Privacy Policy

1. Introduction

Welcome to GlaucoCare. This Privacy Policy describes how GlaucoCare Team ("we," "us," or "our") collects, uses, shares, and protects your personal information when you use the GlaucoCare mobile application (the "App").

GlaucoCare is an eye health awareness and educational application designed to help users learn about glaucoma, organize their personal health information, and support their eye health journey through educational resources and personal organization tools.

Important Medical Disclaimer: GlaucoCare does NOT provide medical services, diagnosis, treatment, or clinical care. This app does NOT diagnose, treat, cure, or prevent any medical condition. Always consult qualified healthcare professionals for medical advice.

By using GlaucoCare, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with any part of this Privacy Policy, please do not use the App.

2. Information We Collect

2.1 Personal Information You Provide

When you create an account and use the App, we collect the following personal information:

• Account Information: Name, email address, mobile phone number, gender (optional), date of birth (optional)
• Profile Information: Profile photograph (optional)
• Authentication Information: Login credentials and authentication tokens

2.2 Health-Related Information

To provide our organizational and reminder features, we collect and store:

• Medication Reminder Information: Medication names you enter, reminder schedules you set, reminder completion status
• Personal Health Documents: Test results, prescriptions, and other documents YOU choose to upload
• Questionnaire Responses: Responses to educational awareness questionnaires about glaucoma-related topics. These responses are stored for your personal reference only and have no diagnostic, clinical, or medical assessment value. An in-app disclaimer is displayed on all questionnaire result screens.
• Eye Activity Records: Your completion of eye exercises and vision activities

Important: We collect this information solely for YOUR personal organization only. We do NOT analyze, interpret, or make medical judgments about your health information.

2.3 Usage and Device Information

We automatically collect certain information when you use the App:

• Device Information: Device type, operating system version, device identifiers, mobile network information
• App Usage Data: Features accessed, time spent on different screens, interaction patterns
• App Version: Version of the app you are using
• Language Preferences: Your selected language for the app interface
• Notification Data: Whether notifications are enabled and notification interaction history

2.4 Location Information

We do NOT actively collect or track your precise location. However:

• When you search for doctors or events near you, location may be used temporarily with your permission
• When you view doctor profiles, the app may use Google Maps to display locations
• Location data is NOT stored by us

2.5 Information from Third-Party Authentication

If you choose to sign in using third-party services (Google Sign-In or Apple Sign-In), we receive:

• Basic profile information (name, email address)
• Profile picture (if available and you grant permission)
• Unique identifier from the authentication service

2.6 Camera and Photo Library Access

When you grant permission, we access:

• Camera: To capture profile photos and photograph personal health documents
• Photo Library: To select existing photos for profile pictures or personal documents

Photos and documents are only accessed when you actively choose to upload them, and they are stored securely in your personal account.

3. How We Use Your Information

We use the collected information for the following purposes:

3.1 Core App Functionality

• Account Management: Create and manage your account, authenticate your identity, and provide personalized experience
• Reminder Services: Send timely notifications for medication reminders you set
• Personal Document Organization: Store and organize your personal health documents securely for easy access
• Doctor Information Display: Display doctor contact information and locations to help you find healthcare providers
• Educational Content Delivery: Provide relevant educational resources, blog posts, and videos about glaucoma and eye health
• Personal Records: Maintain your questionnaire responses and activity records for your reference

3.2 Communication

• Send reminder notifications based on schedules you set
• Provide customer support and respond to your inquiries
• Send updates about new features or changes to the app
• Deliver informational notifications about eye health

3.3 App Improvement and Analytics

• Analyze usage patterns to improve app features and user experience
• Identify and fix technical issues and bugs
• Develop new features based on user needs
• Monitor app performance and stability

3.4 Security and Legal Compliance

• Protect against fraud, abuse, and unauthorized access
• Enforce our Terms and Conditions
• Comply with legal obligations and respond to lawful requests
• Protect the rights, property, and safety of GlaucoCare, our users, and the public

4. How We Share Your Information

We do NOT sell your personal information to anyone.

