EkAyu for iOS

Privacy Policy

Effective date: September 30, 2026

EkAyu keeps the health information you enter on your device. If you turn on iCloud Sync, it is also stored in your own private iCloud account, which Apple provides. It is never sent to an EkAyu server, and the developer cannot see it. The developer does not operate an EkAyu account service, collect your health information, sell personal data, serve advertising, or track you across apps or websites.

1. Who this policy covers

This policy describes how the EkAyu iOS app (bundle identifier com.codecat15.ekayu) handles information. EkAyu is developed and maintained by codecat15 (referred to as “the developer,” “we,” or “us”).

2. Information you add to EkAyu

You may choose to enter or attach information such as:

profile names, relationships, dates of birth, sex, blood group, and profile photos;
medical conditions, medications, allergies, and other health-related details; and
medical report titles, types, dates, providers, facilities, notes, images, and PDF files.

This information is processed locally to provide the app’s profile, organization, search, preview, and sharing features. It is not transmitted to the developer or an EkAyu server.

3. Data collection and tracking

In the app: EkAyu itself does not record or store your IP address. Your health records stay on your device unless you choose to share them or turn on iCloud Sync. The app does not automatically send your health records, app usage, or diagnostic information to the developer. It does not collect advertising identifiers or precise location, track you across other companies’ apps or websites, or sell or rent personal information.

When you open Privacy Policy or Support: These web pages are hosted by GitHub Pages. Opening either page, inside EkAyu or in a web browser, connects to GitHub. GitHub receives and records your IP address—the internet address used by your connection—for security purposes. This happens even when you are not signed in to GitHub. GitHub performs this recording; EkAyu itself does not keep an IP address log.

Opening these pages does not send your profiles, health details, photos, or report attachments to GitHub. For more about how GitHub handles information from website visitors, see GitHub’s Privacy Statement.

The app does not include advertising or analytics services. It uses FactoryKit as a local software dependency for app configuration; that dependency does not receive app data.

4. Storage, optional iCloud Sync, and security

Profiles, health details, report metadata, photos, and report attachments are stored in the app’s private storage on your Apple device. EkAyu applies iOS file protection to its stored health information and excludes its health-data store from ordinary device backups. Access is also protected by your device passcode and, when you enable the optional app lock in EkAyu, Face ID, Touch ID, or your device passcode, depending on your device.

iCloud Sync is optional and off unless you turn it on. When it is on, your EkAyu data is kept in your own private iCloud account so it can appear on your other devices signed in to the same Apple Account. It is tied to your Apple Account; the developer cannot see it, and it is never sent to an EkAyu server or shared with anyone else. Apple stores it as part of your iCloud account under its own privacy policy.

EkAyu encrypts your health information on your device before it is stored in iCloud. This covers profile details, medical conditions, medications, allergies, report details, photos, and attachments. A few technical details that keep your devices in step, such as when a record was created, are not encrypted.

When you first open EkAyu on a device, it checks whether your iCloud account already has EkAyu profiles so it can offer to turn on iCloud Sync. Your records are not copied to the device, and nothing is uploaded, unless you agree.

iCloud Sync is not a backup: edits and deletions on one device also apply to your other devices. Turning it off stops syncing on that device and keeps your data there. You can remove EkAyu’s data from iCloud at any time with Settings → Delete Data from iCloud. This also turns off iCloud Sync on the device you are using, and your data on that device stays. Before you do, turn off iCloud Sync on your other devices, or they will upload their copies again.

No security method is guaranteed to prevent every possible loss or unauthorized access. You are responsible for maintaining control of your device and passcode.

5. Device access and permissions

EkAyu uses protected device features only when you choose an action that needs them:

Camera permission: to capture a profile photo or medical report attachment.
Photos and files: Apple’s system pickers give EkAyu access only to the images or documents you select; EkAyu does not request broad access to your library.
Device authentication: to authenticate you when the optional app lock is enabled. EkAyu uses the authentication method available on your device, such as Face ID, Touch ID, or the device passcode.

You can manage system permissions in the iOS Settings app. Disabling a permission may make its related feature unavailable, but does not send data to the developer.

6. Sharing and disclosure

EkAyu shares your health information when you use Apple’s sharing interface and choose a destination, such as Messages, Mail, AirDrop, or another installed app.

Sharing from a report’s details screen: EkAyu supplies the attachments being shared along with the report title and a text summary. The summary contains the report title, type, date and time, and any doctor or provider, facility, and notes you have entered. The notes are included in full. These details also accompany sharing when you select only some of the report’s attachments. The receiving app determines whether it includes the supplied title and summary.

Sharing from an individual attachment’s preview: EkAyu supplies only that file, without adding the report title or summary. The file may itself contain personal or medical information.

Review the attachments, report details, notes, and destination before sharing. Sharing a report does not automatically share the entire profile. The recipient or selected service controls its copy and handles it under its own terms and privacy policy.

We may disclose information if you voluntarily send it to us, or if disclosure is required to comply with applicable law. Because the developer does not receive your in-app health information, we cannot access or disclose it from an EkAyu server.

7. Optional support communications

If you choose Settings → Feedback/Request Feature, EkAyu opens your mail app with the app version, build number, device type (iPhone or iPad), and operating-system version included in a draft. Nothing is sent unless you choose to send the email. If sent, we receive the sender address, message, and included diagnostic details and use them only to respond, troubleshoot, and improve EkAyu. Do not include medical records or other sensitive health information in support messages.

8. Retention, deletion, and your choices

Information entered in EkAyu remains in the app until you delete it, delete the related profile or report, use Settings → Delete All App Data, or remove the app. With iCloud Sync on, deleting a profile or report in EkAyu also deletes it from iCloud and your other devices. Delete All App Data removes data from that device only and turns off iCloud Sync on it; to remove the iCloud copy, turn off iCloud Sync on your other devices and then use Settings → Delete Data from iCloud. Removing the app deletes its data from that device only; anything still in your iCloud can return if you reinstall and turn iCloud Sync back on. The developer cannot restore deleted data because we do not keep a server or backup copy.

Support communications are retained only as long as reasonably necessary to address the request, maintain support records, protect against abuse, or meet legal obligations. You may ask us to delete a support communication using the contact method below. We may need enough information to identify the communication, and legal exceptions may apply.

9. Children’s privacy

EkAyu is not directed to children and does not knowingly collect personal information from children through an online service. A parent or guardian may use the app to keep a child’s information locally on the parent’s or guardian’s device. Only enter another person’s information when you are authorized to do so.

10. Health and medical notice

EkAyu is an organizational tool, not a healthcare provider, emergency service, diagnostic tool, or substitute for professional medical advice. The app does not connect to HealthKit and does not use health information for advertising, marketing, data mining, or sale.

11. International use

EkAyu processes your health records on your device. If you turn on iCloud Sync, open our GitHub-hosted web pages, send support email, or share information with another service, the relevant provider may process the information it receives in other countries under its own privacy practices.

12. Changes to this policy

We may update this policy if EkAyu’s features, data practices, or legal obligations change. The effective date at the top will be revised when changes are published. Material changes will be communicated through the app or its App Store listing when appropriate.

13. Contact

For privacy questions or requests, email the developer at ekayuapp@gmail.com. Do not include health information, report attachments, credentials, or other sensitive personal data in your message.

Visit EkAyu Support