Privacy Policy

SAV Development LLC operates PsoriCare, a personal skin-health tracking and educational service, not a medical provider. This policy describes information handled through accounts, tracking, AI tools, community features, support, billing, and connected services.

We process the information you provide for your account and profile, such as name, email address, nickname, avatar, date of birth, sex selection, condition and severity, preferences, account role, subscription status, and recorded consent choices. Only provide information you are authorized to share.

Information may include symptom scores and affected areas, lifestyle and food logs, treatments and therapies, medication check-ins and reminders, test results and attachments, skin photos, medical-history details, notes, reports, AI conversations and analyses, community contributions, direct messages, favorites, support requests, and applications to join the team.

We process browser and device information, sessions, navigation and record-action events, errors, security and moderation events, feature and credit usage, delivery records, and billing references to operate, troubleshoot, and protect the service. These records may contain account identifiers and event metadata.

We use information to deliver the features you request, synchronize records and progress, generate reports and analyses, maintain accounts, process payments, send appropriate communications, provide support, moderate content, prevent misuse, and meet legal obligations. Where a legal basis is required, processing may rely on providing the requested service, consent where required, applicable legal obligations, or legitimate operational and security interests subject to your rights.

Health and wellness details can be treated as sensitive, special-category, or consumer health data under applicable law. Where express consent is required, PsoriCare asks for it separately. You can withdraw consent for future optional processing through Support, although features that require the information may then become unavailable. Withdrawal does not invalidate processing already completed or override lawful retention requirements.

PsoriCare uses automation to create informational observations, correlations, summaries, and estimates, but does not use those outputs to make decisions producing legal or similarly significant effects about you. You may stop using an automated feature and ask Support about an output or related personal information.

When you request an AI-supported feature, PsoriCare sends only the categories needed for that feature. A unified review can include condition category and severity, symptom and lifestyle logs, food entries, treatments and therapies, test values, skin-analysis observations, and flare-risk records; direct account identifiers, billing identifiers, and stored file addresses are excluded from that review payload. Image and document analysis sends the selected image or document because the feature cannot operate without it. Processing may use Base44 AI services and, for lab-document extraction, OpenAI. Depending on the feature, results and conversations may be stored, and previously generated results may be reused when the underlying records have not changed. Provider retention, training, location, and deletion practices are governed by the applicable provider agreement and configuration; this policy does not promise zero retention by every processor. These outputs can be inaccurate and are not medical advice. To stop future AI processing, do not submit further requests and use Support for consent-withdrawal or deletion questions. Withdrawal does not undo processing already completed.

Providers receive only information needed for their functions. Current core providers include Base44 for application hosting, authentication, database services and built-in integrations; Cloudflare R2 and Base44 private storage for files; Resend for email delivery; Stripe for subscriptions and donations; Google when you authorize Google Sheets export; and OpenAI or Base44-supported AI providers for requested analysis features. These providers may process information in the United States or other countries where they or their subprocessors operate. Where required, PsoriCare relies on provider contractual safeguards or other lawful transfer mechanisms and reviews this disclosure when vendors or processing purposes change.

Lab documents and skin-analysis images use private storage and temporary access links. The public-media uploader is restricted to community, avatar, and sponsor media; anything placed there may be accessible to anyone with the link, so do not use those areas for private health documents or images. Some older records may still reference externally hosted URLs created before these restrictions. Account or profile privacy settings do not by themselves restrict an already-public URL. Avoid sharing sensitive file links, and contact Support about removing an uploaded file as well as its associated record.

Stripe processes subscription and donation payments. PsoriCare retains information such as plan and payment status, customer and subscription identifiers, transaction amounts, billing dates, and invoice references, but does not store full payment-card numbers.

Bulk marketing emails require an explicit opt-in; an unselected preference is not consent. You can change this choice in Profile or use an available unsubscribe link. We retain consent and suppression records to honor your choice. Opting out of marketing does not disable account, security, billing, support, or other service-related messages.

