Privacy Policy

1. Information We Collect

1.1 Account Information

• Email address, for sign-in
• Hashed credentials (we never store plaintext passwords)

We do not collect or store your name or gender.

1.2 What You Track (Your Health / Personal Data)

Depending on the conditions and trackables you set up, this may include:

• Values you log (0–10 scales, counts, durations, yes/no, choices, ratings)
• Free-text notes
• Timestamped events (for example, a craving or an episode)
• Scored self-check-ins (for example, PHQ-9 / GAD-7)
• Medications and doses
• Visit and milestone dates and questions
• Reminder preferences

It is stored under your account with per-user row-level security so only you can read it.

1.3 Device Data

• Anonymized crash reports only, which never contain your entries
• We do not collect advertising identifiers or sell device data
• Location: we do not collect your location by default. Location is used only if you turn on the optional Weather feature — see section 4.

1.4 On-Device Only (Never Sent to Our Servers)

• Home-screen photos and your "why" photos stay on your device.
• Reproductive / cycle tracking is device-only by design. If you set up a cycle condition, it is built and stored on your phone only and is never written to our servers. This is enforced in our database, which rejects any attempt to store a device-only condition — including via our own onboarding. We cannot see your cycle data.

2. How We Use Your Data

• Provide the app: record your check-ins, show your history and trends, compute streaks and gentle "worth-mentioning" flags, and generate reports you choose to view or share.
• AI observations (opt-in, off by default): off unless you explicitly enable it. When on, a minimum-necessary, de-identified summary (never your notes, never your name) may be sent to a contracted, no-training AI provider to surface gentle patterns. You can turn it off at any time.

We never use your data for:

• Advertising or marketing
• Training AI models
• Selling to third parties
• Behavioral targeting

3. Self-Check-Ins & Crisis Resources

Some templates include standardized self-check-ins (for example, PHQ-9, GAD-7). Results are shown to help you share with your care team — never as a diagnosis. If a mood check-in indicates thoughts of self-harm, the app surfaces crisis resources (for example, 988 in the US) immediately.

4. Optional Weather Feature (Location)

Weather is opt-in and off by default, offered only on templates where it may help (today: migraine, and pain & joints).

• We do not request location or collect weather unless you turn this on.
• When you turn it on, the app asks for location permission at that moment. If you decline, nothing changes and the feature stays off.
• Your location is used on your device only, to look up local weather. Your location is never stored in, or transmitted to, AGC's servers.
• Separately, you may tag "Weather" as your own guess about a trigger (for example, for migraine). That is a note you write yourself — it uses no location and collects no weather data.

5. Security

• TLS 1.2+ in transit; encrypted database storage.
• Row-level security is forced on every table that holds your data, keyed to your account — one user can never read another's rows.
• Biometric / passcode app lock; health screens are hidden in the app switcher.
• Server logs exclude your entries.
• The service_role key that can bypass row-level security is used only in server-side functions, never in the apps.

6. Data Sharing

We share your data only:

• via opt-in AI observations (de-identified, contracted provider);
• when you export or share a report with your care team (you control this);
• to meet a legal obligation with proper legal process.

Reproductive / cycle data (device-only) is never shared because it never leaves your device.

We do not share data with analytics services, ad networks, or data brokers.

7. Retention & Deletion

• Your data is retained while your account is active.
• You can delete individual entries in the app, or delete your whole account (see Account Deletion).
• Account deletion removes your data immediately; encrypted backups clear within 30 days. We do not retain your health data after deletion.

8. Your Rights

You have the right to:

• Access your data (visible in the app)
• Export a report (PDF)
• Delete individual items or your entire account
• Opt out of AI observations at any time

9. Age

AGC is not intended for anyone under 18 years of age. We do not knowingly collect information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last Updated" date. Continued use of the Service after changes means you accept the updated policy.

11. Contact Us