1. Who we are
SCD Assistant (“SCD Assistant”, “we”, “us” or “our”) is an app that helps people living with sickle cell disease manage their care between clinic visits, and helps the people who care for them respond when they need help. This policy applies to the SCD Assistant apps for Android and iOS, the web app at app.scd-assistant.davidodejobi.com, and this website (together, the “Service”).
We are the controller of the personal information processed through the Service. You can contact us at scd.assistant@davidodejobi.com.
2. Information we collect
2.1 Information you provide
- Account information: your email address, first name, account role (patient or guardian) and password. Passwords are stored only as a secure one-way hash.
- Health information: pain and symptom entries, medicines, dose schedules, and the doses you record as taken or missed.
- Family and guardian information: the names and phone numbers or app accounts of family contacts you add, guardian links, and invite codes.
- Alerts: alerts created when you ask for help or when a rule in the app is triggered, and guardians’ replies to them.
- Questions: the text of questions you ask in the Ask feature, and the answers provided.
2.2 Information collected automatically
- Notification tokens: an identifier for each phone or browser you sign in on, used to deliver reminders and alerts.
- Server logs: when your device connects to our server, our hosting provider records technical information such as your IP address, the time and the request made. These logs are used to operate and secure the Service.
2.3 Information we do not collect
We do not collect your precise location or your device’s contact list, and the Service contains no advertising or third-party analytics. When you call or text someone from Get help, the call or message is handled by your device’s own Phone or Messages app and is not sent to us.
3. How we use your information
We use personal information only to provide and protect the Service, specifically to:
- create and manage your account and sign you in;
- store your diary, medicines and dose history and show them to you;
- send medicine reminders and deliver alerts to the guardians you have linked;
- answer questions in Ask using published clinical guidelines;
- keep the Service secure, prevent misuse and fix problems; and
- respond to your requests and messages.
We do not sell personal information, use it for advertising, or use it to make decisions that have legal or similarly significant effects on you.
4. Legal bases for processing
Where data protection law requires a legal basis (for example the EU and UK GDPR or the Nigeria Data Protection Act 2023), we rely on:
- Contract: to provide the Service you signed up for, including your account, reminders and alerts.
- Consent: for health information, which you choose to enter. You can withdraw consent at any time by deleting the information or your account. Withdrawal does not affect processing that took place before it.
- Legitimate interests: to keep the Service secure and working, where those interests are not overridden by your rights.
5. How we share your information
We share personal information only as described below.
- Guardians you choose: people you link with an invite code can see your alerts and what triggered them. They cannot see your diary or medicines.
- Service providers: companies that process information on our behalf to run the Service, under their terms of service and data processing terms, which limit how they may use it:
| Provider | Purpose | Information |
|---|---|---|
| Render | Server hosting (Frankfurt, Germany) | All Service data in transit; server logs |
| Neon | Database hosting (Frankfurt, Germany) | Account, health, family and alert data |
| Google Firebase Cloud Messaging | Delivering notifications | Notification tokens and notification content |
| OpenRouter and the language-model provider it routes to | Writing answers in Ask | The text of your question and the guideline passages used to answer it |
| Cloudflare | Hosting this website and the web app | Technical connection data |
Please do not include your name or other identifying details in questions you ask in Ask.
We may also disclose information if required by law, to protect the rights, safety or property of our users or others, or in connection with a transfer of the Service, in which case this policy will continue to apply to your information.
6. International transfers
Your account and health data are stored in the European Union (Frankfurt, Germany). Some service providers, including Google and the language-model providers used by Ask, may process information in other countries, including the United States. Where these providers offer safeguards for such transfers, such as the European Commission’s Standard Contractual Clauses, we rely on them.
7. Data retention
We keep your personal information for as long as your account exists. When you delete your account, your information is deleted from our live database straight away. Copies in our database provider’s backups expire automatically within 30 days. Server logs are kept by our hosting provider for a limited period. Data stored on your device is removed when you log out or delete your account in the app, and uninstalling the app removes anything left. See Delete your account for details.
8. Security
All communication between the apps and our server is encrypted in transit using HTTPS. Passwords are stored as one-way hashes, and sign-in tokens can be revoked by signing out everywhere. No method of transmission or storage is completely secure, but we take reasonable measures to protect your information.
9. Your rights
Depending on where you live, you may have the right to:
- access the personal information we hold about you and receive a copy of it;
- correct information that is inaccurate or incomplete;
- delete your information, which you can do yourself in Settings › Delete account;
- receive your information in a portable format;
- object to or restrict certain processing; and
- withdraw your consent at any time.
To exercise these rights, email scd.assistant@davidodejobi.com. We will respond within 30 days and may ask you to confirm your identity. You also have the right to complain to the data protection authority where you live.
10. Children
The Service is intended for people aged 13 and over. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, contact us and we will delete it.
11. Health information
SCD Assistant is not a medical device and does not provide medical diagnosis or treatment. Information in the Service, including answers in Ask, is general information drawn from published guidelines and does not replace advice from your care team. In an emergency, call your local emergency number.
12. Changes to this policy
We may update this policy from time to time. If we make material changes, such as collecting new types of information or using new service providers, we will update this page and the effective date above before the change takes effect, and tell you in the app where appropriate.
13. Contact us
If you have any questions about this policy or how your information is handled, contact us at scd.assistant@davidodejobi.com.