Health summaries, treatment reminders, and other optional notifications use their separate settings where available; marketing preferences do not control these messages. Adaptive email reminders are off by default until enabled. Delivery can fail or be delayed, so reminders must not be your only means of managing treatment. Health-summary emails may contain information visible to anyone with access to your mailbox.

Your chosen audience can see submitted posts, replies, and the profile details exposed by that feature. Direct messages are available to their intended participants and may be processed for service operation and safety. Authorized staff may access information for support, administration, moderation, or security. Anonymous posting hides the public display identity but does not make a contribution untraceable to the service or its authorized staff. Avoid posting sensitive health or identifying information in shared areas.

Downloading reports or raw records creates copies outside the app. If you authorize Google Sheets export, selected records are sent to your connected Google account and become subject to its access and sharing settings. External research sources, specialist websites, sponsor links, and payment pages have their own policies. Disconnecting an integration or deleting app data does not automatically delete exported, downloaded, or recipient-held copies.

Authentication, preferences, offline-saved articles, and temporary interface state may use cookies or browser storage. Health-record synchronization uses temporary in-memory state and same-account tab messages, rather than a permanent browser archive of those records. Separately downloaded files and saved content remain on the device until removed. Sign out on shared devices.

We do not sell personal or health information. We may disclose information to our service providers, at your direction, when required by law, or to protect rights and safety. Available privacy and analytics preferences apply to the features they describe; they do not prevent essential account, security, billing, or operational processing. Choosing a research-sharing preference is not a blanket authorization to publish identifiable health records.

Active-account health records remain available until you delete an item or request account deletion; PsoriCare does not impose a routine expiry period on those records. Some item-level delete actions first place a deletion marker so history and restoration features can work. Account deletion removes owned active records and app-held consent history after the 48-hour grace period. Limited security, suppression, deletion-policy, billing, or legal records may be retained only where needed to prevent abuse, honor choices, resolve disputes, or meet law. Provider backups and logs age out under provider-controlled schedules.

Account settings provide a deletion request with a 48-hour grace period during which you may cancel. After the deadline, the deletion processor removes the account and associated records identified by user ID, ownership ID, and account email. Downloaded exports, recipient-held messages or emails, authorized Google Sheets copies, public community media already copied by others, and third-party records are outside that deletion process. Contact Support to request review of a failed or incomplete deletion.

Depending on your location, you may have rights to access, correct, export, delete, restrict or object to processing, withdraw consent, appeal a denied privacy request, or lodge a complaint with the relevant regulator. Use Profile controls for supported actions and the Support page for additional privacy requests. We may verify identity before acting, respond within the period required by applicable law, and retain information where a lawful exception applies. Authorized agents may submit requests where local law permits and required verification is provided. This policy does not waive rights provided by applicable law.

PsoriCare and its providers may process information in countries other than where you live. Where required, transfers rely on recognized contractual, adequacy, consent, or other lawful safeguards. Local authorities may have access rights under applicable law, and privacy protections can differ by country.

We investigate suspected security incidents and provide notices to affected individuals or regulators when required by applicable law. No safeguard eliminates all risk, so protect your account credentials and notify Support if you suspect unauthorized access.

We use access controls and other safeguards intended to protect information; no system is absolutely secure. PsoriCare is not represented as a HIPAA-certified service, and this policy is not a certification of compliance with every health-privacy law. Do not use the app as a clinical medical-record system or submit information contrary to obligations owed to someone else.

PsoriCare is intended only for people who have reached the legal age of adulthood in their country and, where applicable, state, province, or territory, and never for anyone under 18. Account setup requires date of birth, jurisdiction, and an adulthood attestation. Contact Support if you believe a child has provided personal information. We may update this policy as features, practices, or legal requirements change; the revision date identifies the current text. Where required, material changes or new processing purposes will need additional notice or consent. Privacy questions and requests can be submitted through the Support page.