Privacy policy
Protocol Tracker is built so that your health data does not leave the device. This policy covers the app; the website has its own at condaydigital.com. The German version is authoritative.
1. Controller
Cedric Conday — CondayDigital
c/o MDC#854, Welserstraße 3, 87463 Dietmannsried, Germany
Email: cedric@condaydigital.com
2. Your data stays on the device
Everything you enter — doses, symptoms, journal, sleep, lab values, profile details — is stored only in a local SQLite database inside the app’s protected storage.
There is no user account, no registration and no server of mine. I have no access to your entries at any point, so no processing of that personal data takes place on my side.
3. No tracking, no analytics, no advertising
The app contains no analytics tools, no crash reporting, no advertising SDKs and no profiling. No usage data is collected and no identifiers are sent to third parties.
4. Weather and UV index (optional)
When the weather card is switched on, the app asks the operating system for your approximate location and sends those coordinates to open-meteo.com (Open-Meteo, Bühlstraße 60, 9424 Rheineck, Switzerland) to retrieve weather, UV index and air quality.
Only the coordinates are sent — no health data, no identifier and nothing that identifies you. The app requests location at coarse accuracy only; the Android permission technically also covers precise location, because the location module declares it that way, but precise location is never used. The feature can be turned off; when it is off, no location permission is requested and no connection is made. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time in Settings.
5. Contacting me
Tapping email or WhatsApp on the feedback screen takes you out of the app, and the conversation runs through your mail app or through WhatsApp (WhatsApp Ireland Limited). If you write to me, I process what you send solely to deal with your request (Art. 6(1)(b) and (f) GDPR) and delete it once it is no longer needed.
6. Notifications
Reminders are scheduled locally on the device; no push service is involved. A reminder’s text can name a supplement. On Android, notifications use a channel with PRIVATE visibility, so the content stays hidden while the device is locked.
7. Device protection
You can optionally lock the app with your device’s biometrics. The check is performed entirely by the operating system; biometric data never reaches the app.
8. Export and sharing
Reports and exports are produced on the device and are shared only when you start that yourself. Where they go from there is decided by the app you pick.
9. Retention
Your data stays until you delete it in the app or uninstall the app. Uninstalling removes the local database. There is no further copy held by me that could be deleted.
10. Your rights
Under the GDPR you have the rights of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21), as well as the right to lodge a complaint with a supervisory authority (Art. 77).
Because I process none of the data you record in the app, I can neither disclose nor delete it — it is directly in your hands. For email correspondence the rights apply in full; an informal message is enough.
11. Not a medical device
Protocol Tracker has no intended purpose within the meaning of Regulation (EU) 2017/745 (MDR) and carries no CE marking. The app records what you enter and displays it; it does not diagnose, does not recommend treatment and makes no medical assessment.
Nor is it a digital health application (DiGA): it is not listed in the DiGA directory, cannot be prescribed and is not reimbursable. No clinical evidence exists. Discuss every decision about your protocol with your prescribing practitioner.