Privacy Policy

1. Overview

This Privacy Policy ("Policy") describes how PristineCode Technologies ("we", "us", "our") collects, uses, stores, and protects information in connection with the LogiCura mobile application ("App") and related services, including the LogiCura Clinical Suite ("Services").

LogiCura is designed on a privacy-first, offline-first architecture. This is not a marketing statement — it is an engineering commitment embedded in every layer of the product. Your health data defaults to local on-device storage, encrypted at rest with AES-256. You are always in control.

By downloading, installing, or using the App or Services, you agree to the practices described in this Policy. If you do not agree, please do not use our Services.

This Policy applies to:

• The LogiCura Android application (Package ID: com.pristinecode.logicura)
• The LogiCura website at logicura.health and subdomains
• The LogiCura Clinical Suite web and mobile portals
• All associated API services and backend infrastructure

2. Information We Collect

We categorize the data we handle into distinct layers, each with specific collection conditions and purposes:

2.1 Data You Provide Directly

2.2 Data Collected Automatically

When you use the App, we may automatically collect limited technical information:

• Crash Reports: Anonymous stack traces to fix bugs (via Firebase Crashlytics). These contain no health data.
• App Performance Metrics: Aggregate, non-identifiable performance data via Firebase Analytics — with all personal identifiers stripped.
• Device Information: Android version, screen resolution, and device model — used solely for compatibility purposes.

2.3 Data We Do NOT Collect

• Your exact GPS location or real-time location tracking
• Contacts, call logs, or SMS data
• Biometric identifiers (fingerprints, face scans) — device authentication is handled by the OS
• Social media accounts or third-party login profiles beyond what you explicitly provide
• Advertising identifiers (GAID/IDFA) — we show no advertisements
• Browsing history or cross-app behavior

3. Health & Medical Data — Special Category Protection

Health and medical data is classified as a Special Category of personal data under GDPR (Article 9), India's Digital Personal Data Protection Act (DPDPA), and various state health privacy laws. We treat all health data in the App with the highest level of care.

3.1 Sensitive Health Data Categories

• Biomarker measurements (blood glucose, blood pressure, cholesterol, HbA1c, thyroid function, liver/kidney panels, etc.)
• Medication records and prescription history
• Chronic and acute medical conditions
• Allergy information
• Lab reports and diagnostic documents (uploaded for AI analysis)
• Vital signs (heart rate, SpO2, body temperature, BMI)
• Mental health and stress indicators (if tracked via custom biomarkers)
• Reproductive health metrics (if tracked by the user)

3.2 Legal Basis for Processing (GDPR)

• Explicit Consent (Art. 9(2)(a)): You provide explicit consent when you voluntarily enter health data into the App.
• Vital Interests (Art. 9(2)(c)): The Emergency Quick Share feature processes data on this basis when life-critical information sharing is initiated by you.
• Preventive or Occupational Medicine (Art. 9(2)(h)): For Clinical Suite users where healthcare professionals access patient data in a treatment context.

3.3 Minimum Necessary Principle

We collect only the minimum health data necessary to provide the feature you are using. No health data is collected passively or without your direct input action.

4. How We Use Your Data

4.1 Core App Functionality

• Storing, organizing, and displaying your health measurements on-device
• Calculating statistical baselines (median, mean, standard deviation, trend analysis) for your biomarkers
• Classifying biomarker readings into clinical zones personalized to your age, sex, and stated conditions
• Generating visual charts, dashboards, and trend summaries
• Managing medication schedules and delivering local notification reminders
• Enabling data export in CSV or PDF format

4.2 AI-Powered Features (Premium)

• Transmitting uploaded lab report images to our third-party AI service providers for analysis and extraction
• Sending selected biomarker data to our third-party AI service providers to generate per-biomarker clinical explanations
• Generating comprehensive AI health analysis reports from your aggregated biomarker history
• Facilitating interactive AI health conversations in the context of your recent analysis

4.3 Cloud Sync (Optional — Premium)

• Securely backing up your encrypted health data to Firebase when you explicitly enable Cloud Sync
• Restoring your data to a new device at your request
• Enabling multi-device access to your health profile

4.4 Service Improvement

• Diagnosing application crashes and errors using fully anonymized crash reports
• Understanding aggregate feature usage patterns to prioritize product improvements
• Maintaining service security and preventing fraud

4.5 What We Will NEVER Do With Your Data

5. AI Features & Data Processing

LogiCura uses third-party AI service providers to power Premium features. This section explains exactly what data is transmitted, how it is processed, and the protections in place.

5.1 Medical Report Scanning

• What is transmitted: The image of the document or lab report you explicitly select and upload for scanning.
• Purpose: Optical character recognition and medical data extraction from the document.
• Data retention: Images are processed ephemerally and are not retained by the AI service beyond the immediate API call.
• Who receives the data: A third-party AI service provider acting as our sub-processor.
• User control: You initiate each scan individually. Nothing is uploaded automatically.

