Privacy Policy

Effective Date: May 20th, 2025

1. Introduction

Welcome to Aro Supplement Tracker ("Aro", "we", "us", or "our"). Aro is a mobile application designed to help users track and manage supplement intake, primarily for children under their care. This Privacy Policy describes how information is handled when you use our mobile application (the "App"). The core principle of Aro is that the personal information you enter is stored locally on your device. Please read this privacy policy carefully. IF YOU DO NOT AGREE WITH THE TERMS OF THIS PRIVACY POLICY, PLEASE DO NOT ACCESS THE APP.

We reserve the right to make changes to this Privacy Policy at any time and for any reason. We will alert you about any changes by updating the "Effective Date" of this Privacy Policy. You are encouraged to periodically review this Privacy Policy to stay informed of updates.

2. Information Processed by the App (Primarily Stored Locally on Your Device)

To provide its functionality, the App requires you to input certain information, which is stored and processed locally on your device. Aro does not collect or store this personal information anywhere else.

*   Personal Data You Provide (Stored Locally on Your Device):

    *   Account Information: Aro is currently designed to operate without requiring user accounts that transmit personal data anywhere. All data is stored locally. We will never change our app to store this information anywhere else but your device. 

    *   User Information: To use the core functionality of the App, you will provide information about yourself or  individuals under your care, such as their name. This information is stored locally on your device and is essential for tracking supplement intake for the correct individual.

    *   Supplement and Dosage Information: Information you provide about supplements, including names, dosage quantities, units, frequencies, custom intake times, and any notes you add regarding supplements or specific doses, is stored locally on your device.

    *   OCR Data: If you use the Optical Character Recognition (OCR) feature to scan supplement labels, the App processes the image locally on your device to extract text. The image itself may be temporarily stored on your device during processing but is not transmitted to us. The parsed text (supplement name, ingredients, dosage) is then stored locally as part of your supplement data on your device.

*   Usage Data (Primarily for On-Device Functionality or Anonymized Analytics):

    *   The App may process information about your device and how you use the App for its proper functioning (e.g., saving settings locally). If any usage data (such as App usage patterns, device model, operating system) is collected for analytics to improve App stability and functionality, it is intended to be anonymized and aggregated, and not linked to your personal identity stored on the device, unless a specific feature requires it and is clearly explained (e.g., optional crash reporting).

*   Data Stored Locally (Core Principle):

    *   Aro is designed to store all your sensitive Personal Data, including user information, supplement details, and dosage history, directly on your mobile device within a secure local database managed by the App.

3. How Information is Used by the App (On Your Device)

Having accurate information stored locally on your device permits the App to provide you with a smooth, efficient, and customized experience. Specifically, the App uses information you provide to:

*   Create and manage your supplement schedules and tracking on your device.

*   Enable personalized tracking for different users under your care, locally on your device.

*   Provide the core functionality of the App, including dosage tracking and reminders, operating with data on your device.

*   Send you push notifications for dose reminders and missed doses (if you have enabled them and granted necessary permissions). This involves interaction with third-party notification services using a device token, not your personal supplement data.

*   Facilitate local data analysis or trend monitoring if such features are part of the App (operating on your device).

*   Ensure the security and integrity of the App's local data storage mechanisms.

4. Data Storage and Security (Primarily On-Device)

Your personal information is primarily stored and protected on your device.

*   Local Storage: All core Personal Data (user information, supplement details, dose history) is stored locally on your device in the App's private storage. You are responsible for the security of your device (e.g., using a passcode, biometric security).

*   Encryption for Export: If you use features to export your data (e.g., as a JSON backup), we provide options for encrypting this exported data with a password you provide. The security of this password and the exported file is your responsibility once it leaves the App's control. We do NOT store this password in the app or elsewhere. 

*   Security Measures: We use administrative, technical, and physical security measures within the App to help protect your personal information stored on your device. While we strive to use commercially acceptable means to protect your Personal Data locally, we cannot guarantee its absolute security against all threats (e.g., if your device itself is compromised). For any data that must be transmitted for specific features (like device tokens for push notifications), we aim to use secure protocols.

5. Data Sharing and Disclosure (Limited and Specific)

Aro does not sell, trade, rent, or otherwise share your Personal Data (stored on your device) with third parties for their marketing purposes. Information processed by the App, or related to its operation, might be involved in sharing only in the following limited situations:

*   By Law or to Protect Rights: If we believe the release of information about you (which we would not possess if it's only on your device, but could apply to communications with us, for example) is necessary to respond to legal process, to investigate or remedy potential violations of our policies, or to protect the rights, property, and safety of others, we may share information as permitted or required by any applicable law, rule, or regulation.

*   Third-Party Service Providers for App Functionality: For certain App functionalities, we may use third-party services. For example, push notifications are delivered through services like Expo Notifications. These services receive a device token to send notifications to your device, but they do not receive the personal details of your supplement schedules or child information from us. Any such third parties are typically obligated to protect the data they handle.

*   Aggregated or Anonymized Data for Analytics: If the App collects any usage analytics (as described in Section 2), it is intended to be anonymized and aggregated such that it does not directly identify you or your specific data. This anonymized data might be used for App improvement.

*   With Your Explicit Consent: If a feature requires sharing your data stored on the device (e.g., a future cloud backup/sync feature that you opt into), we will explicitly ask for your consent before any such sharing occurs, detailing what will be shared and with whom.

6. Data Retention (On Your Device)

Your Personal Data is retained on your device as long as you use the App and do not delete the data or the App itself. You can delete your data by using any in-app data deletion features if provided, or by uninstalling the App (which will remove its locally stored data). You can backup your data, with the option to encrypt this backup using a password. The restoration of encrypted data will require the same password. We do NOT store this password anywhere. 

7. Your Rights and Choices (Regarding Data on Your Device)

You have full control over the Personal Data stored by Aro on your device:

*   Access and Correction: You can access and modify all your information (e.g., supplement details, user names, notes) directly within the App on your device.

*   Deletion: You can delete specific entries (e.g., a supplement, a dose record) or all data within the App on your device. Uninstalling the App will delete all its locally stored data.

*   Push Notifications: You can opt-out of receiving push notifications by changing the notification settings on your device or within the App (if such settings are provided).

*   OCR Data: You control the use of the OCR feature. Images scanned are processed locally on your device.

8. Children's Privacy

Aro is intended for use by individuals and adults who could be parents and legal guardians to input and manage supplement information for children under their care, with all such data stored locally on the user's device. We do not collect or solicit personal information from children under the age of 13 (or the relevant age of digital consent in your jurisdiction) to be stored. If you become aware that your child has somehow provided information that has been transmitted to us (outside the App's local storage paradigm) without your consent, please contact us. The information entered about children into the App is done so by the parent or guardian and remains on their device and is secure. 

9. Third-Party Services (for App Functionality)

The App may utilize third-party services for specific functionalities, such as Expo Application Services for delivering push notifications. These services handle data (like device tokens) according to their own privacy policies, and we encourage you to review them. We select service providers with a commitment to privacy and security, but we are not responsible for the specific privacy practices of these third parties beyond the limited data shared for essential App functions.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy within the App or on our website (if applicable) and updating the "Effective Date" at the top of this policy. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted.

11. Contact Us

If you have any questions or concerns about this Privacy Policy or Aro's data handling practices (particularly how data is managed locally on your device), please contact us at:

aro@dhi-systems.com

Aro Supplement Tracker