This Policy explains what Scores collects, how we use it, with whom it is shared, how long it is kept, and your rights. By installing or using the App, you agree to this Policy. If you do not agree, do not use the App.
Key Privacy Principles
Local Processing
Calculator inputs never leave your device. All scoring runs locally.
No PHI Uploaded
We do not collect, store, or sell health information.
Account Optional
You can use the free tier without one.
No Data Sale
No ads, no data sale, no data brokers.
Information We Collect
Account Data
Only if you sign in via Firebase Authentication: unique account identifier (UID), display name (if shared), email (or Apple private-relay address), sign-in timestamps, and provider used. We never receive your password.
Favorites
Only if you sign in and use the feature: stored locally and in Firestore under your UID — the calculator identifier and timestamp. We do not store your inputs, the score produced, or any patient context.
Purchases
If you buy Scores Premium, Apple or Google processes the transaction. We receive only a transaction identifier and entitlement status ("this account is Premium").
Usage & Diagnostics
Aggregated, non-identifying data: which calculators are opened, app/OS version, device model class, locale, and crash reports. Tied to a rotating install identifier, not to your account.
App Tracking Transparency
iOS Users
Before any tracking-mode SDK initializes, you'll see the ATT prompt. If you decline, no tracking-scope identifiers are collected.
Android Users
We honor "Limit ad tracking" and "Delete advertising ID" settings.
What We Do NOT Collect
Patient identifiers; calculator inputs, outputs, or notes; microphone, camera, photos, contacts, or precise location; HealthKit / Google Fit data; biometric templates.
How We Use Information
01
Provide the App
Operate the App and sync your favorites across devices.
02
Verify Premium
Process and restore Premium purchases through Apple or Google.
03
Improve the App
Understand usage in aggregate to enhance features and performance.
04
Security
Keep the App secure and respond to support requests.
05
Service Notices
Send mandatory service notices. Marketing email is opt-in only.
We do not use information for advertising, profiling, sale, or any purpose unrelated to operating the App.
Legal Bases (GDPR / UK GDPR)
We do not process special-category health data; calculator inputs are not transmitted to us.
Sharing with Third Parties
We share only with the processors below, each contractually bound by data-protection obligations:
We may also disclose information when compelled by lawful legal process, to enforce our Terms, or to protect users' or the public's safety.
We do not "sell" or "share" personal information under the CCPA/CPRA, the Colorado Privacy Act, or comparable laws, and we do not engage in cross-context behavioral advertising.
Data Retention & International Transfers
1
Account Record
While account exists; deleted within 30 days of deletion request
2
Favorites
While account exists; deleted within 30 days
3
Premium Entitlement
While account exists, plus periods legally required for tax/audit (typically up to 7 years, receipt-only form)
4
Crash Logs
Up to 24 months, in aggregated form
5
Support
Up to 24 months from last interaction
International Transfers
Firebase data may be stored in Google data centers in the United States or other regions. EEA/UK/Swiss transfers rely on Google's Standard Contractual Clauses (https://cloud.google.com/terms/data-processing-addendum). By using the App, you understand your data may be processed in countries with different privacy laws.
Security & Your Rights
Security Measures
TLS 1.2+ for all Firebase traffic
Auth tokens stored in iOS Keychain or Android Keystore, OS-encrypted
Firestore security rules restrict each user to their own UID's documents
Least-privilege production access; dependency scanning and patching
If a breach affects your information, we will notify affected users without undue delay and notify the relevant authority where required by law.
Your Rights
Depending on your jurisdiction, you may have rights to access, correct, delete, restrict, port, or object to processing of your personal data, and to withdraw consent or lodge a complaint with your data-protection authority.
The fastest path to deletion is the in-app Settings → Delete Account flow.
To exercise any other right, write to [email protected]. We respond within 30 days (extendable by 60 days for complex requests with notice).
Additional Information
California (CCPA/CPRA)
We do not sell or share personal information. You have rights to know, delete, correct, and limit certain uses, and to designate an authorized agent. We do not knowingly process data of consumers under 16 for sale or sharing.
Children
Scores is for users 17+. We do not knowingly collect data from children under 13 (under 16 in EEA/UK). If you believe a child has provided information, contact us.
Health & Clinical Context
Scores is a clinical reference and decision-support tool, not a medical device cleared by the FDA, MHRA, or any other regulator for diagnostic use. We are not a HIPAA covered entity or business associate; calculator inputs remain on your device. If you use Scores at the point of care, you are responsible for compliance with your institution's privacy and clinical-governance policies. See the in-app Medical Disclaimer and Terms § 2.
Third-Party Services
Apple Sign-In is governed by Apple's Privacy Policy (https://www.apple.com/legal/privacy/). Google Sign-In and Firebase are governed by Google's Privacy Policy (https://policies.google.com/privacy). Store purchases are governed by Apple's Media Services Terms or Google Play's Terms of Service. We are not responsible for these third parties' practices.
Changes to This Policy
We may update this Policy. The "Last updated" date reflects the latest revision. For material changes (new data categories, new sharing relationships, or changes to your rights), we will give prominent in-app or email notice at least 14 days before the change takes effect, where practicable. Continued use after the effective date constitutes acceptance.