We may share your information only in the following limited circumstances:

4.1 With Your Explicit Consent

We will share your information when you explicitly give us permission to do so.

4.2 When You Communicate Directly with Healthcare Providers

When you use the app's communication features to contact doctors (phone call, WhatsApp, email):

• You are communicating DIRECTLY with the healthcare provider
• We do NOT intercept, monitor, record, or store these communications
• The doctor receives only the information YOU choose to share during your direct communication
• We are NOT responsible for how doctors handle information you share with them
• This is NOT telehealth or medical consultation - it is simply providing contact information

4.3 With Service Providers

We may share information with trusted third-party service providers who assist us in operating the app, such as:

• Cloud Storage Providers: Firebase for secure data storage and authentication
• Push Notification Services: For delivering reminder notifications
• Analytics Services: For understanding app usage (anonymized data only)

These service providers are contractually obligated to protect your information and use it only for the purposes we specify.

4.4 For Legal Requirements

We may disclose your information if required by law, legal process, or government request, including to:

• Comply with legal obligations
• Respond to lawful requests from public authorities
• Protect our rights, privacy, safety, or property
• Protect the rights, privacy, safety, or property of our users or the public

4.5 Business Transfers

If GlaucoCare is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information becomes subject to a different privacy policy.

4.6 Aggregated and Anonymized Data

We may share aggregated, anonymized data that cannot identify you personally for research, analytics, or business purposes.

5. Data Security

We take the security of your personal and health information seriously and implement multiple layers of protection:

5.1 Security Measures

• Encryption in Transit: All data transmitted between your device and our servers is encrypted using SSL/TLS protocols
• Encryption at Rest: Your sensitive data is encrypted when stored on our servers
• Secure Authentication: We use industry-standard authentication methods including Firebase Authentication
• Access Controls: Strict access controls ensure only authorized personnel can access user data for legitimate purposes
• Regular Security Updates: We regularly update our security measures and monitor for vulnerabilities
• Secure Data Centers: Data is stored in secure, industry-standard data centers

5.2 Your Role in Security

You can help protect your information by:

• Keeping your login credentials confidential
• Using a strong, unique password
• Not sharing your account with others
• Logging out after using shared devices
• Keeping your device and operating system updated
• Reporting any suspicious activity to us immediately

5.3 Limitations

Important: While we implement strong security measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security of your information. Use of the app is at your own risk.

6. Data Retention and Deletion

6.1 How Long We Keep Your Data

We retain your information for as long as necessary to:

• Provide the app services to you
• Maintain your account and its functionality
• Comply with legal obligations
• Resolve disputes and enforce our agreements

6.2 Account Deletion

You have the right to request deletion of your account and personal data at any time. You can do this by:

• Using the account deletion feature in the app's Settings menu
• Sending an email to heli.desai.glaucocare@gmail.com with the subject line "Account Deletion Request"

6.3 What Happens When You Delete Your Account

When you request account deletion:

• Your account will be deleted immediately
• Your personal information, health data, and uploaded documents will be permanently deleted
• You will lose access to all app features and your stored information
• This action is irreversible and cannot be undone
• All your medication reminder schedules will be deleted
• All your uploaded documents will be permanently removed
• All your questionnaire responses will be deleted

6.4 Data Retention Exceptions

We may retain certain information even after account deletion if required by law or for legitimate purposes such as:

• Legal compliance and regulatory requirements
• Fraud prevention and security purposes
• Resolving disputes or enforcing our Terms and Conditions
• Anonymized data for analytics (which cannot identify you)

6.5 Backup Copies

Due to our backup processes, deleted data may remain in backup systems for a limited time before being permanently removed.

