Privacy Policy
This policy explains what IC Buddy™ collects when you use the app or this website, why we collect it, and the choices you have. It applies to IC Buddy Health PBC (“IC Buddy,” “we,” “us”) and the IC Buddy mobile app and icbuddy.app website.
1. What we collect
Information you enter into the app
Symptom entries, food and drink logs, flare notes, medications, and any free-text you write in your diary. This is the core of the product. It stays encrypted on your device and, if you enable backup, encrypted in your IC Buddy account.
Account information
If you create an account or join the beta waitlist, we store your email address and a hashed password (or a sign-in token from your Apple or Google account, if you use those).
Device and diagnostic information
Operating system version, app version, crash reports, and anonymous error traces. We use these to fix bugs. They do not contain your symptom entries.
What we do not collect
- We do not collect advertising identifiers (IDFA, AAID).
- We do not collect your precise location.
- We do not collect your contacts or calendar.
- We do not run third-party advertising SDKs.
2. How we use it
- To show you your own symptom history, patterns, and reports inside the app.
- To sync your diary across your devices, if you have enabled backup.
- To send transactional email (password resets, beta invitations, a rare product update). You can unsubscribe from product emails at any time; you cannot unsubscribe from security-related emails while you have an active account.
- To diagnose crashes and fix bugs.
3. How we share it
We share the minimum amount of data needed to run the service, and only with vendors contractually bound to the same privacy standards:
- Hosting and storage: the cloud provider that runs our encrypted backups.
- Email delivery: the service that sends password resets and beta invitations.
- Error monitoring: the service that receives crash reports (with diary content redacted before it leaves the device).
We do not sell your data. We do not share it with advertisers, data brokers, insurers, or employers. If we are ever required to disclose data by a valid legal order, we will push back where we can and notify you where we are legally allowed to.
4. How long we keep it
Your diary is kept for as long as your account is open. If you delete your account, we delete the associated data within 30 days, except where we are required to retain records (for example, billing records if you ever become a paying user). Crash and diagnostic logs are kept for up to 90 days.
5. Your choices
- Export. You can export your entire diary to a portable file from the Settings screen.
- Delete. You can delete your account, and all of your data with it, in two taps from the Settings screen.
- Access and correction. Write to us at icbuddy.support@gmail.com to request a copy of what we hold about you, or to correct it.
- Regional rights. If you live in the EU, UK, or California, you have additional rights under the GDPR, UK GDPR, or CCPA. Email us and we will honor them.
6. Children
IC Buddy is not directed to children under 16. We do not knowingly collect information from anyone under 16. If you believe a child has created an account, email icbuddy.support@gmail.com and we will delete it.
7. Security
Diary entries are encrypted at rest on your device and in transit to our backup service. No system is perfectly secure; we will notify affected users promptly in the event of a material incident.
8. Changes to this policy
If we make material changes to this policy, we will tell you in the app and by email before the changes take effect.
9. Contact
IC Buddy Health PBC. For privacy questions, write to icbuddy.support@gmail.com. For anything else, write to icbuddy.support@gmail.com.