# Privacy Policy for Vitamin D Logger
**Effective Date:** 2026-06-10
**Developer:** Muhammad Ilyas
**Contact:** muhammadilyas15@gmail.com
**Package:** com.ilyas.ilyasapps.vitamindlogger
---
## 1. Introduction
Vitamin D Logger ("we", "our", "the app") is a personal nutrient-tracking
application that helps you log Vitamin D intake from supplements and sun
exposure. This Privacy Policy explains what information the app handles,
where that information lives, and what choices you have over it.
By using Vitamin D Logger you agree to the practices described in this
policy. **Vitamin D Logger is a logging tool, not a medical device.** It
does not diagnose, treat, cure or prevent any condition. Always discuss
Vitamin D status with a qualified healthcare professional.
## 2. Information We Collect
### 2.1 Information You Provide
All of the information below is provided by you and stored **on your
device only** in a local Room database (`vitamin_d_logger.db`) inside the
app's private sandbox.
- **Supplement entries** — brand or product name (free-text), IU dose,
optional notes, and timestamp.
- **Sun-session entries** — Fitzpatrick skin type, approximate skin
exposure percentage, minutes outdoors, the UV index reading at the time
(when you tapped "Fetch UV near me"), the app's conservative IU
estimate, optional notes, and timestamp.
- **Reminder preferences** — whether the daily reminder is enabled and
the hour and minute you chose.
- **Theme and language preferences.**
- **Disclaimer acceptance state** (a boolean flag) and onboarding
completion state.
### 2.2 Information Collected Automatically
- **UV index near you** — only when you explicitly tap "Fetch UV near
me". The app obtains your approximate latitude and longitude from
Google Play Services and immediately sends only those coordinates to
the Open-Meteo public API to receive the current UV index. The
coordinates are **not** stored by the app and the UV value is held
in memory until you save the entry; the entry stores only the UV
value, not your location.
- **Advertising identifier (free tier only)** — Google AdMob may read
the system Advertising ID for ad delivery. You can reset or limit
this through Android Settings → Google → Ads.
- **In-app purchase status** — Google Play Billing returns whether you
hold the lifetime Premium product so the app can unlock features and
hide ads.
- **Device model and Android version** — included in the body of any
email you send via the in-app Contact Us form, so we can debug.
Nothing is sent unless you press "Send".
### 2.3 Information From Third Parties
Vitamin D Logger does not use Google Sign-In, Firebase Authentication,
or any social login. We do not receive personal information about you
from third-party identity providers.
## 3. How We Use Your Information
We use the information described above only to:
- Display your daily and historical Vitamin D logs and statistics.
- Generate the conservative sun-IU estimate when you log a sun session.
- Show a daily-IU trend chart and a one-page doctor PDF report when you
request them.
- Trigger an optional local notification at the reminder time you chose.
- Show advertisements to free-tier users via Google AdMob, with consent
collected through the Google User Messaging Platform (UMP).
- Verify your Premium purchase via Google Play Billing.
- Respond to support emails you send via Contact Us.
## 4. Data Storage and Security
### 4.1 Local Storage
All of your logged entries, supplement brand list, settings, and
preferences are stored in:
- **A local Room (SQLite) database** in the app's private storage area.
- **Android SharedPreferences** for small flags (premium state, theme,
reminder time, disclaimer acceptance).
- **The app's internal `files/exports/` directory** when you generate a
PDF or CSV — only kept long enough to share via your chosen app.
These files are accessible only to Vitamin D Logger on your device.
Android isolates them from other apps.
### 4.2 Cloud Storage
**Vitamin D Logger does not currently use any cloud sync, cloud
backup, cloud database, or remote analytics.** Your logs are not
uploaded anywhere unless you explicitly share an exported PDF or CSV
file.
### 4.3 Security Measures
- All network traffic the app initiates uses HTTPS/TLS (Open-Meteo UV
API, AdMob, Google Play Billing, in-app update checks).
- Your data does not leave your device through automatic sync.
- The app does not request `READ_EXTERNAL_STORAGE` or
`MANAGE_EXTERNAL_STORAGE`.
## 5. Data Sharing
### 5.1 We Do Not Sell Your Data
We do not sell, trade, or rent your personal information to third
parties.
### 5.2 Third-Party Services
The following services may receive limited information when you use
specific features. Each runs under its own privacy policy:
| Service | Purpose | Data Accessed | Privacy Policy |
|---|---|---|---|
| **Google AdMob** (free tier) | Banner / interstitial / rewarded ads | Advertising ID, ad interactions, approximate region | https://policies.google.com/privacy |
| **Google User Messaging Platform (UMP)** | EEA / UK consent gathering for ads | Consent choices | https://policies.google.com/privacy |
| **Google Play Billing** | Premium lifetime purchase | Purchase token, product ID | https://policies.google.com/privacy |
| **Google Play Services — Location** | Approximate lat / lon **only when you tap "Fetch UV near me"** | Approximate latitude and longitude (in memory) | https://policies.google.com/privacy |
| **Google Play In-App Update** | Notify you of new versions | App version, Play Store metadata | https://policies.google.com/privacy |
| **Open-Meteo** | Current UV index for your location | Latitude and longitude you provided that moment | https://open-meteo.com/en/terms |
### 5.3 Advertising
Free-tier users see ads served by Google AdMob. AdMob may use the
device Advertising ID and ad-interaction signals to deliver more
relevant ads. In the European Economic Area, the United Kingdom and
Switzerland, the in-app Google UMP consent dialog asks for your
preferences before any personalized ads are shown. **Premium users
see no advertisements at all.**
You can reset or limit ad personalization via Android Settings →
Google → Ads.
