The short version: we store the health information you choose to enter so the app can work for you. We don't sell it, we don't use it for advertising, and you can permanently delete all of it from inside the app at any time.
1. Who we are
Chronical ("we", "us") is a personal health tracking app for people living with chronic conditions, operated from Ireland. For any privacy question or request, contact us at hello@chronical.ie.
2. What we collect
- Account details — your email address and password (stored as a secure hash), or your Google account identifier if you sign in with Google.
- Health information you enter — profiles (including name, age, condition, diagnosis year, surgical history, medications, treatment schedule), symptom logs, food diary entries, appointments, health history notes, and lab results.
- Lab report images — if you photograph or upload a lab report, the image is stored privately so you can view it later.
- Conversations with the AI assistant — your chat history, and short facts the assistant extracts to personalise future answers (visible and deletable in More → AI Memory).
- Apple Health data — only if you grant permission: heart rate variability, resting heart rate, sleep, steps, active energy, blood oxygen, respiratory rate and weight. Chronical only reads this data; it never writes to Apple Health.
We do not collect advertising identifiers and we do not run third-party advertising or tracking in the app.
3. How we use it
- To provide the app: storing your entries, showing your history, and syncing across your devices.
- To power AI features: when you ask the assistant a question, generate daily priorities, analyse a lab image, or create an appointment brief, the relevant parts of your health information (and the image, where applicable) are sent to our AI service to produce that response.
- To schedule reminders on your device. Reminder notifications are generated locally and are worded so that medication names and health details never appear on your lock screen.
- To respond when you contact us for support.
We do not sell your data, share it for advertising, or use it to train AI models.
4. Legal bases
Health information is special category data under the GDPR. We process it on the basis of your explicit consent, given when you create your account and accept this policy. Account and technical data are processed as necessary to perform our contract with you (providing the app). You can withdraw consent at any time by deleting your data or your account.
5. Who processes your data
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Database, authentication and file storage for the app | United Kingdom (AWS London) |
| Anthropic | AI model (Claude) that generates assistant responses, priorities, lab analysis and briefs | United States |
| Cloudflare | Secure proxy that relays AI requests | Global network |
| Apple | App distribution, and Apple Health data on your device | — |
| Optional Google sign-in; our email service | EU/US | |
| Expo | App build and update delivery | United States |
| Netlify | Hosting for this website (not app data) | Global network |
Where providers are outside the EEA/UK, transfers rely on European Commission adequacy decisions or standard contractual clauses.
6. How long we keep it
Your data is kept while your account is active. When you delete data — an individual entry, or everything — it is removed from our production systems. Backups expire on a rolling basis shortly after.
7. Deleting your data
In the app, go to More → Privacy & data → Delete all health data. This permanently removes your profiles, symptoms, medications, appointments, food diary, chats, AI memory, lab results and uploaded lab images. To delete your sign-in account as well, contact hello@chronical.ie and we will complete it promptly.
8. Children
Chronical accounts are for adults (16+). A parent or guardian may create a paediatric profile within their own account to manage a child's condition; that information is entered and controlled by the parent or guardian.
9. Your rights
Under the GDPR you have the right to access, correct, export, restrict or delete your personal data, and to withdraw consent. Contact hello@chronical.ie to exercise any of these. You also have the right to lodge a complaint with the Irish Data Protection Commission (dataprotection.ie).
10. Security
Data is encrypted in transit, stored with per-account access controls enforced at the database level, and lab images are held in private storage accessible only to your account. No system is perfectly secure, but we design so that the failure of any one layer does not expose your information.
11. Changes
If we make material changes to this policy, we will tell you in the app before they take effect. The latest version always lives at chronical.ie/privacy.