Your health data stays on your device. This policy explains exactly what Vakaa does and does not collect.

1. What Vakaa is

Vakaa is a blood-glucose logbook for iPhone. It helps people manually record readings, review trends, and prepare doctor-ready reports. It does not measure glucose and is not a medical device.

2. Data stored on your device

Vakaa is built around local-first storage. The following data is stored locally on your device by default:

• Glucose readings (value, unit, timestamp, meal timing, notes, carbs, insulin dose, medication name)
• Custom context tags you create
• Reminder schedules
• Health profile from the optional onboarding questionnaire (diabetes type, age group, pregnancy status, treatment type)
• Optional patient information for PDF reports (name, medications, doctor name, notes)
• App preferences (glucose unit, target ranges, notification settings)

This data is not uploaded to our servers. It remains on your device unless you choose to export or share it yourself, or you enable Apple Health integration described below.

3. Apple HealthKit

If you enable Apple Health integration, Vakaa can import blood-glucose samples from Apple Health and write readings you log in the app back to Apple Health. This sync is opt-in and controlled entirely through iOS permissions.

HealthKit readings imported into Vakaa can appear in your history, trends, reports, and exports inside the app. We do not send HealthKit data to Firebase, Adapty, advertising networks, or our own servers. This is consistent with Apple's HealthKit guidelines.

4. Analytics

Vakaa uses Firebase Analytics to collect a small number of product-funnel events:

• Onboarding completed
• Paywall presented
• Purchase completed
• Restore completed

These events are limited to non-medical metadata such as onboarding mode or paywall source and feature. We do not send glucose values, notes, exports, or other health data in these analytics events. Ad-related data collection (ad storage, ad user data, ad personalization) is explicitly disabled.

5. In-app purchases

Vakaa uses Adapty to manage subscriptions and in-app purchases. Adapty receives subscription transaction details and app or device identifiers necessary to validate purchases, restore purchases, and determine access status. We do not send glucose values, notes, or other health data to Adapty.

We do not store or collect payment card details. All payment processing is handled by the Apple App Store. Apple's privacy policy applies to those transactions: apple.com/legal/privacy.

6. What we do not collect

• No user accounts, email addresses, or passwords
• No location data
• No photos, camera, or microphone access
• No contacts or address book access
• No advertising identifiers or cross-app tracking
• No crash reporting or diagnostic logs sent to external services

7. Third-party services

The app integrates the following third-party services:

• Firebase Analytics (Google) — limited funnel events only. Google Privacy Policy.
• Adapty — subscription management and purchase access state. Adapty Privacy Policy.

We do not share glucose values, notes, reminder content, report contents, or other health data with these services.

8. Website data

The marketing site at vakaa.app is a static website. It does not use cookies, require sign-in, collect personal information, or use advertising trackers.

9. Export and data control

You can export a complete backup of your Vakaa data as JSON from Data Management. You can also export CSV or PDF reports from the Reports screen for the selected date range. Exports are delivered through the iOS share sheet to a destination you choose (email, Files, cloud storage, etc.).

You can delete individual readings within the app. Deleting the app removes Vakaa's locally stored data from the device. If you wrote readings to Apple Health, those copies remain in Apple Health until you delete them there.

10. Data retention

All health and preference data stored by Vakaa remains on your device for as long as you use the app. We do not maintain server-side copies of your app data. Deleting the app removes Vakaa's local store, but it does not delete copies you exported or readings stored in Apple Health.

Limited analytics events processed by Firebase and subscription records processed by Adapty are retained according to their respective policies.

11. Children’s privacy

Vakaa is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided data through the app, please contact us and we will take steps to remove it.

12. Security

Your data is protected by the security features built into iOS, including device encryption and app sandboxing. Because data stays on your device and is not transmitted to our servers, there is no server-side breach risk for your health information.

13. Changes to this policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last modified" date. Continued use of the Service after changes are posted constitutes acceptance of the revised policy.

14. Contact

Questions or concerns about this Privacy Policy can be sent to support@vakaa.app.