Privacy

What data we keep

• Account — name, email and an encrypted version of the password.
• Medication — the medicines you take, doses, times, how much you have at home and the record of every dose.
• Symptom diary — the daily answers about tremor, stiffness, falls, mood, sleep and others, plus any notes you write.
• Exercise — the plan of activities and what was completed.
• Appointments — dates, the doctor's name and the appointment preparation answers.
• Technical — the address of the devices where you turned notifications on, and the record of password recovery requests.

We collect nothing you have not written. There are no trackers, no advertising and no third-party analytics.

Why we keep it

To remind you of your doses, count what you have at home, and turn your records into a report you can show your doctor. That is all.

The legal basis is your explicit consent (article 9(2)(a) of the GDPR), given when you create the account. You can withdraw it at any time by deleting the account.

Who has access

Nobody but you — and whoever runs the server technically.

There is an administration panel used to keep the app running. It shows counts and dates: how many doses you recorded, how many days you filled in the diary, when you last used the app. It gives no access to the content — not to what you wrote in the diary, not to the symptom values, not to the appointment preparation answers.

Your clinical records are not sold, shared or analysed for any other purpose. We do not send them to your doctor: you are the one who decides to show the report.

To work, the app depends on these services:

• Hetzner (Germany) — hosts the server and the database.
• Cloudflare — routes the traffic; it sees the IP addresses of visits.
• Google, Apple or Mozilla — deliver the notifications to your phone. They receive the alert text — which includes the name of the medicine.
• SMTP2GO — sends the password recovery emails.

The notifications deserve a frank warning: for «Time for Sinemet» to reach you, that text passes through Google's or Apple's servers. If you would rather it did not, turn the alerts off in Settings — the app keeps working.

For how long

For as long as you have an account. Old records are the value of the app — it is the difference between «I have been feeling worse» and showing the neurologist six months of data.

When you delete the account, we delete everything immediately and permanently. We keep no copy.

Your rights

• See and take — download everything as JSON, in Settings.
• Correct — any record can be changed inside the app.
• Delete — deletes the account and all the data, in Settings.
• Withdraw consent — it is the same as deleting the account.
• Complain — you can complain to the CNPD, the Portuguese data protection authority.

Security

The connection is always encrypted (HTTPS). The password is stored with scrypt, never in readable text. Recovery requests keep only a cryptographic digest of the code, valid for one hour and single use. Changing the password ends the sessions on every device.

This is not a medical device

Parkinday.com organises records that you make yourself. It does not diagnose, does not suggest doses and does not replace clinical assessment. Always talk to your doctor before changing any treatment.

Contact

For any question about your data: [email protected].