Effective October 16, 2026. Itch Log LLC operates Itch Log. Questions and privacy requests: warren@itchlog.com.

This policy covers the Itch Log app. Our separate Consumer Health Data Privacy Policy explains health-data collection, sources, disclosures, and your rights. The website waitlist is covered by the waitlist privacy notice.

What the app does

Itch Log lets adults record skin symptoms and photos, track their own treatments and triggers, and prepare summaries to share with their clinician. It does not diagnose conditions, recommend treatment, or replace professional medical advice. Using the app does not create a clinician-patient relationship with Itch Log LLC.

Information we collect

How we use information

We use your records to provide your timeline, trends, photos, check-ins, exports, and visit reports. We use account information to sign you in and keep accounts separate, purchase information to provide subscription access, and technical information to operate the service, prevent abuse, and resolve problems. If you contact support, we use what you send to respond. Please do not email skin photos, medical records, passwords, or verification codes.

We do not sell health information, use it for advertising, share it with advertisers or data brokers, or use it to train AI models. We do not use advertising or behavioral analytics SDKs. Remote Sentry crash reporting is not active.

Service providers and disclosures

We prepare reports using our own software on a company-controlled computer in the United States. It temporarily processes the selected health records and photos and sends the finished PDF to private Supabase storage. We also keep encrypted recovery copies of database records, photos and PDFs on company-controlled computers in the United States for up to seven days, with scheduled removal. These copies are used only for recovery and are not a browsable report archive. Any additional cloud host that will process report snapshots or photos must be identified in these policies before it receives health data. The current health-data provider list is in the Consumer Health Data Privacy Policy.

Your clinician receives a report only when you choose to share it. Copies you share are then controlled by their recipients. We may disclose information when required by applicable law or a valid legal process, or as necessary to address a security incident, subject to applicable restrictions on health information.

Storage and security

Connections to our services are encrypted. Database access rules separate user accounts. Recent records and photos are cached on your phone in encrypted form using device-bound keys, and the app clears its cache on sign-out. GPS metadata is removed from photos before upload. Reminders are local notifications and do not display condition names, symptom scores, or photos on the lock screen. No system can guarantee complete security.

Retention and deletion

Records remain until you delete them or your account. Visit report PDFs and their report snapshots remain with your account; this version does not offer deletion of an individual report. Full account deletion removes them. Export downloads expire after seven days.

Deleting an account starts a background process that revokes access, removes account records and stored objects, revokes the app's Apple sign-in authorization, and deletes the corresponding RevenueCat subscriber record. A later sweep checks for remaining records. Failed steps are retried; you can contact support about a pending deletion. Deleting the app or app account does not cancel an Apple subscription. Manage it separately in your Apple Account settings.

Database backup copies expire on the hosting provider's rolling retention schedule, currently a seven-day daily-backup window. This is not immediate erasure from backups. If a backup is restored, deletion requests must be reapplied before restored data returns to normal service. Applicable backup-deletion deadlines still apply. Provider database backups do not include photo or PDF object bytes; our separate encrypted recovery copies include those files. Recovery copies expire on the same seven-day schedule. A recovery must reapply later deletion requests before any restored records or files return to service.

Two limited control records survive account deletion: a deletion-workflow record that prevents old sessions from recreating data, and a salted hash of the Apple identifier if the one free report was used. They contain no health records. The hash prevents the free allowance from resetting on account recreation; it is not used for advertising. Information you already shared remains with its recipients.

Your choices and rights

You can access and export your records, withdraw health-data consent, and request account deletion from the Privacy screen. Withdrawal stops new health-data collection; existing records remain until deletion, and export and deletion remain available. You can decline optional photo permissions and control reminders in the app and iPhone settings.

For access, correction, deletion of specific health information, a list of health-data recipients, withdrawal, or an appeal, email warren@itchlog.com. You do not need a new account to make a request. We verify your identity using information reasonably necessary for that purpose. An authorized representative may contact us with proof of authority; we may also verify your identity or permission directly.

We respond without undue delay and within 45 days. If an applicable law permits an extension and it is necessary, we explain the reason and new deadline within the initial period. Requests are free unless applicable law permits a charge for a manifestly unfounded, excessive, or repetitive request. We do not unlawfully discriminate because you exercise privacy rights. Some functions need the records you choose to withhold or delete.

If we refuse a request, reply to the decision or email the same address with "Privacy appeal". We provide a written appeal decision within 45 days, with reasons. You may also contact your state attorney general, including the Washington Attorney General.

Adults only

Itch Log is for adults 18 and older. We do not knowingly collect children's health information. Contact us if a child has supplied information so we can investigate and remove it.

Security notices and changes

We will notify affected people of a security breach when required by law. We normally contact you at your account email. You may request first-class mail security notices by contacting us; we will arrange how to supply a mailing address.

We update the effective date when this policy changes. Material changes are communicated through the app or your account email. Before collecting additional health-data categories or using them for a new purpose, we disclose the change and obtain affirmative consent as required.