Ronja — Privacy Policy

Ronja (the “App”), operated by Yescomet, keeps the vaccination and medical records of a family and works out what is due next. It handles health data, which is a special category under Article 9 of the GDPR, so this policy says plainly what leaves your phone and what does not. There are no accounts, no sign-in, no tracking across apps or websites, and nothing is sold to anyone.

What stays on the phone

Everything you enter lives in a database on your device: the names of your family members, their photos, document numbers, blood type, allergies, regular medicines, and every record you add. Names and photos of people are never sent to us.

Reminders are worked out on the phone and delivered as local notifications. We do not operate a push service for them and therefore never learn what you are reminded about or when.

What is sent to us

The App has a server side, at health.yescomet.com, which it needs for two things: the catalogue of schedules it keeps up to date, and reading documents from photos. Sent to it:

• An installation identifier — a random value created on first launch, not linked to you, your phone’s advertising identifier or any account. Alongside it: the country and interface language of the installation.
• For each family member — a random identifier, date of birth, sex and role in the family (parent, child). This is what decides which schedule applies and at which ages, and it is the whole of it: no name, no document number, no photo.
• Records you add — the type (vaccination, check-up, lab test, study, operation), the date, the title as it is written, and your notes if you wrote any. They are stored under the member’s random identifier so that they survive a lost phone.
• Photos of documents you choose to scan — see the next section.

Photos of documents, and the AI that reads them

When you photograph a record book, a lab form or a discharge summary, the images are uploaded to our server and stored there, and their text is read by Anthropic’s Claude models through the Anthropic API, which acts as our processor for that step. We send the pages, the date of birth and sex of the person the document belongs to (so that the model can notice a document that cannot be theirs), and nothing else about you. Anthropic does not use data sent through its API to train its models.

We keep the images and the recognition result so that the same photo does not have to be read twice and so that a mistake can be corrected afterwards. You can see every uploaded document in the App (a family member’s profile → Documents), delete a file, delete the records read from it, or delete both. Deleting is immediate and removes the file from the server as well.

Writing to us

If you use “Write to us”, the message is delivered to the developer through a Telegram bot. What goes with it: your text, the contact you chose to leave (optional), and — only if you leave that switch on — the app version, iOS version, device model and interface language. Your profiles, photos and medical records are not attached, and the text of the message is not stored in our database or written to our logs.

Suggestion cards

The App can show cards suggesting a clinic or a pharmacy. Without your consent they are chosen by context only. If you turn on personalised suggestions in Settings, the choice also uses the country, the interface language and the age group of the profile. Your medical records are never used for this, and nothing about you is shared with advertisers; we count how many times a card was shown and opened, with no identifier of you attached. You can turn this off at any time in Settings.

Your rights

You can see everything the App holds about your family inside the App, correct any record, and delete records one at a time, a whole document, the history of one family member, or everything at once. “Delete all data” in Settings wipes the database on the phone and the uploaded photos on the server, and returns the App to the state it was in after installation.

Under the GDPR you also have the right of access, rectification, erasure, portability and objection, and the right to complain to a supervisory authority. Write to us and we will do it; because there are no accounts, please send the installation identifier shown in Settings → About so that we can find the right data.

Children

Ronja is used by adults to keep the records of their family, children included. The App is not directed at children and we do not knowingly collect data from a child directly: the records of a child are entered by their parent or guardian.

Not medical advice

Ronja keeps track of what is written on your documents. Dates and intervals come from national schedules and manufacturers’ instructions and may differ for a particular product or person. The App gives no diagnoses and does not replace a doctor.

Changes

If this policy changes in a way that affects what leaves your phone, the change will be described here with a new date, and in the release notes of the version that introduces it.

Contact

Questions, requests about your data and reports: [email protected].