Privacy Policy

1. Information We Collect

When you use Manny Pony, we collect the following types of information:

• Account Information: Name, email address, and password (hashed and encrypted).
• Profile Information: Names, dates of birth, gender, blood type, allergies, chronic conditions, insurance details, and photographs of family members.
• Health Data: Medication names, dosages, schedules, adherence logs, appointment records, health vitals, and medical documents uploaded by you.
• Usage Data: Login timestamps, feature usage, and audit logs of changes made within the Application.

2. How We Use Your Information

We use the collected information solely to:

• Provide and maintain the Application's core functionality (medication tracking, appointment scheduling, health logging, emergency information access).
• Enable emergency access to critical health information via QR codes and printable emergency profiles.
• Generate audit trails for accountability (who made what change and when).
• Improve and troubleshoot the Application.
• Communicate with you about account-related matters (e.g., password resets, policy changes).

3. Data Storage and Security

All data is stored securely using industry-standard encryption. Passwords are hashed using the Bcrypt algorithm. File uploads (photos, documents, prescriptions) are stored on encrypted storage. Access to the Application requires authentication, and family member data is scoped to the household you belong to.

4. Data Sharing

We do not sell, trade, or share your personal or health-related information with third parties. Data may only be disclosed:

• With your explicit consent
• If required by law or to respond to valid legal requests
• To protect the rights, property, or safety of our users or the public

5. Emergency Access

The Application provides QR codes that, when scanned, grant read-only access to emergency medical information without requiring authentication. This feature is designed for use by emergency responders. By using this feature, you acknowledge that emergency information will be accessible to anyone who scans the QR code.

6. Your Rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Delete your account and associated data
• Export your data upon request

To exercise these rights, contact us through the Application or at the email address associated with your account.

7. Cookies

We use essential session cookies for authentication purposes. No tracking cookies, advertising cookies, or third-party analytics cookies are used.

8. Data Retention

We retain your data for as long as your account remains active. Upon account deletion, your data is permanently removed within 30 days. Audit logs may be retained longer for legal compliance purposes but are anonymized.

9. Children's Privacy

The Application may be used to store health information about children under the age of 18. This is done under the supervision of a parent, guardian, or authorized caregiver. We do not knowingly collect data directly from children. If you believe a child has provided us with personal data without parental consent, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or through the Application. Your continued use after changes take effect constitutes acceptance of the updated policy.

11. Contact

If you have questions or concerns about this Privacy Policy or how your data is handled, please contact us through the Application's support channels.