1. Information we process
ProCare Log is operated by SmartDataIQ LLC, an Arizona limited liability company. This policy covers the ProCare Log mobile app, website, and related services.
Information you provide
- Account information: email address, authentication provider, selected role, consent records, and service region.
- Patient profiles: name, date of birth, blood type, allergies, emergency-contact information, and family/dependent relationships.
- Health records: vitals, notes, medication details, prescription images, laboratory reports, PDFs, and other records you choose to add.
- Connected-health imports: readings you approve from Apple Health or Android Health Connect, including timestamps, source app/device, source identifiers, method, and duplicate-prevention identifiers.
- Sharing and family choices: selected categories, date ranges, permissions, access expiry, revocation, and privacy-safe access history.
- Support/privacy requests: messages and information needed to verify and answer a request.
Information processed automatically
Firebase Authentication and infrastructure services may process user identifiers, IP addresses, user-agent/browser information, authentication tokens, device/app-integrity signals, trusted-device metadata, and limited operational or security logs. ProCare Log does not currently integrate advertising SDKs, Firebase Analytics, or Firebase Crashlytics.
2. How we use information
- Authenticate users, administer accounts, and record policy acceptance.
- Provide an encrypted health-record vault, backup, multi-device recovery, and document storage.
- Show trends, prepare reports, and prevent duplicate connected-health imports.
- Provide family profiles and explicitly granted access permissions.
- Create patient-authorized, scoped, time-limited sharing sessions.
- Protect users, prevent abuse, maintain reliability, and respond to requests.
- Comply with legal and regulatory obligations.
We do not sell personal or health information and do not use health information for targeted advertising, creditworthiness, or data-broker purposes.
3. Connected health and on-device OCR
Apple Health and Android Health Connect are optional and read-only. ProCare Log may request permission for blood pressure, blood glucose, weight, body temperature, oxygen saturation, and heart rate. You review available readings before confirming import. Revoking platform permission stops future reads but does not automatically delete readings you previously imported into ProCare Log.
Prescription text recognition currently runs on-device. Recognized text is an unsaved draft until you review and confirm it. The raw OCR draft is not sent to a cloud AI service. Confirmed medication information becomes part of your encrypted health record.
4. Encryption and security
The local vault uses authenticated encryption and protects key material with operating-system secure storage. Structured cloud records and medical documents are encrypted on the client before upload. Network connections use HTTPS/TLS. Trusted-device approval uses device public keys and wrapped key envelopes; raw vault keys are not stored in Firebase. No system can guarantee absolute security.
5. When information is disclosed
Information may be disclosed to:
- a clinician or recipient when you deliberately create and authorize a share;
- a family member or caregiver only after the relevant access has been granted;
- processors required to operate the service, including Google Firebase/Google Cloud and authentication providers;
- authorities or other parties when required by law or necessary to protect users and the service; or
- a successor in a properly disclosed corporate transaction, subject to applicable safeguards.
A clinician or organization may independently control information it downloads or adds to its medical record. Its own notice and legal duties may apply.
6. Patient-controlled sharing
You choose the categories, records, and date range in a clinician share. The QR contains an opaque session link—not health data or the access PIN. Sessions require a separately communicated PIN, limit failed attempts, expire automatically, and can be revoked. Revocation prevents later access through ProCare Log; it cannot erase information already viewed, photographed, downloaded, printed, or independently retained.
7. Retention and deletion
Account and health information is retained while needed to provide requested services, maintain security, resolve disputes, and meet legal obligations. Temporary shares become inaccessible on revocation or expiry and are removed through backend cleanup. Processor backups may take additional time to age out.
You may permanently delete your account from the app or request deletion at procarelog.com/delete-account. Deletion covers the authentication identity, owned encrypted records and documents, active shares, and device-local vault material, except information that must be retained by law or for legitimate security and dispute purposes.
8. Your rights and choices
Depending on applicable law, you may request access, correction, export, restriction, or deletion. You can edit profiles and records, disconnect health-platform permissions, manage trusted devices, review family access, and revoke active sharing sessions. Visit Privacy choices or email privacy@procarelog.com.
9. Children
ProCare Log is not intended for independent use by children under 13. A parent or authorized guardian may manage a dependent profile where legally permitted. Regional age, consent, and guardian requirements apply.
10. Regional and international processing
The current service uses United States Firebase infrastructure. Authentication and some global services may process limited operational data in other locations. Regional placement is a privacy control and is not, by itself, a representation of HIPAA, DPDP, or other certification. India-specific residency will be described only when the regional data plane is active end to end.
11. Medical and regulatory limitations
ProCare Log does not diagnose, prescribe, make treatment decisions, or replace a qualified clinician. Device/app estimates may not equal clinically validated measurements. Seek local emergency services for urgent needs. HIPAA applicability depends on production relationships, agreements, and configuration; encryption alone does not establish HIPAA compliance.
12. Changes
Material updates may be presented in the app and may require renewed acceptance. The app records accepted policy versions and timestamps.
13. Contact
Operator: SmartDataIQ LLC, an Arizona limited liability company
Privacy: privacy@procarelog.com
Legal: legal@procarelog.com
Support: support@procarelog.com
Do not send medical emergencies, passwords, recovery codes, or urgent clinical information by email.