6.6 Specific Retention Periods

We retain different types of data for the following periods:

• Account Information: Retained for the duration of your active account, deleted within 30 days of account deletion
• Health Data (medication reminders, questionnaire responses, uploaded documents): Deleted immediately upon account deletion
• Usage Analytics (anonymized): Retained for up to 2 years for app improvement purposes
• Communications (support emails): Retained for up to 3 years for customer service purposes
• Backup Copies: Permanently deleted within 90 days of account deletion

Legal Hold: We may retain data longer if required by law, court order, or ongoing legal proceedings.

7. Your Privacy Rights

You have the following rights regarding your personal information:

7.1 Right to Access

You have the right to access the personal information we hold about you. You can view most of your information directly in the app settings.

7.2 Right to Correction

You can update or correct your personal information at any time through the app settings. If you need assistance, contact us at heli.desai.glaucocare@gmail.com.

7.3 Right to Deletion

You can request deletion of your account and personal data as described in Section 6.

7.4 Right to Data Portability

You can request a copy of your personal data in a structured, commonly used format. Contact us to request data export.

7.5 Right to Withdraw Consent

Where we process your data based on consent, you can withdraw consent at any time by:

• Adjusting app settings and permissions
• Revoking device permissions in your device settings
• Deleting your account

7.6 Right to Object

You can object to certain types of processing of your personal information. Contact us to exercise this right.

7.7 How to Exercise Your Rights

To exercise any of these rights, you can:

• Use the in-app settings and controls
• Email us at heli.desai.glaucocare@gmail.com

We will respond to your request within 30 days.

7.8 Region-Specific Privacy Rights

Depending on your location, you may have additional privacy rights under applicable local laws:

For Users in the European Union (EU) and European Economic Area (EEA):

Legal Basis for Processing: We process your personal data based on:

• Your explicit consent (Article 6(1)(a) GDPR) for general data processing
• Your explicit consent for health data (Article 9(2)(a) GDPR)
• Legitimate interests for app functionality and improvements (Article 6(1)(f) GDPR)

You can withdraw your consent at any time through the app settings or by contacting us.

International Data Transfers: Your data may be transferred to and stored in countries outside the EU/EEA, including India and United States. We ensure appropriate safeguards through:

• Standard Contractual Clauses (SCCs) with our service providers
• EU-US Data Privacy Framework for transfers to the United States
• Adequate security measures as required by GDPR Article 46

Data Breach Notification: In the event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and notify you without undue delay.

For Users in the United Kingdom:

The UK GDPR applies to processing of your personal data. You have the same rights as outlined for EU users above. Data breach notifications will be made to the Information Commissioner's Office (ICO) within 72 hours when required.

For Users in California, USA:

Under the California Consumer Privacy Act (CCPA/CPRA), you have the right to:

• Know what personal information we collect and how we use it
• Request deletion of your personal information
• Opt-out of the "sale" or "sharing" of personal information (Note: We do NOT sell or share your personal information)
• Non-discrimination for exercising your CCPA rights
• Correct inaccurate personal information

Important: We do not sell or share your personal information for monetary or other valuable consideration. We do not use or disclose sensitive personal information for purposes other than providing our services.

To exercise these rights, contact us at heli.desai.glaucocare@gmail.com

For Users in Brazil:

Under the Lei Geral de Proteção de Dados (LGPD), you have rights including:

• Confirmation of the existence of processing
• Access to your data
• Correction of incomplete, inaccurate, or outdated data
• Anonymization, blocking, or elimination of unnecessary or excessive data
• Portability of your data to another service provider
• Deletion of personal data processed with your consent
• Information about public and private entities with which we share data
• Information about the possibility of denying consent and the consequences
• Revocation of consent

Data Breach Notification: We will notify you and the Brazilian National Data Protection Authority (ANPD) of data breaches within a reasonable timeframe as required by LGPD.

