Effective October 16, 2026. Itch Log LLC operates Itch Log. This policy supplements our App Privacy Policy and applies to consumer health information handled by the app. Contact: warren@itchlog.com.
Health information and sources
We collect information you choose to provide after agreeing to health-data collection: skin conditions and body-area labels; severity and itch; symptoms, notes, and dates; skin photos; treatment and medication labels and course dates; triggers; weekly check-in answers; appointment details, clinician names, and questions for your visit. Your account identifier links these records to you.
The sources are you and the photos you choose to capture or import from your device. We derive timelines, trends, and report summaries from those records. We do not obtain your health records from clinicians, insurers, data brokers, HealthKit, or advertising networks, and we do not infer diagnoses from photos.
Purpose and consent
We use these records to store and display your history, compare photos, show trends, prepare exports and one-page visit reports, and operate and secure those functions. Collection starts only after affirmative consent. We do not use health data for advertising, sell it, or use it to train AI models.
You can withdraw consent in the app's Privacy screen or contact us. Withdrawal stops new collection. Existing records remain until you delete them; access, export, and account deletion stay available.
Health information disclosed and recipients
Our cloud infrastructure provider, Supabase, processes all categories listed above to host the private database, photos, reports, exports, authentication, and server functions in the United States. Its privacy contact information is available online. We have no affiliates receiving consumer health information. We do not send health records to RevenueCat, Expo/EAS, advertisers, or data brokers.
Our own report software runs on a company-controlled computer in the United States. It temporarily processes report snapshots and selected photos, and sends the finished PDF to private Supabase storage. We keep encrypted recovery copies of database records, photos and PDFs on company-controlled computers in the United States for up to seven days, with scheduled removal. They are used only for recovery and are not a browsable report archive. Before an additional hosting provider receives report snapshots or photos, we will identify it here and update our processor inventory. No additional report host is currently active. Any provider processing health information must be limited to delivering the requested service.
You decide whether to share an exported report with a clinician or another recipient. That recipient controls the copy you give them. We may make disclosures required by applicable law or valid legal process, subject to the restrictions that apply to consumer health information.
Exercise your rights
You may request confirmation of whether we collect, share, or sell your consumer health information; access and export it; obtain a list of recipients and how to contact them; correct information; withdraw consent; or delete it. We do not sell consumer health information. Use the app's Privacy screen for export, withdrawal, and account deletion, or email warren@itchlog.com for any of these requests, including deletion of particular records.
You do not need to create a new account. We take reasonable steps to authenticate a request and request only information necessary for that purpose. Do not send medical records, passwords, or verification codes by email. Authorized representatives can contact us with proof of authority; we may verify your permission or identity directly.
We respond without undue delay and within 45 days. If applicable law permits a necessary extension, we explain its reason and deadline within the initial period. Requests are free unless applicable law permits a fee for a manifestly unfounded, excessive, or repetitive request. We do not unlawfully discriminate against you for exercising your rights. Functions that depend on information you withhold or delete may no longer be available.
Deletion and retention
Health records remain until you delete them or your account. Individual report PDFs cannot be deleted from the app in this version; full account deletion removes all reports, and you can contact us about a specific deletion request. Export downloads expire after seven days. Account deletion removes health records and stored files through our background deletion process and follow-up sweep.
Database backups expire on the provider's rolling retention schedule, currently a seven-day daily-backup window. If a backup is restored, deletion requests must be reapplied before restored data returns to normal service. Applicable legal deadlines govern removal from archives and backups; Washington's consumer health law allows no more than six months after authentication for backup deletion. Photo and PDF objects are not contained in provider database backups; they are included in our separate encrypted recovery copies on the same seven-day schedule. Later deletion requests must also be reapplied to restored files before use. A deletion workflow record and salted anti-abuse hash may survive; neither contains health records. Copies you shared with other recipients remain under their control.
Appeals and complaints
If we decline your request, reply to the decision or email warren@itchlog.com with "Privacy appeal". We respond in writing within 45 days and explain the action taken and our reasons. If an appeal is denied, you may contact your state attorney general, including the Washington Attorney General's complaint service.
Changes
We update the effective date when this policy changes. Before collecting a new category of health information or using it for an additional purpose, we disclose the change and obtain affirmative consent as required. Material changes are communicated through the app or your account email.