Privacy Policy

Last updated: May 23, 2026

1. Who We Are

MyPSA is developed and maintained by Sandro Gaspar, an independent developer. The app helps patients track their PSA (Prostate-Specific Antigen) values over time and provides educational information about prostate health.

Contact: mypsatrackingapp@gmail.com

2. Data We Collect

We collect only the information you actively provide:

• Account data: email address and full name (used to create your personal account)
• Health data: PSA values, dates, lab results, and clinical information you enter manually or via camera scan
• Profile data: birth year, ethnicity, family history, and other clinical fields you optionally complete
• Feedback: messages you voluntarily submit via the in-app feedback form

3. Camera Permission

MyPSA requests access to your device camera solely to allow you to photograph printed PSA lab reports. AI then extracts the numerical values automatically. Photos are processed in real time and are never stored on our servers. You may also choose to import images from your photo library instead.

4. How Your Data Is Stored

All your personal and health data is stored in a secure, personal database hosted by Supabase (a GDPR-compliant infrastructure provider based in the EU). Each user account is isolated — no one else can access your data, including us.

Data is encrypted at rest and in transit using industry-standard TLS/SSL.

5. How We Use Your Data

• To provide the PSA tracking, visualisation, and risk assessment features
• To allow you to generate and share PDF reports with your doctor
• To display personalised educational content based on your profile

We do not use your health data for advertising, profiling, or any purpose other than providing the app's features to you.

6. Third-Party Services

• Supabase — secure database and authentication (supabase.com/privacy)
• RevenueCat — subscription management; processes only purchase metadata, not health data (revenuecat.com/privacy)
• Anthropic Claude AI — used to extract PSA values from lab report images. Images are sent to Anthropic's API solely for this purpose and are not stored or used for training (anthropic.com/privacy)
• Expo / EAS — app delivery infrastructure (expo.dev/privacy)

7. Data Sharing

We do not sell, rent, or share your personal or health data with any third party for commercial purposes. The only sharing that occurs is:

• With the third-party services listed above, strictly to operate the app
• With your doctor, when you deliberately choose to share a PDF report

8. Your Rights (GDPR)

If you are based in the European Union, you have the right to:

• Access the data we hold about you
• Correct inaccurate data
• Delete your account and all associated data
• Export your data in a portable format
• Withdraw consent at any time

To exercise any of these rights, email us at mypsatrackingapp@gmail.com. We will respond within 30 days.

9. Data Retention

Your data is retained for as long as you maintain an active account. If you delete your account, all associated data is permanently removed within 30 days.

10. Children's Privacy

MyPSA is intended for adult users only (18+). We do not knowingly collect data from children under 13. If you believe a child has provided us with personal information, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via the app or by email. The "Last updated" date at the top of this page will always reflect the most recent version.

---

12. Account Deletion

You can request the deletion of your account and all associated data at any time. To do so:

• In-app: Go to Profile → Delete Account
• By email: Send a request to mypsatrackingapp@gmail.com

All personal data, health records, and account information will be permanently deleted within 30 days of the request.