5.2 AI Reasoning & Analysis

• What is transmitted: Selected biomarker values, the clinical context you've provided (age, sex, conditions if shared), and the specific question or analysis request.
• Purpose: Generating clinical explanations, per-biomarker reasoning, and comprehensive health reports.
• Data retention: Ephemeral processing; request data is not retained for model training per our DPA.
• Pseudonymization: Where possible, your name and direct identifiers are stripped before transmission to AI services.

5.3 AI Disclaimer

6. Data Storage & Security

6.1 On-Device Storage Architecture

All health data entered into the App is stored in an encrypted SQLite database on your device using AES-256 encryption — the same standard used by financial institutions and government agencies globally.

• Encryption key is derived from your device's secure hardware element and/or your biometric/PIN
• The database is inaccessible to other applications installed on your device
• The App can be used entirely without an account or internet connection
• If you factory-reset or uninstall the App, all local data is permanently deleted unless Cloud Sync is enabled

6.2 Transmission Security

• All network communication uses TLS 1.3 with certificate pinning
• API keys and tokens are stored in Android Keystore, never in plain text
• Authentication tokens are short-lived (JWT) with secure refresh token rotation

6.3 Cloud Security (If Sync Enabled)

• Data is encrypted client-side before transmission to Firebase
• Firebase Firestore security rules prevent any unauthorized access
• Firebase infrastructure complies with SOC 2, ISO 27001, and relevant healthcare standards
• Backups are stored in Google Cloud with geographic restrictions configured by your account's region

6.4 Security Vulnerability Reporting

If you discover a security vulnerability in LogiCura, please report it responsibly to security@logicura.health. We operate a responsible disclosure program and will acknowledge valid reports within 48 hours.

7. Cloud Sync & Backup

Cloud Sync is an entirely optional Premium feature. The App works completely and fully offline without it.

• Opt-in activation: You must explicitly navigate to Settings → Cloud Sync and toggle it on. It is OFF by default.
• What syncs: Your health measurements, medications, conditions, and profile information that you choose to include.
• Encryption: Data is encrypted on your device before upload. It is stored as ciphertext in Firebase — we cannot read it.
• Account requirement: A Firebase account (Google Sign-In or email) is required for cloud sync.
• Deletion: You can delete all cloud data at any time via Settings → Cloud Sync → Delete All Cloud Data.
• Portability: You can export all your data as CSV or PDF at any time (CSV free; PDF requires Premium).
• Account deletion: Deleting your account permanently removes all cloud-stored data within 30 days.

8. Data Sharing & Third Parties

We share your data only in the following limited and explicit circumstances:

8.1 Sharing You Initiate

• Emergency Quick Share (Premium): A one-time shareable link containing selected critical health information. You control what is included and who receives it. The link expires after a configurable time.
• Healthcare Provider Sharing: When you export a PDF report and share it with your doctor or clinic.
• Clinical Suite Patient-Provider Link: If you voluntarily link your personal account to a clinic, explicitly authorized healthcare providers can access the specific data you choose to share. You can revoke this link at any time.

8.2 Service Providers (Sub-Processors)

8.3 Legal Disclosures

We may disclose personal information if required to do so by law. We will notify you of such requests to the extent legally permissible and challenge overly broad requests.

8.4 Business Transfers

If PristineCode Technologies is involved in a merger or acquisition, any transfer of user data will be subject to at least the same level of protection as this Policy, and you will be notified in advance.

9. Google Health Connect Integration

LogiCura integrates with Google Health Connect to allow you to import health data from compatible wearables and apps (e.g., Google Fit, Samsung Health, Wear OS devices, Fitbit, Garmin).

• Permissions are granular: You choose which data types to allow LogiCura to read from Health Connect.
• Import is one-directional: LogiCura reads from Health Connect; it does not write health data back unless you explicitly enable this.
• Data stays on device: Data imported from Health Connect is stored in the same AES-256 encrypted local database as manually entered data.
• Revocation: You can revoke LogiCura's Health Connect permissions at any time via your Android Health Connect settings.
• Compliance: Our use of Health Connect data complies with Google's Health Connect permissions policy and all associated developer policies.

10. Clinical Suite — Healthcare Organizations

The LogiCura Clinical Suite is a separate product designed for use by healthcare organizations (clinics, hospitals, laboratories, independent practitioners).

10.1 Healthcare Organization as Data Controller

When a healthcare organization deploys the LogiCura Clinical Suite, the organization is the data controller for its patients' health information. PristineCode Technologies acts as a data processor on behalf of the organization.

