LighterLiver Privacy Policy
The short version
What you enter stays on your phone. There is no account, no login, and no LighterLiver server holding your health information. We cannot see your results, and we could not hand them over if we were asked.
Nothing leaves your device unless you choose to send it, by saving a copy of your record, sharing a summary, or switching on one of the sharing options described below.
What is stored, and where
Your record, blood results, scans, weights, symptoms, medications, appointments, drinks, activity, the food choices you make and your settings, is stored in the app's own storage on this device.
If you choose to keep a copy of a report you photographed or attached, the file is stored on the device too. The app's default is to read a report and not keep it.
None of it is encrypted by the app beyond the protection your phone already applies. If your phone is unlocked, someone holding it can read your record, the same as they could read your photos. A device passcode is the protection that matters here.
The camera and your reports
When you photograph a pathology report or choose one from your photo library, the text is read on this device using Apple's built-in text recognition. The image is not uploaded, and it is not sent to us or to anyone else.
The values it reads are put into the form for you to check. Automatic reading makes mistakes, which is why nothing is saved until you have looked at it.
Apple Health
If you connect Apple Health, the app reads steps, workouts, active energy, heart rate and weight. You are asked by iOS first, you choose what to allow, and you can change it at any time in the Health app.
Health data read this way is used on the device to fill in your activity and weight. It is not sent anywhere.
Separately, you can turn on "Save my measurements to Apple Health". This is off unless you switch it on. When it is on, the app writes the measurements you have typed in yourself, weight, waist, blood pressure and height, into Apple Health, so your health record stays in one place. Nothing is estimated or invented, and your blood results, notes, photos and diary are never written to Health. Turning it off removes what the app added; your records in the app are unaffected.
Sharing, not available yet
Sharing with your clinic and sharing for research are both switched off, and neither is built yet. Turning a switch on records your preference for later; it does not send anything, because there is nowhere for it to be sent. Nothing has left your phone.
When sharing does become available, you will be told before anything is shared, shown exactly what would be included, and asked to agree again. Clinic sharing would let the clinic you are under see the results you have recorded. Research sharing would be separate, de-identified, and handled by the supervising health service under its own ethics approval and privacy terms.
If that day comes and you take part, turning it off again would stop further sharing but would not reach back and delete what had already been shared; the health service holding it would be responsible for that, and you could ask them.
Copies you make yourself
Saving a copy of your record produces a file containing your health information in readable form. Where it goes is entirely your choice. The app hands it to iOS and iOS asks you. Treat it the way you would treat a letter from your specialist.
The summary you create for an appointment works the same way.
Payments
Purchases are handled by Apple. We never see your payment details. Apple tells the app one thing, whether this Apple ID currently has access, and the app stores nothing else about it.
What we do not do
No advertising. No advertising identifiers or trackers. No analytics SDK watching what you tap. Your data is never sold, and never shared with anyone for marketing.
Some screens link out to other websites. A guideline, a patient-information page, a map search for a clinic. Those open in your browser, and once you are there that site's own terms and privacy policy apply, not ours.
Your rights
Because your record lives on your device, you already hold it: you can read all of it, correct any of it, export it, and delete it by deleting the app.
Australian Privacy Principles apply to the information handled by the supervising health service under the sharing options above. If you want to know what it holds, ask it directly, or write to us and we will point you to the right contact.
Questions or a complaint: support@lighterliver.com.
Children
LighterLiver is for adults. It is not designed for, and should not be used by, anyone under 18.