InjuryLog Privacy Policy

Effective date: 2026-04-24 · Last updated: 2026-04-24

Short version: InjuryLog stores everything you enter — daily logs, pain data, functional limitations, medical records, photos, receipts, expenses, communications — only on your device. We have no servers and no analytics. We never see your claim file. The only network communication the app performs is with Apple's StoreKit servers to verify your subscription status.

1. Who we are

InjuryLog is published by an independent iOS developer (Apple Developer Team ID ZM8LF8494F). For any privacy-related question, write to captainlongevity@gmail.com.

2. Information we do not collect

We do not collect, transmit, store on a server, sell, share, or analyze:

Your daily impact logs, pain levels, sleep data, mood, medication notes, or activity notes
Your injury descriptions, body-map data, functional limitations, or medical appointments
Your photos, receipts, or progression images
Your expenses, missed-work records, or lost-wages calculations
Your communications log entries (contact names, call/email summaries, screenshots you attach)
Your name, email, phone, insurance claim number, case number, or any account identifier
Device identifiers (IDFA, IDFV) for advertising or tracking purposes
Location data
Crash reports or analytics events sent to any third party

3. Information stored on your device

All data you enter is stored locally on your iOS device using Apple's SwiftData framework. This data is included in your iCloud or iTunes device backup if you have device backup enabled. We do not have access to your device backups; only Apple does, under their published privacy terms.

4. On-device processing (Pro features)

Several Pro features process data locally on your device only:

Attorney evidence PDF is rendered on-device using Apple's PDFKit. Your logs, photos, and records are assembled into a PDF locally; nothing is uploaded during generation.
Injury progression photos and comparison views are rendered on-device only.
Charts are computed locally using Swift Charts from your log data.
App Lock uses Apple's LocalAuthentication framework. Your Face ID or Touch ID biometric data never leaves Apple's Secure Enclave; the app only receives a success or failure signal.
Reminders (daily check-in, upcoming appointment) are scheduled via Apple's UserNotifications framework and fire locally on your device. No remote push servers are involved.

5. Subscriptions and StoreKit

InjuryLog offers an optional Pro subscription via Apple's StoreKit 2. When you subscribe, restore a purchase, or when the app verifies your entitlement, your device communicates directly with Apple's servers. InjuryLog receives only the entitlement status (active or inactive) and a purchase identifier. We do not see your Apple ID, payment method, billing address, or transaction history. Apple's handling of subscription information is governed by Apple's Privacy Policy.

6. Permissions the app requests

Camera — only when you tap "Take photo" to document injuries, medical records, or receipts.
Photo Library — only when you tap "Import photo".
Face ID — only after you enable App Lock in Settings (Pro).
Notifications — only after you enable daily check-in or appointment reminders. Notifications use generic wording (e.g., "How are you feeling today?") and never name the injury or claim.

You can revoke any of these permissions at any time in iOS Settings > InjuryLog.

7. No legal or medical advice

InjuryLog is a personal documentation tool. It does not provide legal or medical advice, does not diagnose injuries, does not recommend treatment, does not appraise damages, does not submit claims on your behalf, and does not connect to any insurance carrier, law firm, medical provider, or case-management system. The content of the evidence PDF is generated entirely from your own entries.

8. Children's privacy

InjuryLog is intended for adult claimants and is not directed to children under 13. We do not knowingly collect any information from anyone, including children. Records entered about a minor (e.g., in a family-vehicle accident) are entered by the adult user and remain on that user's device.

9. Data retention and deletion

Because all data is stored only on your device, you control retention completely. To delete individual records, use the app's delete actions. To delete everything, delete the app from your device. There is no remote copy for us to delete.

10. International users

The app does not transfer your data internationally because it does not transfer your data anywhere. The app is published in English and is primarily marketed in North America.

11. Changes to this policy

If we ever change how the app handles data — for example, if a future version adds an opt-in cloud backup feature — we will update this policy and surface the change in the app before you can use that feature. The "Last updated" date at the top of this page reflects the most recent revision.

12. Contact

Privacy questions: captainlongevity@gmail.com