## 6. Health Information
### 6.1 What Counts as Health Information
The supplement IUs, sun sessions, and Vitamin D estimates you log are
health-related information.
### 6.2 How We Protect It
- All health-related entries stay on your device. They are not synced
to any cloud service, shared with advertisers, used to personalize
ads, or used for any purpose other than displaying them back to you.
- The doctor PDF report is generated locally; sharing it with anyone is
your action, not ours.
### 6.3 Medical Disclaimer
Vitamin D Logger is not a medical device, not a diagnostic tool, and
not a substitute for a serum 25(OH)D blood test or for advice from a
qualified healthcare professional. The sun-derived IU figures shown
in the app are rough behavioural estimates — not clinical
measurements. If you suspect Vitamin D deficiency, contact your
doctor.
## 7. Permissions
| Permission | Why the app requests it | When |
|---|---|---|
| `INTERNET`, `ACCESS_NETWORK_STATE` | UV API, AdMob, Billing, in-app update | When those features run |
| `ACCESS_COARSE_LOCATION`, `ACCESS_FINE_LOCATION` | Look up UV index near you | Only when you tap "Fetch UV near me" |
| `POST_NOTIFICATIONS` | Daily reminder | Only when you enable the reminder |
| `RECEIVE_BOOT_COMPLETED` | Reschedule reminder after restart | Background |
| `VIBRATE` | Subtle haptic feedback on button taps | When the app runs |
| `com.android.vending.BILLING` | Premium lifetime purchase | When you tap "Go Premium" |
The app does **not** request camera, microphone, contacts, calendar,
phone, SMS, accounts, or external-storage permissions.
## 8. Children's Privacy
Vitamin D Logger is not directed at children under the age of 13. We
do not knowingly collect personal information from children under 13.
If we learn that a child under 13 has submitted personal information,
we will delete it.
## 9. Your Rights and Choices
### 9.1 Access and Control
- All of your logs are visible inside the app on the History screen.
- You can edit any entry from its detail screen.
- You can delete any single entry from its detail screen or the
History list (long-press → Delete).
- You can wipe all data with one tap in Settings → Clear all data.
### 9.2 Data Export
- **PDF report** — generated in the app and shared via the system
share sheet to any destination you choose (email, Drive, Files…).
- **CSV export** — full data export to a comma-separated file.
### 9.3 Account / Cloud Deletion
Because Vitamin D Logger does not use accounts or cloud sync, there
is no remote data store to delete. Uninstalling the app removes the
local database, settings, and any exported files in the app's
internal directory.
### 9.4 Notifications
You can disable the daily reminder any time in Settings → Daily
reminder, or globally in Android Settings → Apps → Vitamin D Logger →
Notifications.
### 9.5 Ad Preferences
- Premium removes all advertisements.
- Reset or limit the Advertising ID via Android Settings → Google →
Ads.
- In the EEA / UK / Switzerland, re-open the UMP consent dialog from
Settings to change your ad-consent choices (where applicable).
## 10. GDPR (European Users)
If you are located in the European Economic Area, the United Kingdom
or Switzerland, you have the following rights regarding personal
data:
- **Access** — request a copy of any data we hold about you
- **Rectification** — correct inaccurate data
- **Erasure** — request deletion of any data we hold
- **Restriction** — limit how we process your data
- **Portability** — receive your data in a portable format
- **Objection** — object to processing for marketing
In Vitamin D Logger's case the only data that ever leaves your device
is (a) coordinates sent to Open-Meteo at the moment you fetch UV, and
(b) advertising signals sent to Google AdMob when ads are loaded.
There is no server-side user account to access or erase. Use Android
Settings → Apps → Vitamin D Logger → Clear data to remove local data,
or email us with any GDPR-related request.
The app uses the **Google User Messaging Platform** to collect
consent for personalized advertising in compliance with GDPR / ePrivacy.
## 11. California (CCPA)
We do not sell personal information as defined by the California
Consumer Privacy Act. California residents may exercise the rights
described in Section 10 by emailing us.
## 12. Data Retention
- **Local logs:** kept until you delete them or uninstall the app.
- **PDF / CSV exports:** kept in the app's internal exports folder
until you uninstall or until you tap "Clear all data".
- **Advertising signals:** retained by Google AdMob under Google's
retention policies (https://policies.google.com/privacy).
- **Open-Meteo requests:** Open-Meteo is a free public API; see their
privacy notice for their retention practices.
## 13. Changes to This Policy
We may update this Privacy Policy. When we do, we will update the
"Effective Date" at the top and post the new policy at the same
URL referenced from the Play Store listing.
## 14. Contact
If you have questions or requests about this Privacy Policy or your
data, contact:
**Email:** muhammadilyas15@gmail.com
**Developer:** Muhammad Ilyas