Privacy Policy

1. Overview

Flair — Symptom & Health Tracker ("Flair", "we", "us", or "our") is developed by Dr. Zee, MD. This Privacy Policy explains how Flair handles information when you use our mobile application.

We are committed to protecting your privacy. Because Flair is a personal health tracking tool, we have designed it with a privacy-first architecture: your data lives on your device, not our servers.

2. Data We Collect

Flair collects the following data locally on your device only. This data is never transmitted to our servers.

Health & Symptom Logs

Symptom entries you create, including symptom type, severity, notes, date, and time. This data is stored exclusively in your device's local storage (AsyncStorage).

Medication Data

Medications you log within the app, including name, dosage, and frequency. Stored locally on your device only.

Photos

If you attach photos to log entries, those photos are stored locally on your device. They are never uploaded to any cloud server by Flair.

Device Location (Weather Only)

If you enable weather data in the app, Flair uses your device's approximate location (latitude and longitude) to fetch local weather conditions. This location data is:

• Sent anonymously to Open-Meteo (a privacy-respecting weather API) with no user account or identifier attached
• Never stored on our servers
• Not used for advertising or tracking
• Entirely optional — you can use Flair without enabling location access

Purchase Information

If you purchase a Flair subscription, your payment is processed through Apple App Store or Google Play. We use RevenueCat to verify subscription status. RevenueCat may receive a randomized device identifier for purchase validation purposes. No payment card details are ever accessed by Flair or Dr. Zee, MD.

3. Apple Health (HealthKit) Data

If you choose to connect Apple Health, Flair reads the following data types, with your explicit permission granted through Apple's standard Health-access dialog:

• Sleep Analysis
• Resting Heart Rate
• Heart Rate Variability (HRV / SDNN)
• Step Count

This data is used exclusively to:

• Display your own health metrics back to you on the "Your Health Data" screen (sparklines and summary numbers)
• Power optional, Pro-tier pattern cards that look for a statistical relationship between your own sleep, resting heart rate, or HRV and your own logged symptom severity (for example, whether your flares tend to follow nights of poor sleep). These cards are descriptive and educational only — they are not medical predictions, diagnoses, or clinical advice, and Flair is not a medical device.

Apple Health data is stored only on your device (in local encrypted app storage), exactly like your symptom logs. It is never uploaded to Flair's servers — because Flair does not operate servers that store personal health information — and it is never shared with RevenueCat, Open-Meteo, or any other third party.

In accordance with Apple's guidelines, Flair does not use HealthKit data for advertising, marketing, or any purpose unrelated to the health-tracking features described above.

You can disconnect Apple Health at any time from within Flair's settings. Disconnecting immediately stops future syncing and permanently deletes all previously synced Apple Health data from your device. It has no effect on your manually logged symptom entries, which are stored separately.

You can also revoke Flair's Health access at any time directly in the iOS Settings app under Settings → Privacy & Security → Health → Flair.

4. Data We Do NOT Collect

• No account or registration required — Flair works entirely without creating an account
• No name, email, or personal identifiers — we do not collect who you are
• No health data transmitted to our servers — all symptom, medication, and log data stays on your device
• No advertising data — Flair contains no ads and does not build advertising profiles
• No selling of data — we will never sell, rent, or trade your data to third parties
• No analytics SDKs — Flair does not include behavioral analytics tools (e.g., Amplitude, Mixpanel, Firebase Analytics)
• No cloud sync in v1 — this version of Flair does not back up data to any cloud service
• No Apple Health data leaves your device — if you connect Apple Health, that data is read, stored, and analyzed locally only; see Section 3

5. Third-Party Services

Flair uses two third-party services, both chosen for their privacy practices:

RevenueCat

RevenueCat is used solely to manage and verify in-app subscription status. RevenueCat may receive a device-level identifier for the purpose of subscription validation. RevenueCat does not receive your health data, symptom logs, or any personal health information.

RevenueCat's privacy policy: revenuecat.com/privacy

Open-Meteo

Open-Meteo is a free, open-source weather API used to display local weather alongside your symptom logs. When weather is enabled, your device sends an anonymous latitude/longitude coordinate to Open-Meteo. No user account is created, no identifier is associated with the request, and no health data is shared.

Open-Meteo's privacy policy: open-meteo.com/en/terms

6. Data Storage & Security

All of your health and symptom data — including any Apple Health data you choose to sync — is stored exclusively on your device using local storage (AsyncStorage and an on-device SQLite database). This means:

• Your data is accessible only on the device where Flair is installed
• Deleting the app from your device permanently removes all stored data
• We cannot recover your data if your device is lost or reset — because we never had it
• Data is protected by your device's native OS security mechanisms

We recommend enabling device-level passcode or biometric authentication to protect your Flair data from unauthorized physical access.

7. Health Data & HIPAA

Flair is a consumer wellness application, not a medical device or a covered entity under HIPAA (the Health Insurance Portability and Accountability Act). The data you enter in Flair is personal health information that you record for your own use.

Because Flair does not operate as a healthcare provider, health plan, or healthcare clearinghouse, HIPAA's legal protections for Protected Health Information (PHI) do not apply to data you store in this app. You use Flair voluntarily to track your own wellness — Flair is not a clinical or diagnostic tool.

8. Children

Flair is not directed at children under the age of 13. We do not knowingly collect any information from children under 13. If you are a parent or guardian and believe your child has provided information through Flair, please contact us at support@flairapp.com and we will take appropriate steps.

9. Your Rights

Because your data is stored locally on your device and not on our servers, you have full control over it at all times:

• Access: Your data is always available within the app on your device
• Deletion: Delete individual entries within the app, or delete the entire app to remove all data
• Disconnect Apple Health: Revoke access and delete all synced Apple Health data at any time from Flair's settings, without affecting your manual logs
• Portability: Export functionality may be added in a future release

If you have questions about data practices or wish to contact us regarding privacy concerns, email: support@flairapp.com

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the Effective Date at the top of this page and, for significant changes, provide notice within the app. Continued use of Flair after any changes constitutes your acceptance of the revised policy.

We encourage you to review this policy periodically.

11. Contact

Questions, concerns, or requests regarding this Privacy Policy?

Flair Support
Email: support@flairapp.com

Developer: Dr. Zee, MD