Privacy Policy — Family Health Card
Effective date: 29 May 2026
Last updated: 29 May 2026
App: Family Health Card (Android: com.ackbiz.family_health_card, iOS: com.ackbiz.family-health-card)
Provider / data controller: ACKPlus Solutions Private Limited ("we", "us", "our"), B-216 RK Iconic, Nr Sheetal Park, 150ft Ring Road, Rajkot, Gujarat, 360001
Privacy contact:contact@ackplus.com
The short version
Family Health Card is offline-first. The health information you enter — profiles, records, medicines, allergies, conditions, vaccinations, emergency details — is stored only on your device, encrypted. We never receive, store, or transmit your health data to our servers. We don't have servers that hold your data, we don't require an account, we don't show ads, and we never sell your data.
The only information that can leave your device is optional, anonymous diagnostics (crash and basic usage data) — and only if you turn it on (it is off by default). It never includes your health information.
1. What information the app handles, and where it lives
a) Your health & family data — stored on your device only
You can enter and store, for each family member: name, relationship, sex, date of birth, blood group, photo; allergies, medical conditions, medications and reminder schedules, vaccinations; health records (photos/scans, imported PDFs, text extracted from scans, doctor/clinic/reference details); lab values; emergency contact; organ-donor preference; and optional insurance details.
This data is saved in an encrypted database on your device (AES-256). It is never sent to us or to any third party by the app. We cannot see it and have no way to access it.
b) On-device scanning (OCR)
When you scan a document, text recognition runs locally on your device (Google ML Kit). The image and the extracted text are not uploaded.
c) Optional diagnostics — the only data that can leave your device
If — and only if — you enable Settings → "Share anonymous diagnostics" (off by default), the app sends limited technical data to Google Firebase (Crashlytics and Analytics) acting as our processor:
- Crash reports: error/stack traces, device model, OS version, app version.
- Usage analytics: screen views and basic interaction/session events, approximate (coarse) region, and a non-identifying app-instance identifier.
This diagnostics data does not include your health information and is used solely to find crashes and improve the app. You can turn it off again at any time in Settings; we then stop collection.
d) What we do NOT do
No user accounts. No cloud storage of your records. No advertising or ad trackers. No selling or renting of your data. No third-party data sharing beyond the optional Firebase diagnostics above.
2. Device permissions
The app asks only for what a feature needs, when you use it:
- Camera — to scan records and member photos.
- Photos / files — to attach images, import PDFs, and save the Emergency QR.
- Biometrics / passcode — for the optional app lock (handled by your OS; we never receive your biometric data).
3. How your data is protected
- The on-device database is encrypted with AES-256 (SQLite3MultipleCiphers); the encryption key is held in the OS secure keystore (iOS Keychain / Android Keystore), never hardcoded.
- An optional biometric/passcode app lock can gate access.
- Backups you create are AES-256-GCM encrypted files that only you control.
No method of storage is 100% secure, but because your health data never leaves your device, the main risk is physical access to your unlocked device — which the app lock is designed to reduce.
4. Sharing — always under your control
You decide if and when to share anything:
- Emergency QR / card and PDF exports are generated on your device and shared only when you choose to (e.g. via the OS share sheet). The Emergency QR encodes only emergency-relevant fields, never your full records.
- Encrypted backups are exported by you and stored wherever you choose; we never receive them.
We share data with Google (Firebase) only for the opt-in diagnostics described in Section 1(c), and only while you have it enabled.
5. Your choices and rights
Regardless of where you live, in the app you can:
- Access/port your data — export an encrypted backup at any time.
- Delete data — remove individual records or an entire member; uninstalling the app deletes all on-device data. Backups you exported are yours to delete.
- Turn diagnostics off — Settings → "Share anonymous diagnostics".
Because your health data lives only on your device and we never hold it, we cannot access, retrieve, correct, or delete it for you — you control it directly.
Region-specific rights. Depending on your location you may have additional rights — e.g. under the EU/UK GDPR, India's Digital Personal Data Protection Act, 2023, and the California CCPA/CPRA — such as access, correction, deletion, portability, and to lodge a complaint with your data protection authority. These rights primarily concern the limited diagnostics data (the only data we process); for everything else, you already exercise them in-app. To make a request about diagnostics data, contact us at contact@ackplus.com. We do not "sell" or "share" personal information as those terms are defined under California law.
6. Children's data
The app is intended for an adult to manage their family's health records, which may include information about children. It is not directed to children and children should not use it independently. By adding a minor's information, you confirm you are the parent/guardian (or are authorised) and consent to that on-device storage. Because health data stays on the device and diagnostics are off by default, we do not knowingly collect personal information from children. If you believe a child has enabled diagnostics, turn it off in Settings and contact us. (We aim to align with COPPA (US, under 13), GDPR children's rules (under 16/13), and India's DPDP (under 18).)
7. Data retention
- Your health data: kept on your device until you delete it or uninstall the app. We hold none of it, so we have nothing to retain or delete on our side.
- Diagnostics (if enabled): retained by Google/Firebase per their retention settings and policies; we keep no separate copy.
8. International transfers
Your health data does not leave your device, so there is no international transfer of it. If you enable diagnostics, that limited data is processed by Google, which may process it on servers outside your country, under Google's safeguards.
9. Third-party services
- Google Firebase (Crashlytics & Analytics) — optional diagnostics only; see the Firebase Privacy & Security and Google Privacy Policy.
- Google ML Kit — on-device text recognition; no upload of your images/text.
10. Not a medical device / not medical advice
Family Health Card is a personal record-keeping tool. It is not a medical device and does not provide medical advice, diagnosis, or treatment. Always verify scanned/extracted information, and consult a qualified clinician before making any medical decision.
11. Changes to this policy
If we change how the app handles data, we will update this policy and its "Last updated" date, and (for material changes) notify you in the app. Continued use after an update means you accept the revised policy.
12. Contact
Questions or privacy requests: contact@ackplus.com
ACKPlus Solutions Private Limited — B-216 RK Iconic, Nr Sheetal Park, 150ft Ring Road, Rajkot, Gujarat, 360001