For Users in Australia:

Under the Australian Privacy Principles (APPs), you have rights including:

• Access to your personal information
• Correction of inaccurate information
• Understanding how we collect, use, and disclose your information
• Making complaints about our handling of your personal information

Overseas Disclosure: Your personal information may be disclosed to overseas recipients including service providers in the United States and India. We take reasonable steps to ensure overseas recipients comply with the APPs.

For Users in Canada:

Under the Personal Information Protection and Electronic Documents Act (PIPEDA), you have rights including:

• Know why we collect, use, or disclose your personal information
• Expect us to collect, use, or disclose your personal information reasonably and appropriately
• Know who in our organization is responsible for protecting your personal information
• Expect us to protect your personal information with appropriate safeguards
• Expect our personal information management policies and practices to be clear and understandable
• Access your personal information and ask for corrections if necessary
• Complain about how we handle your personal information

International Data Transfers: Your personal information may be processed and stored outside of Canada, including in India and the United States. We ensure that your data receives an adequate level of protection when transferred internationally.

For Users in Singapore:

Under the Personal Data Protection Act (PDPA), you have rights including access to and correction of your personal information. We will notify you of the purposes for which your personal information is collected, used, and disclosed.

8. App Permissions

GlaucoCare requires certain device permissions to function properly. Here's what we access and why:

8.1 Camera Permission

Purpose: To capture profile photos and photograph personal health documents

When Used: Only when you actively choose to take a photo

Data Handling: Photos are uploaded to your secure account storage only if you choose to save them

8.2 Photo Library / Storage Access

Purpose: To select existing photos from your device for profile pictures or personal documents

When Used: Only when you actively select photos to upload

Data Handling: We only access photos you specifically select; selected photos are uploaded to your secure account storage

8.3 Notifications Permission

Purpose: To send medication reminders and important app updates

When Used: Based on your medication schedules and app events

Control: You can enable/disable notifications in device settings or app settings at any time

Note: Notifications are reminders, not medical instructions

8.4 Internet Access

Purpose: To sync your data, access educational content, display doctor information, and provide app functionality

Required: Yes, for the app to function

8.5 How to Manage Permissions

You can manage app permissions at any time through:

• Device Settings > Apps > GlaucoCare > Permissions (Android)
• Settings > Privacy > [Permission Type] > GlaucoCare (iOS)

Note: Denying certain permissions may limit app functionality.

9. Third-Party Services

GlaucoCare integrates with the following third-party services to provide enhanced functionality:

9.1 Firebase (Google)

Used For: User authentication, secure cloud storage, push notifications, and app analytics

Data Shared: Account information, usage data, device identifiers

Privacy Policy: https://firebase.google.com/support/privacy

9.2 Google Maps

Used For: Displaying doctor locations and event locations

Data Shared: Location data (when viewing maps only, not stored by us)

Privacy Policy: https://policies.google.com/privacy

9.3 Google Sign-In

Used For: Optional authentication method

Data Shared: Basic profile information (name, email)

Privacy Policy: https://policies.google.com/privacy

9.4 Apple Sign-In

Used For: Optional authentication method (iOS only)

Data Shared: Basic profile information (name, email)

Privacy Policy: https://www.apple.com/legal/privacy/

9.5 WhatsApp and Phone Dialer

Used For: Facilitating direct communication with doctors

How It Works: Opens native phone dialer or WhatsApp app with doctor's contact information

Privacy Note: Communications through these services are subject to their respective privacy policies. We do not monitor, intercept, or store these communications.

9.6 Third-Party Links

The app may contain links to external websites or content (such as educational videos, doctor websites). We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

10. Age Restrictions

10.1 Age Requirement

GlaucoCare is intended for users aged 18 years and older.

You MUST be at least 18 years old to create an account and use this app.

10.2 No Use by Minors

We do NOT knowingly collect personal information from individuals under 18 years of age.

