Privacy Policy

1. Introduction

This Privacy Policy describes how POTS Check ("the App," "we," "us," or "our"), developed by Cascade Agentic Labs LLC, collects, uses, stores, and protects your personal information and health data.

Key Points:

• We never sell your health data to third parties
• All data is encrypted at rest on your device
• All data remains on your local device (no cloud storage)
• You have full control over data export and deletion
• We comply with Apple's HealthKit privacy requirements
• Secure Account is completely free

2. Information We Collect

2.1 Health Data

POTS Check collects the following health information to provide wellness tracking functionality:

Important Notes:

• We do NOT collect full date of birth—only month and year
• We do NOT track your location during tests
• We do NOT require name, email, or other identifying information
• Health Profile import is entirely optional (Secure Account only)

2.2 Technical Data

We collect minimal technical data necessary for app functionality:

• Device Model: iPhone/Apple Watch model for UI optimization
• OS Version: iOS/watchOS version for compatibility
• App Version: POTS Check version for troubleshooting

We do NOT collect:

• Device identifiers (UDID, advertising ID)
• IP addresses or network information
• Biometric data beyond heart rate

2.3 Anonymous Usage Analytics

To improve app experience, we collect anonymous usage analytics via TelemetryDeck, a privacy-first analytics service:

What We Collect:

• App usage events (test starts/completions, feature usage)
• Technical context (app version, device model)
• Error events for troubleshooting
• Anonymous user ID (random UUID, not tied to Apple ID)

What We Do NOT Collect:

• No PII: Names, emails, phone numbers, addresses
• No Health Data: Heart rates, BP values, test results
• No Location: IP addresses, GPS coordinates
• No Identifiers: Device serial numbers, advertising IDs

Analytics are disabled by default. You can opt in during onboarding or change this setting anytime in Settings.

3. How We Use Your Information

3.1 Primary Uses

• Test Analysis: Calculate heart rate changes and identify POTS-consistent patterns
• Results Display: Generate test summaries and posture quality scores
• Historical Tracking: Enable trend analysis across multiple tests (Secure Account only)
• Data Export: Generate PDF reports for sharing with healthcare providers

3.2 Prohibited Uses

We will NEVER use your health data for:

• Advertising or marketing purposes
• Sale to third-party data brokers
• Training machine learning models
• Sharing with insurance companies, employers, or government agencies

4. Data Storage and Security

4.1 Two-Tier Architecture

4.2 Encryption Details

• Algorithm: AES-256-GCM (AEAD)
• Key Storage: iOS Keychain with device-only access
• File Protection: iOS Data Protection (hardware-backed)

4.3 Data Residency

• All data remains on your local device
• No cloud upload or synchronization
• No server-side processing or storage
• Export is manual and user-initiated only

5. Data Sharing and Third Parties

5.1 No Sale of Health Data

We will NEVER sell your health data to third parties. Your health information is not a commodity.

5.2 User-Initiated Sharing Only

The ONLY way your health data leaves your device is if YOU explicitly choose to:

• Export PDF: Generate a PDF report and share it with your healthcare provider
• Export Data: Export your data for backup or transfer

6. Your Privacy Rights

6.1 How to Exercise Your Rights

• Access Data: Open Settings → View Test History
• Export Data: Settings → Export → Choose format
• Delete Data: Settings → Delete All Data (requires confirmation)
• Revoke HealthKit: iOS Settings → Privacy → Health → POTS Check

7. Children's Privacy (COPPA Compliance)

• Minimum Age: 13 years old
• Under 13: App cannot be used (blocked by age gate)
• Ages 13-17: Parental consent required

We do not knowingly collect health information from children under 13.

8. International Users

8.1 GDPR Rights (EU Users)

European Union users have additional rights under GDPR:

• Right to data portability
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to lodge a complaint with supervisory authority

8.2 CCPA Rights (California Users)

California residents have rights under CCPA:

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt out of sale of personal information (we never sell your data)
• Right to non-discrimination for exercising privacy rights

9. HealthKit Data Policy

In compliance with Apple's HealthKit policies:

• HealthKit data is used solely for app functionality
• HealthKit data is NOT used for advertising or marketing
• HealthKit data is NOT shared with third parties
• HealthKit data is NOT sold or disclosed for profit

HealthKit Permissions

Required (All Users):

• Heart Rate (READ) — Required for test execution
• Workout Sessions (WRITE) — Required for continuous monitoring

Optional (Secure Account — Health Profile):

• Blood Pressure, Heart Rate Variability, Resting Heart Rate, Walking Heart Rate, Respiratory Rate

You can revoke permissions anytime: iOS Settings → Privacy → Health → POTS Check

10. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in app functionality or legal requirements. We will notify you of significant changes via in-app notification.

11. Contact Information

POTS Check Privacy Policy v1.4
Effective: November 20, 2025 | Last Updated: November 29, 2025
© 2025 Cascade Agentic Labs LLC. All rights reserved.