Privacy Policy

1. Overview

DrainLog is a personal surgical drain output tracking application. We take the privacy of your health data seriously. This policy explains what information we collect, how we use it, and your rights regarding your data.

2. What Data We Collect

DrainLog collects and stores the following information that you provide directly:

• Patient names and surgery dates
• Drain output volumes and timestamps
• Output character descriptions
• Reading notes
• Drain names and threshold settings
• Surgeon and provider notes
• Account email address (if you create an account)

We do not collect location data, contacts, camera images, or any data beyond what you explicitly enter into the app.

3. Where Your Data Is Stored

Your data is stored in two places:

• On your device — locally via encrypted device storage
• In the cloud — via Google Firebase Firestore, associated with your account

Cloud storage is only active when you are signed in with an email account. Guest (anonymous) sessions store data locally on your device only. Firebase is located in the United States and is subject to Google's data processing terms.

4. How We Use Your Data

Your data is used exclusively to provide the DrainLog service to you. Specifically:

• To display your drain output history and statistics
• To generate reports and summaries
• To share data with providers you explicitly authorise
• To send notifications you configure

We do not use your health data for advertising, analytics profiling, or any purpose beyond providing the app's core functionality.

5. Data Sharing

DrainLog does not sell, rent, or share your personal health data with any third parties for commercial purposes.

The only sharing that occurs is:

• With providers you explicitly invite — you control who can see your data and can revoke access at any time
• With Google Firebase — as the infrastructure provider for cloud storage and authentication
• With Firebase Analytics — anonymised usage events only (e.g. "reading logged"), with no personal health data attached

If required by law, we may disclose information in response to a valid legal request.

6. Data Retention

Your data is retained for as long as your account exists. When you delete your account through the app:

• Your Firestore data is deleted immediately
• Firebase Authentication credentials are removed
• Local device data is cleared

Backup files exported from DrainLog remain on your device or wherever you save them — these are your responsibility to manage.

7. Children's Privacy

DrainLog is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information through DrainLog, please contact us and we will delete it promptly.

8. Security

We implement reasonable security measures to protect your data:

• All data in transit is encrypted via HTTPS/TLS
• Firebase Firestore data is encrypted at rest
• Firestore security rules restrict access so each user can only read their own data
• Optional biometric lock prevents unauthorised access to the app on your device
• Backup files can be AES-256 encrypted with a user-set passphrase

No method of transmission or storage is 100% secure. We cannot guarantee absolute security of your data.

9. Your Rights

You have the right to:

• Access your data — all your data is visible within the app
• Export your data — use the Report tab to export in PDF, Excel, or CSV format
• Delete your data — use Settings → Account → Delete Account
• Revoke provider access — use Settings → Sharing to revoke at any time

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the app. Continued use of DrainLog after changes are posted constitutes acceptance of the updated policy.

11. Contact

For privacy-related questions or data requests: