication information and dosages
• GLP-1 treatment progress and side effects
• Food intake and dietary information
• Physical activity and exercise data
• Health journal entries and notes

2.2 Account Information

When you create an account, we collect:

• Email address
• Name and profile information
• Account preferences and settings
• Authentication credentials

2.3 Technical Information

We automatically collect certain technical information:

• Device information and operating system
• Browser type and version
• IP address and location data
• Usage patterns and app interactions
• Error logs and performance data

3. How We Use Your Information

We use your information for the following purposes:

• Providing and maintaining our health tracking services
• Generating personalized health insights and trends
• Sending medication reminders and health notifications
• Improving our application features and user experience
• Providing customer support and technical assistance
• Ensuring security and preventing fraud
• Complying with legal obligations and healthcare regulations

4. Information Sharing and Disclosure

4.1 Healthcare Providers

With your explicit consent, we may share your health information with your healthcare providers to support your treatment and care coordination.

4.2 Service Providers

We may share information with trusted third-party service providers who assist us in operating our application, including:

• Cloud hosting and data storage providers
• Analytics and performance monitoring services
• Customer support platforms
• Payment processing services

4.3 Legal Requirements

We may disclose your information when required by law, court order, or government regulation, or to protect our rights, property, or safety.

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the business transaction, subject to the same privacy protections.

5. Data Security

We implement comprehensive security measures to protect your health information:

• End-to-end encryption for data transmission
• Secure data storage with industry-standard encryption
• Regular security audits and vulnerability assessments
• Access controls and authentication protocols
• Employee training on data privacy and security
• Compliance with HIPAA and other healthcare data protection standards

6. Your Rights and Choices

6.1 Access and Control

You have the right to:

• Access and review your personal health information
• Update or correct inaccurate information
• Delete your account and associated data
• Export your health data in a portable format
• Opt-out of certain data processing activities

6.2 Communication Preferences

You can control how we communicate with you:

• Manage email notification preferences
• Opt-out of marketing communications
• Control push notification settings
• Set medication reminder preferences

7. Data Retention

We retain your health information for as long as necessary to provide our services and comply with legal obligations. You may request deletion of your data at any time, subject to certain legal and regulatory requirements. Deleted data is permanently removed from our systems within 30 days of your request.

8. International Data Transfers

Your information may be processed and stored in countries other than your own. We ensure that all international data transfers comply with applicable data protection laws and implement appropriate safeguards to protect your information.

9. Children's Privacy

Our services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will take steps to delete it promptly.

10. Third-Party Integrations

Our application may integrate with third-party services such as:

• Google Calendar for appointment scheduling
• Health monitoring devices and wearables
• Electronic health record systems
• Pharmacy and medication management platforms

These integrations are subject to their own privacy policies, and we encourage you to review them before connecting your accounts.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by email or through our application. Your continued use of our services after such changes constitutes acceptance of the updated policy.

12. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

13. Compliance and Certifications

Our privacy practices comply with:

• Health Insurance Portability and Accountability Act (HIPAA)
• General Data Protection Regulation (GDPR)
• California Consumer Privacy Act (CCPA)
• SOC 2 Type II security standards
• ISO 27001 information security management