Privacy Policy

ContiTracker is a bowel diary app that helps patients and their care teams track symptoms, bowel movements, and daily habits. Because you share sensitive health information with us, we take your privacy seriously. This policy explains what we collect, why we collect it, and how we protect it.

By using ContiTracker you agree to the practices described here. If you do not agree, please do not use the app.

Health diary data you enter — bowel movement timestamps, stool type and consistency (Bristol Stool Scale), symptoms such as urgency, pain or bloating, accident events, free-text notes, and any other details you choose to log.

Account information — when you create an account: your email address and a hashed password. We use this solely for authentication and account management.

Device and usage data — device type, operating system, app version, and anonymised crash reports. We use this solely to diagnose bugs and improve reliability; we do not build advertising profiles from it.

We use your data to:

• Provide core app features — logging, history, and charts.
• Generate a downloadable CSV of your diary data when you choose to share with your care team or export it for yourself.
• Restore your diary if you reinstall the app or switch devices.
• Improve the app through anonymised, aggregated analytics (e.g. which features are used most).
• Send you service notifications you have opted into.

We will never use your health data for advertising or profiling.

With your care team — only when you initiate it. When you tap "Export / Email to Provider", you choose exactly who receives the CSV and how (email, messaging app, etc.). We do not transmit your data to any clinician without your explicit action.

With service providers. We use third-party infrastructure providers (cloud hosting, crash analytics) who process data on our behalf under strict data processing agreements. They may not use your data for any purpose other than providing their service to us.

Legal requirements. We may disclose information if required by law, court order, or to protect the safety of users or the public.

We do not sell your data — ever, to anyone.

ContiTracker is designed with HIPAA principles in mind — including encryption of data in transit and at rest, access controls, and audit logging. If your healthcare organisation requires a Business Associate Agreement (BAA), please contact us at support@contitracker.com.

Individual consumer use of the app (outside a covered entity) may not trigger HIPAA obligations, but we apply the same security standards regardless.

All data is encrypted in transit using TLS and encrypted at rest using AES-256. Access to production systems is restricted to authorised personnel and protected by multi-factor authentication.

No method of electronic storage is 100% secure. If you believe your account has been compromised, contact us immediately at support@contitracker.com.

We retain your data for as long as your account is active. If you delete your account, we permanently delete your diary data within 30 days, except where retention is required by applicable law. Anonymised, aggregated analytics data (from which you cannot be identified) may be retained indefinitely.

You have the right to:

• Access — request a copy of all data we hold about you.
• Deletion — request deletion of your account and all associated data.
• Export — download your diary as a CSV directly within the app at any time.
• Portability — receive a machine-readable copy of your data on request.
• Withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, email privacy@contitracker.com. We will respond within 30 days.

ContiTracker is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with data, please contact us and we will promptly delete it.

We may update this policy from time to time. Material changes will be communicated via in-app notification or email at least 14 days before they take effect. Continued use of the app after a change takes effect constitutes acceptance of the updated policy.

Questions or concerns about this policy? Write to us at support@contitracker.com or use the in-app Support link. We aim to respond within 5 business days.