Privacy Policy

Who we are. NeuroTrack is built by two independent developers. Throughout this Privacy Policy, "we," "us," and "our" refer to the two of us jointly. For privacy questions, contact access@neuro-track.com.

What data NeuroTrack handles. When you use the app, you may record: fluid intake, medications and reminder times, mood and mental-health screener scores (PHQ-9, GAD-7), pain, bowel and bladder activity, skin / pressure-injury entries, vitals (including blood pressure for autonomic-dysreflexia tracking), spasticity, sleep, weight and height, daily notes, period and cycle data (opt-in), care-team contacts, appointments, exercise, and nutrition. The app also stores preferences such as your fluid goal, theme, region, and onboarding answers.

Where the data lives. Your data is stored only on your device, in your private app storage (AsyncStorage and a local SQLite database). We do not run a server. We do not have an account system. We cannot read, recover, or sync your data.

What leaves your device. Nothing, with two exceptions: (a) when you choose to export or share data via the iOS / Android share sheet — for example, the Care Report — you control where it goes; and (b) on the web version at neuro-track.com only, anonymous usage analytics are provided by Vercel. The analytics cookie banner lets you decline. No health data is sent to Vercel.

Third-party services. Vercel Analytics (web only, opt-out, anonymous page views). Apple and Google notification APIs (local-only, used to deliver the reminders you schedule). Apple and Google biometric APIs (local-only, used for the optional app lock). We do not use Sentry, Firebase, Amplitude, PostHog, Mixpanel, or any health-data backend.

Your rights. Because we do not hold your data, rights under the GDPR (Arts. 15–22), CCPA / CPRA, Washington's My Health My Data Act, PIPEDA, and similar laws are exercised on your device: use Settings → Data → Export Data to access a copy, Import Data to restore one, and Delete All Data to erase everything. We do not sell or share consumer health data.

Children's data. NeuroTrack is not intended for users under 18. We do not knowingly collect data from children.

Security. Your data is stored inside the app's sandboxed storage area. You can enable an optional biometric or device-passcode lock from Settings → Security. On iOS and Android, NeuroTrack's local database is excluded from device backups by default, so health data does not travel to iCloud or Google Drive unless you export it deliberately.

Breach notification. Because no data leaves your device, a remote breach is not a meaningful risk. If a security flaw is discovered that could expose on-device data, we will post a notice at neuro-track.com/security within 72 hours of confirmation and surface it inside the app on next launch.

Changes. We version this Privacy Policy. On material changes, you will be re-prompted to accept the new version before continuing to use the app.

Contact. access@neuro-track.com

Effective date: 2026-05-21 · Version 1.1