FibroRadar — Privacy Policy

FibroRadar ("the app") is a wellness application that helps you anticipate fibromyalgia flare risk and cope through personal observation. Privacy is a core design principle of the app: your data stays on your device by default. This policy clearly and honestly explains what data is processed, where it goes (and where it does not).

Medical disclaimer: FibroRadar does NOT provide diagnosis, treatment, or medical advice. Outputs are for personal observation and wellness purposes only. Consult your physician for health decisions.

1. Data controller / contact

• Developer: Fatih Kunak
• Contact: fatih.kunak@gmail.com

You can write to this address for any privacy-related question, request, or data deletion request.

2. Core principle: stays on-device (local-first)

All health and wellness data you enter (listed below) is stored in a local database (SQLite) on your phone. For this data there is no account, no cloud synchronization, and no central server.Uninstalling the app or clearing app data removes this data from your phone.

3. Data processed and where it goes

3.1 Health / wellness data — STAYS ON-DEVICE

What you enter or the app computes:

• Daily check-in: pain regions (WPI), symptom severity (SSS), sleep, stress, overexertion
• FIQR (monthly functional impact) and CSI (central sensitization) questionnaire answers
• Medication-use days and effect notes
• Custom triggers and menstrual cycle phase
• Computed flare risk, ACR 2016 screening status, PSD score

This data is kept only on your device; it is never sent to any server.

3.2 Location — ONLY for weather; coordinates to a third party

Barometric pressure and humidity are commonly reported fibromyalgia triggers. To obtain the weather forecast, the app:

• Requests your low-accuracy (approximate) location (foreground permission),
• Sends latitude/longitude coordinates to the Open-Meteo weather service (api.open-meteo.com) and in return receives pressure + humidity + temperature,
• Caches the coordinates on-device so it does not ask repeatedly.

Only coordinates go to Open-Meteo; your name, health data, or identity never do. If you do not grant location permission, the app still works without it.

3.3 Wearable device data (optional) — STAYS ON-DEVICE

If you allow it, sleep, resting heart rate, heart-rate variability (HRV), and step data are read via Android Health Connect. This data is processed on your device and never sent to a server.

3.4 AI Summary (optional, premium, you must explicitly turn it on) — de-identified summary to a provider you choose

If you turn on the optional, premium "AI Summary" feature and enteryour own API key:

• The app sends a de-identified numerical summary (average WPI/SSS/PSD, flare-risk score, trigger ranking) to the provider you choose and receives a narrative summary. Supported providers:Anthropic Claude, Google Gemini, OpenAI GPT, Groq Llama — you choose which one to use and which key to enter.
• Never sent: your raw daily records, exact dates, your location, your name.
• If there is no key / you are offline, the app produces a local template summary without AI.
• This feature is OFF by default. Your API key is stored encrypted on your device (Android Keystore).

3.4b Doctor report (PDF) — ENTIRELY ON-DEVICE, goes nowhere, always free

From the findings the engines compute (WPI/SSS/PSD, ACR 2016 status, flare risk, FIQR, trigger ranking), the app produces — entirely on your device — a PDF summary you can take to or share with your doctor. This is a separate feature, independent from AI Summary above — it needs no internet connection, no API key, and no third-party provider; no data ever leaves your device.

3.5 Premium subscription (optional) — via Google Play Billing + our own verification server

Only the "AI Summary" feature unlocks via an optional monthly/yearly subscription:

• Payment/card details are processed directly by Google Play; the app never sees or stores them.
• To verify your purchase receipt, a randomly generated (not tied to your identity)anonymous ID and the purchase token are sent to our own server(hosted on Cloudflare Workers, fibroradar-entitlement.fatih-kunak.workers.dev). Our server verifies the token with the Google Play Developer API and records your subscription status. Your name, email, or health data are never part of this exchange.
• You can cancel the subscription at any time from your Google Play account settings.

4. What we do NOT collect

• No account — no registration, email login, or username required.
• No ads, no advertising ID.
• No analytics / tracking / third-party tracker SDKs.
• No data sales — your data is never sold or shared for marketing.

5. Permissions and their reasons

Notifications and scheduled reminders are generated locally on your device; their content is never sent to a server.

6. Data retention and deletion

• Health/wellness data remains on your device until you delete it.
• Export/restore: you can export your data as a single JSON file to back it up yourself, then restore it.
• Deletion: Uninstalling the app or clearing app data deletes your local data.
• Premium entitlement: When you cancel your subscription, the anonymous-ID↔entitlement record on our server expires; you may request its deletion.

7. Data security

• All network traffic leaving the device occurs over HTTPS (encrypted).
• Your API key (AI Summary) is stored encrypted on your device (Android Keystore).
• Data-minimization principle: only necessary/de-identified data goes to a server (see §3).

8. Third-party services

• Open-Meteo (weather) — coordinates are sent.https://open-meteo.com/en/terms
• Anthropic / Google Gemini / OpenAI / Groq (optional, premium AI Summary) — only if you turn it on and select a provider; a de-identified numerical summary goes only to the provider you choose.
• Google Health Connect (optional wearable) — on-device read.
• Google Play Billing + Google Play Developer API (optional subscription) — payment processed by Google; an anonymous ID + purchase token is relayed through our own server to verify it.
• Our own entitlement server (hosted on Cloudflare Workers) — only for premium subscription verification, anonymous ID + purchase token.

9. Children's privacy

FibroRadar is not intended for children under 13 and does not knowingly collect data from children.

10. Your rights (GDPR)

Because your data resides largely only on your device, it is directly under your control. Under the applicable law (GDPR Arts. 15–22) you have rights of access, rectification, erasure, restriction, data portability, and objection. For your requests:fatih.kunak@gmail.com.

11. Changes

This policy may be updated. On material changes, the effective date is updated and, where appropriate, a notice is shown in the app.

12. Contact

For questions and requests: fatih.kunak@gmail.com