← Back to PediAid Legal

Privacy Policy

Effective date: 2 May 2026 · Last updated: 2 May 2026

PediAid (the "App", "we", "us") is a paediatric and neonatal clinical reference application developed by Dr. Sunil Mulgund ("the developer"). This Privacy Policy explains what personal information the App collects, how it is used and stored, and the choices you have.

The App is provided as a clinical aid only. It is not a substitute for professional medical judgement.

1. What we collect

The App collects only the minimum personal data required to operate.

Account information (only if you sign in)

• Email address
• Display name (optional)
• Authentication tokens issued by our backend (pediaid-backend.onrender.com)

Authentication tokens are stored on your device using flutter_secure_storage (Android Keystore / iOS Keychain). They are never shared with third parties.

Local-only preferences

• Theme choice (light / dark / system)
• Calculator inputs you've entered, until you close the screen
• Onboarding / tutorial flags so we don't re-show what you've seen

These are stored on your device only, in SharedPreferences. They are not transmitted to our servers.

Diagnostic data

When you contact support via the in-app feedback form, your message includes the App version, build number, OS, and the email associated with your account, so we can help you faster.

What we do NOT collect

• Any patient data you enter (weights, gestational ages, lab values, etc.) — these stay on your device, are never sent to our servers, and are forgotten when you close the calculator screen.
• Health records, photos, location, contacts, microphone, camera
• Advertising identifiers, behavioural analytics
• Any data from children under 13

2. How we use the data

• To authenticate your sign-in and keep you signed in across launches
• To respond to support requests you initiate
• To remember your preferences (theme, last-used inputs) on your device

We do not use your data for advertising, profiling, or sale to any third party.

3. Third-party services

The App relies on the following third-party services:

• Render (render.com/privacy) — hosts our backend API
• Neon (neon.tech/privacy-policy) — hosts our PostgreSQL database
• Static web host (privacy statement) — hosts our web app, landing page and reference content
• Google Fonts (policies.google.com/privacy) — serves the Inter font on web

These providers process limited technical data (IP address, user-agent) to deliver their service. We do not share your account information or any patient data with them.

4. Data retention

• Account data: retained while your account exists. Deleted within 30 days of account deletion.
• Authentication tokens: stored on your device only, cleared on sign-out.
• Local preferences: stored on your device only, cleared on uninstall.
• Patient data you enter: never persisted anywhere — discarded as soon as you close the calculator screen.
• Support emails: retained for up to 12 months for follow-up, then deleted.

5. Your rights

You can, at any time:

• Access the personal data we hold about you (email us)
• Correct incorrect details (edit profile in the App)
• Delete your account and all associated data (Profile → Delete account in the App, or email us)
• Export your account data in a machine-readable format (email us)
• Withdraw consent by signing out and uninstalling the App

Account deletion takes effect immediately. There is no soft-delete or grace period.

6. Children's privacy

The App is intended for use by qualified clinicians (paediatricians, neonatologists, registrars, nurses, students). It is not directed at children under 13 and we do not knowingly collect personal data from anyone under 13. If you believe a child has provided us with personal data, please contact us and we will delete it.

7. Security

We use industry-standard practices: HTTPS for all network traffic, bcrypt for password hashing, JWT for authenticated API access, and device-level secure storage for tokens. No system is perfectly secure, and we encourage you to choose a strong, unique password.

8. Changes to this policy

We may update this policy from time to time. Material changes will be announced in-app and the "Last updated" date at the top will be changed. Continued use of the App after a change constitutes acceptance of the revised policy.

9. Jurisdiction

This policy is governed by the laws of India. If you are in the EU, EEA, UK or California, you have additional rights under the GDPR / UK GDPR / CCPA respectively — exercise them by contacting us.