Privacy Policy

Your privacy is important to us. This Privacy Policy explains how Tiny Whale and Petunia collects, uses, and protects your information when you use the Undisputed app.

1. Information We Collect

We collect the following categories of information:

• Account information: Email address and password (stored as a hashed value) when you create an account.
• Health data you enter: Symptoms, appointment notes, medications, and other health journal entries you choose to record. This data is yours.
• Usage data: Anonymous, aggregated information about how the app is used (e.g., which features are accessed) to improve the product. This data cannot be used to identify you.
• Device information: Basic device type and operating system version for technical support and compatibility purposes.

2. How We Use Your Information

• To provide and operate the Undisputed service
• To authenticate you and keep your data secure
• To send transactional emails (e.g., account confirmation, password reset)
• To improve the app based on aggregate, anonymized usage patterns
• To respond to your support requests

3. We Do Not Sell Your Data

We do not sell, rent, lease, or trade your personal information or health data to any third party, ever. Your health story is yours.

4. Data Storage and Security

Your data is stored securely using Supabase, a managed database platform with industry-standard encryption at rest and in transit. We use row-level security policies to ensure your data is only accessible by you. No Tiny Whale and Petunia employee can view your health journal entries.

5. Data Retention

We retain your data for as long as your account is active. If you delete your account, your personal data and all health journal entries will be permanently deleted from our systems within 30 days. Anonymized, aggregate data may be retained indefinitely.

6. Third-Party Services

We use the following third-party services to operate Undisputed:

• Supabase — database and authentication infrastructure
• Expo / EAS — app building and distribution
• Apple App Store / Google Play Store — app distribution (subject to their respective privacy policies)

We do not use advertising networks or analytics platforms that track you across other apps or websites.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and all associated data
• Export your health journal data in a portable format

To exercise any of these rights, contact us at info@tinywhaleandpetunia.com.

8. Children's Privacy

Undisputed is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notification at least 14 days before changes take effect.

10. Contact

Questions or concerns about your privacy? Contact us at info@tinywhaleandpetunia.com.