Consumer Health Data Privacy Policy

• The conditions you choose to track and their names, and for knee conditions the side.
• Your journal entries: when a symptom happened, severity, duration, effect on work and daily life, missed work time, your notes and your answers to optional prompts.
• Photos you choose to attach to an entry.
• Days you mark as having nothing to record.
• Entries you import from your own earlier records.
• Titles, dates and locations of documents you list as holding. We never receive the documents themselves.
• Exam-day sheets you write: appointment date, time and place, and your own notes and questions.

We also keep your email address (to sign you in), your timezone, your reminder preference and, if payments are ever turned on, whether you have PDF access. We never ask for your Social Security number, VA password, claim number or medical records.

Only from you, typed or imported by you in the app. We do not buy data, receive it from other companies, or infer health conditions from anything else.

• To store your journal and show it back to you.
• To build the reports, exam-day sheets and exports you ask for.
• To keep your account secure and working.

That is all. We do not use your health data for advertising, marketing, profiling, research, or training any AI model, and we do not analyse it for any purpose of our own.

We never sell your health data and never share it with advertisers, data brokers, the VA or anyone else. A small number of service providers process it only to run Ruckmark for you, under contract and only on our instructions:

• Supabase stores the database, your photos and your sign-in.
• Netlify hosts the website that shows your journal to you.
• Our email provider receives only your email address, to deliver sign-in links.

We will only disclose your data to anyone else if you tell us to, or if the law requires it. If a valid legal demand ever arrives, we will tell you unless the law forbids us.

We ask for your consent to collect and store your health data when you set up your journal, separately from accepting the privacy notice. We will ask again before collecting any new kind of health data or using it for any new purpose. You can withdraw consent at any time by deleting your account, which stops all collection and removes your data.

• See and copy your data: Settings, then Export, gives you everything in one download, free, at any time.
• Delete your data: Settings, then Delete account, removes your records and photos from our live systems immediately. Provider backups age out within 7 days.
• Know who has it: the list above is complete. Ask us and we will confirm it for your account.
• Withdraw consent: delete your account, or email us.

You can also send any request to privacy@ruckmark.com. We will verify the request came from your account's email address and answer within 45 days. If we turn a request down, you can appeal by replying with “appeal”; we will answer the appeal within 45 days and, if we still refuse, tell you how to contact your state attorney general.

Data is encrypted in transit and stored with our providers' encryption at rest. Every record is locked to your account by database rules that we test on every change. Only the account owner can read their journal; staff access is limited to running and repairing the service. We do not claim HIPAA compliance or end-to-end encryption. If your health data is ever exposed without authorization, we will tell you promptly as the law requires.

If this policy changes in a way that affects your health data, we will tell you in the app and ask again where the law requires consent. Questions: privacy@ruckmark.com. See also the privacy notice.