This policy describes how the Health Tracking Journal ("we," "the app") handles information
for a private personal wellness journaling tool used by the account holder and an invited
support viewer.
Who we are
Health Tracking Journal is a personal web application hosted at
https://bipolar-tracker.com/.
Access is limited to individuals who create an email account or are invited as a companion.
Information we collect
Journal content: Log entries you create (text, dates, wellness level
labels, optional metadata, and assessment summaries).
Account email: Email address used to sign in when Supabase auth is
enabled.
Mobile phone numbers (SMS program only): Numbers used to send
high-priority wellness alerts - the account holder's number and one support contact number
configured by the account holder. Numbers are not collected through a public signup form;
they are configured for this private use.
Technical data: Standard logs from our hosting and database providers
(e.g. request timestamps, errors) needed to operate the service.
How we use information
Store and display your journal and wellness level state.
Run optional automated assessment of entries (via configured API services).
Send transactional SMS only when you explicitly trigger a high-priority
alert, as described in our
SMS program and consent page.
Maintain security, fix bugs, and comply with law.
We do not use your information for advertising or sell your phone numbers.
SMS and mobile numbers
Wellness alert texts are sent through Twilio. Twilio processes message
delivery and may retain message metadata as described in
Twilio's Privacy Policy.
No sale or sharing for marketing: Mobile numbers are used only to deliver
alerts for this app. We do not sell, rent, or share phone numbers with third parties for
their marketing purposes.
Opt-out: Reply STOP to any message from our Twilio number
to unsubscribe. Reply HELP for help. Message and data rates may apply.
Frequency: SMS is sent only when an alert is manually triggered, not on a
marketing schedule.
Service providers
We use trusted processors to run the app, including:
Amazon Web Services (Amplify) - hosting the web application.
Twilio - sending SMS messages.
Optional AI providers - if enabled, journal text may be sent for entry
assessment or summaries (only when those features are configured).
These providers process data on our behalf under their own terms and privacy policies.
Storage and security
Journal data is stored in a hosted database with industry-standard access controls. No method
of transmission or storage is 100% secure; we take reasonable steps to protect your data for
a personal tool of this scale.
Retention
Journal entries are kept until you delete them or the account holder removes them from the
system. SMS delivery logs may be retained by Twilio according to Twilio's policies.
Your choices
Stop receiving SMS by replying STOP.
Request correction or deletion of journal data by contacting the account administrator.
Do not use the app if you do not agree with this policy.
Children
This app is not directed at children under 13 and is not intended for general public use.
Changes
We may update this policy from time to time. The "Effective" date at the top will change when
we do. Continued use of the app after changes means you accept the updated policy.