Legal

Privacy Policy

Last updated: March 2026

Your health data is sensitive. This policy explains exactly what we collect, why, and how we protect it.

The short version

We never sell your health data.
You own everything you log.
We only collect what's needed to run the service.
You can delete your account and data at any time.

1.Information We Collect

We collect only the information necessary to provide our service:

Account details — your username and email address when you register.
Symptom logs — symptom name, severity rating, date, notes, and any linked medication.
Medication records — drug name, dosage, frequency, route, start and end dates.
Usage data — basic analytics such as pages visited and features used, collected to improve the service.

We do not collect sensitive health identifiers, insurance information, or clinical records.

2.How We Use Your Data

Your data is used solely to:

Provide and personalize the symptom tracking and reports features.
Authenticate your account and maintain session security.
Improve product functionality based on aggregated, anonymized usage patterns.
Communicate important service or security updates.

We will never use your health data for advertising, profiling, or any purpose unrelated to the service described above.

3.Data Ownership

You own your data. GermFx does not sell, rent, or license your personal health data to any third party. Your symptom logs and medication records are yours, and they exist exclusively to serve you within this application.

4.Data Security

We implement reasonable and industry-standard safeguards including authentication protections, encrypted data transmission (HTTPS), and secure server-side storage. No system is completely immune to security risks, and while we take reasonable precautions, we cannot guarantee absolute security. We encourage you to use a strong, unique password for your account.

5.Cookies and Tracking

GermFx uses session cookies to maintain your authenticated session. These are strictly functional — they are not used for advertising or cross-site tracking.

We may use minimal, anonymized analytics to understand how the product is used. This data is never tied to your personal identity or health records.

6.Data Retention

Your account data and logs are retained for as long as your account exists. You may request deletion of your account and associated data at any time. Upon deletion, your personal data is permanently removed from our systems within 30 days, except where retention is required by law.

7.Third-Party Services

GermFx may use trusted third-party services for infrastructure (such as hosting and database providers). These providers are contractually obligated to handle your data securely and only as directed by us. We do not share your personal health data with any third party for their independent use.

8.Your Rights

You have the right to:

Access the personal data we hold about you.
Request correction of inaccurate data.
Request deletion of your account and associated data.
Export your symptom and medication data.

To exercise any of these rights, please contact us at privacy@GermFx.

9.Children's Privacy

GermFx is not intended for use by individuals under 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor has registered, please contact us and we will promptly remove the account.

10.Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated“ date at the top of this page. Continued use of GermFx after changes constitutes your acceptance of the updated policy. For significant changes, we will notify registered users by email.