Privacy Policy

Last Updated: October 18, 2026

RheumCompanion is built to keep your health record on your own phone. This Privacy Policy explains what stays on your device, what the RheumCompanion mobile application (the "App") and this website send over the internet, who receives it, and why. RheumCompanion is published by Wickersham Development Group, LLC ("we", "us").

1. What stays on your device

Everything you log in the App stays on your device. That includes symptom logs, pain, fatigue and stiffness scores, flare notes, your medication list and infusion dates, lab results, assessments, reminders, chat history and any profile details you enter. We do not run servers that receive or store this information, and we never see it.

• No account is required. If the App asks for profile details such as a name, ZIP code or your conditions, they are saved only on your device and are not sent to us.
• Your record is kept in the App's private storage on your device and is protected by your device's own security, such as your passcode and the device's built-in encryption. The App does not add a separate layer of encryption.
• The App keeps a small on-device record of when it was opened, along with a random identifier. This record never leaves your device and is not used for advertising.
• Reminders are scheduled as notifications on your device. They are not sent through our servers.
• Reports and backups are created on your device. They leave it only when you share or save one yourself, to the place you choose.
• You can delete everything by clearing the App's data in your device settings or by uninstalling the App. We do not keep a copy, so data that is deleted cannot be recovered by us.

2. What the App sends, and to whom

Some features need an internet connection. When you use them, the App sends the minimum needed for that feature over an encrypted (HTTPS) connection. These requests never include your name, email address or account details. As with any internet request, the receiving service can see your device's IP address.

• RheumBot and drug interaction explanations (Google Gemini, via our Cloudflare proxy). When you ask RheumBot a question, the App sends your question, the earlier messages in that conversation and reference excerpts the App has gathered. When the interaction checker explains a result, it sends the names of the drugs being compared. These requests pass through a proxy we run on Cloudflare, Inc., which forwards them to Google LLC's Gemini API. Our proxy does not store or log what you ask. It uses your IP address briefly, in memory, to limit how many requests one device can send. Google processes these requests under its Gemini API terms and privacy policy, which may include keeping them for a limited time. Please don't type your name or other identifying details into RheumBot.
• Medication reference and interaction checks (OpenFDA and the U.S. National Library of Medicine's RxNav). The App sends drug names, which can include medications from your list when you check them for interactions. It sends nothing else.
• Research articles and clinical trials (PubMed and ClinicalTrials.gov). The App sends search terms such as a condition or drug name.
• Subscriptions (Apple, Google and RevenueCat). Payments are handled entirely by the Apple App Store or Google Play. We never see your card number or billing address. We use RevenueCat, Inc. to check whether your subscription or free trial is active. To do this, the RevenueCat software in the App sends RevenueCat:
  • a random app user ID that is not linked to your name or email
  • your store purchase and transaction details
  • basic technical information such as device type, operating system and app version
  • diagnostic information about the subscription service
  This information is used only to provide and support your subscription.

We do not use advertising, ad identifiers, third-party analytics or tracking tools, and we do not sell or share your information for advertising.

3. This website

www.rheumcompanion.com is a static website hosted on GitHub Pages. It sets no cookies and uses no analytics or advertising tools. Like any web host, GitHub receives standard request information such as your IP address when you visit. The site's fonts are loaded from Google Fonts, so Google also receives that request. Links to the App Store, Google Play and Amazon take you to sites with their own privacy policies.

4. Third-party privacy policies

• RevenueCat privacy policy
• Cloudflare privacy policy
• Google privacy policy (covers the Gemini API, Google Play and Google Fonts)
• Apple privacy policy
• U.S. National Library of Medicine web policies (PubMed, RxNav and ClinicalTrials.gov)
• OpenFDA terms
• GitHub privacy statement

5. Your choices

• Your own tracking (symptoms, flares, medications, labs and reports) works without sending anything. Only the lookup features connect to the internet: RheumBot, the medication reference, the interaction checker, research articles in the disease encyclopedia and the clinical trial finder. Subscription checks also connect.
• To delete your record, clear the App's data or uninstall the App.
• To manage or cancel a subscription, use your subscription settings in the App Store or Google Play.
• For a question or request about subscription records held by RevenueCat, contact us using the details below and we will help.

6. Children's privacy

The App is intended for adults and is not directed at children under 18. We do not knowingly collect personal information from children.

7. Medical information

RheumCompanion is a personal health record and education tool. It is not a medical device and does not provide medical advice, diagnosis or treatment.

8. Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last Updated" date.

9. Contact us

If you have any questions or requests about this Privacy Policy, please contact the developer:

Wickersham Development Group, LLC
Email: penn@wickershamdevgrp.com