Privacy notice

Updated 12 October 2026

Who operates the service

Kirti Moudgal. Contact: kirtimoudgal@gmail.com.

What is stored and why

We store your account name, email login ID, password hash, recovery-code hash, consent timestamp and the family profiles, readings, meals, medication schedules, appointments, dose logs and reviewed report text you enter. This is used to provide your diary, sign-in, backup and recovery functions. Height and date of birth are used for BMI references. Do not enter another person’s information without permission or lawful guardian authority.

Scanning and reminders

Photo/PDF scanning runs in your browser using files served by this website. Original scanned files are not uploaded or retained by the diary. Reviewed text is stored only when you save it. Calendar exports are downloaded files; any calendar service you import them into has its own privacy terms. Browser notification permission is optional.

Access and service providers

Other residents cannot see your account’s records. Society organisers have no resident health dashboard. The operator and hosting provider may technically access server data; there is no end-to-end encryption. Health text is not sent to an external AI service. Hosting access logs may record IP addresses and page requests. Hashed IP/email combinations are used for sign-in rate limiting. We do not sell your records or use advertising/analytics trackers in this pilot.

Retention and your choices

Your diary remains until you delete records or your account. Download your data in Backup & import; edit or delete individual entries in the diary. Account settings allows permanent deletion from active storage. Hosting backups can retain copies until their retention expires; contact the operator about the currently configured backup policy. Temporary session cookies support sign-in; no marketing cookies are used. Rate-limit entries may remain until the operator removes expired entries.

Withdrawal and concerns

Stop entering data and delete your account to withdraw consent for active diary storage. Contact the operator for privacy questions, access/correction concerns, or deletion follow-up. Do not include health reports in routine support requests.