If you are under 18:

• You are NOT permitted to use this App
• You may NOT create an account
• You must immediately stop using the App
• You must delete the App from your device

10.3 Parental Notice

If you are a parent or guardian and believe your child under 18 has used the app, please contact us at heli.desai.glaucocare@gmail.com.

We will:

• Verify the age of the user
• Immediately delete the account if user is under 18
• Permanently delete all associated data
• Prevent future access

10.4 Why Age 18+?

We require users to be 18 or older because:

• Users must be able to enter legally binding agreements
• The app deals with personal health information
• Health and medication decisions require adult judgment
• Simplifies privacy law compliance

11. International Data Transfers

11.1 Data Storage Location

Your information is stored on servers operated by Firebase (Google Cloud Platform), which may be located in various countries, including but not limited to India and other regions.

11.2 Cross-Border Transfers

If you access the app from outside India, your information may be transferred to, stored in, and processed in countries where our service providers operate. These countries may have different data protection laws than your country of residence.

11.3 Data Protection Standards

When we transfer personal information internationally, we implement appropriate safeguards including:

For transfers from the EU/EEA:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• EU-US Data Privacy Framework for transfers to the United States
• Binding Corporate Rules (where applicable)

For transfers from the UK:

• UK-approved Standard Contractual Clauses
• UK International Data Transfer Agreement (IDTA)
• UK-US Data Bridge for transfers to the United States

For transfers from other regions:

• Contractual commitments requiring service providers to protect data in accordance with applicable laws
• Security measures as described in Section 5

We ensure that all international transfers comply with applicable data protection laws. If you have questions about international data transfers, contact us at heli.desai.glaucocare@gmail.com.

12. Changes to This Privacy Policy

12.1 Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

12.2 Notification of Changes

When we make material changes to this Privacy Policy, we will:

• Update the "Last Updated" date at the top of this policy
• Notify you through the app or via email
• For significant changes, we may require you to review and accept the updated policy before continuing to use the app

12.3 Your Continued Use

Your continued use of the app after we publish or notify you of changes to this Privacy Policy means you accept the updated policy. If you do not agree with the changes, you should stop using the app and delete your account.

12.4 Review Regularly

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

13.1 Types of Requests We Handle

• Questions about this Privacy Policy
• Requests to access, correct, or delete your personal data
• Concerns about data security or privacy
• Requests for data export (data portability)
• Privacy-related complaints
• Account deletion requests
• General privacy inquiries

13.2 What to Include in Your Request

When contacting us, please include:

• Your full name
• Email address associated with your account
• Clear description of your request or concern
• Any relevant details or documentation

14. Cookies and Tracking Technologies

14.1 What We Use

GlaucoCare app uses the following technologies:

• Essential Cookies: Required for app authentication and core functionality (cannot be disabled)
• Analytics Cookies: Firebase Analytics to understand app usage and improve features
• Functional Storage: Local device storage for app preferences and offline functionality

14.2 Your Control

You can control analytics tracking through:

• App Settings > Privacy > Analytics (toggle off to disable)
• Device Settings > GlaucoCare > Permissions

14.3 Third-Party Analytics

We use Firebase Analytics (Google) to collect:

• App usage statistics
• Device information
• App performance data

This data is anonymized and used solely for app improvement. You can opt out of analytics in app settings.

14.4 Mobile Advertising ID

We do NOT collect or use your mobile advertising identifier (IDFA on iOS, Advertising ID on Android) for any purpose.

15. Google Play Health Apps Declaration

In accordance with Google Plays Health Apps Declaration policy, GlaucoCare has declared the following health feature categories applicable to this application:

• Diseases and Conditions Management
• Disease Prevention and Public Health
• Healthcare Services and Management
• Medical Reference and Education
• Medication and Treatment Management

These declarations reflect the educational, organisational, and reminder features offered by the app and do not imply that GlaucoCare is a regulated medical device or provides clinical medical services. Always consult a qualified ophthalmologist or healthcare professional for medical advice, diagnosis, and treatment.