10.2 Patient Data in Clinical Suite

• Patient health records managed within the Clinical Suite are the responsibility of the healthcare organization
• Healthcare organizations must obtain appropriate patient consent in accordance with applicable laws
• Role-based access controls ensure staff can only access patient data relevant to their clinical role
• All patient data access is logged with a complete, immutable audit trail
• Healthcare organizations can request on-premise deployment for maximum data sovereignty

10.3 HIPAA Considerations

For US-based healthcare organizations subject to HIPAA: PristineCode Technologies can execute a Business Associate Agreement (BAA). Please contact compliance@logicura.health to initiate this process.

10.4 Clinical Staff Accounts

Staff accounts in the Clinical Suite are provisioned by the organization's administrator. Staff data is deleted within 90 days of account deactivation unless legal retention obligations apply.

11. Your Privacy Rights

Depending on your jurisdiction, you have the following rights regarding your personal data. We honor all of these rights regardless of where you are located.

11.1 Right of Access

You have the right to know what personal data we hold about you. Because most data is stored on your device, you can access it directly in the App. For server-side data, request a full data export via privacy@logicura.health.

11.2 Right to Correction

You can correct or update any health data directly within the App at any time. For account information, edit via Settings → Account.

11.3 Right to Erasure

• Individual records: Delete any measurement, medication, or condition directly in the App
• All local data: Settings → Privacy → Clear All Local Data
• Cloud data: Settings → Cloud Sync → Delete All Cloud Data
• Full account deletion: Settings → Account → Delete Account
• By request: Email privacy@logicura.health with subject "Right to Erasure Request"

11.4 Right to Data Portability

Export your complete health history as CSV (free) or detailed PDF report (Premium) at any time via App → Export.

11.5 Right to Restrict Processing

You can disable specific features (AI analysis, cloud sync, Health Connect integration, analytics reporting) independently via Settings → Privacy.

11.6 Right to Object

You can object to any processing of your data by contacting us. We will assess your objection and cease processing unless we have compelling legitimate grounds.

11.7 Right to Withdraw Consent

Where processing is based on your consent, you can withdraw it at any time without affecting the lawfulness of prior processing.

11.8 How to Exercise Your Rights

Most rights can be exercised self-service within the App. For formal requests: email privacy@logicura.health. We will respond within 30 days.

12. Children's Privacy

LogiCura is intended for users aged 13 and above. Users between 13–18 must have parental or guardian consent to create an account or use cloud-connected features.

We do not knowingly collect personal information from children under 13. If we learn that we have inadvertently collected data from a child under 13 without appropriate consent, we will delete it promptly.

If you believe we may have collected data from a child under 13, please contact us at privacy@logicura.health immediately.

13. International Data Transfers

PristineCode Technologies is headquartered in India. If you access our Services from outside India, your data may be transferred to, stored in, or processed in India and other countries.

For users in the European Economic Area (EEA) or UK, we rely on Standard Contractual Clauses (SCCs) and Data Processing Agreements with all sub-processors that include appropriate transfer mechanisms.

We structure our cloud deployments to keep data within regions you specify where technically feasible. Enterprise Clinical Suite customers can opt for in-region or on-premise deployment.

14. Data Retention

15. Cookies & Tracking Technologies

Mobile App: The LogiCura Android App does not use web cookies. We use Firebase SDK for analytics (opt-out available) and secure token storage via Android Keystore.

Website (logicura.health): Our website uses the following cookies and technologies:

We do not use advertising cookies, tracking pixels, or cross-site tracking technologies.

16. Changes to This Privacy Policy

We will update this Privacy Policy from time to time.

• Material changes: We will notify you via an in-app notification AND email at least 30 days before the change takes effect.
• Minor changes: We will update the "Last Updated" date and may display a brief in-app notice.

Your continued use of the App after changes take effect constitutes acceptance of the updated Policy.

17. Terms of Service (Summary)

The following summarizes key terms governing your use of LogiCura.

17.1 Permitted Use

• LogiCura Personal App is licensed for personal, non-commercial health management use
• Clinical Suite is licensed to healthcare organizations for professional healthcare delivery
• Reverse engineering, decompiling, or redistributing the App is prohibited

17.2 Subscription Terms

• Premium subscriptions auto-renew until cancelled
• Cancellation takes effect at the end of the current billing period
• Refunds are handled per Google Play's standard refund policy

17.3 Disclaimer of Medical Advice

LogiCura is a health management tool, not a medical device, and is not intended to diagnose, treat, cure, or prevent any disease or medical condition. Always consult qualified healthcare professionals for medical advice.

17.4 Limitation of Liability

To the maximum extent permitted by law, PristineCode Technologies shall not be liable for any indirect, incidental, special, consequential, or punitive damages arising from your use of the App.

17.5 Governing Law

This Policy and any disputes arising from your use of LogiCura are governed by the laws of India.

18. Contact Us

For any privacy-related questions, requests, or concerns, please reach out through the appropriate channel below. We aim to respond to all privacy inquiries within 72 hours for urgent matters and 30 days for formal subject access requests.