Summary. Chronicle is a personal health & wellness tracker. Your data is stored on your device, not with us. We operate no servers, collect no personal data, share or sell nothing, and there are no accounts, ads, analytics, or trackers. If your device's own backup is switched on, a copy may also sit in your own cloud account — see "Device backup" below.

If this ever changes. Everything here describes the current version. If we ever add anything that sends data off your device — sync, a backup of our own, aggregate statistics across users — it will be your choice, off by default, and written here before it reaches you. We will not turn data you have already logged into something that gets sent out without your say-so.

What is stored and where. Everything you log — symptoms, mood, sleep, nutrition, exercise, medications, biometrics, lab results, cognitive tests, menstrual data, a parenting profile about your child(ren), and medical history — is stored locally on your device. It is never sent to us or to any third party, and is deleted when you delete it in-app or uninstall.

Device backup. Your device's own operating-system backup (Android Auto Backup, or iCloud on iOS) may copy this data to your own cloud account so a new or reset phone can restore it. On Android 9+ that backup is encrypted on the device with your lock-screen credential. It goes to your account under your provider's terms — it does not pass through us and we receive nothing from it. You can turn it off in your device settings. Body photos are excluded from cloud backup because of an operating-system size limit; they are included in device-to-device transfer and in the app's own export.

Permissions. None of them is used to collect what you log or to send it to us: usage access (local screen-time), activity/sensors (steps, balance), and notifications/alarms/foreground service (local reminders & measurements). Three deserve more detail:

• Health Connect — reads health data already on your device for insights: sleep, steps, resting heart rate, heart-rate variability, workouts, distance, calories (total and active), blood oxygen and blood pressure. The grant also covers reading while the app is closed, and reading further back than 30 days, because some insights look over a year. The data stays on the device. You grant these in Health Connect and can revoke them there at any time.
• Microphone — voice-analysis and hearing features, and sleep monitoring: if you switch it on, a foreground service keeps the microphone live while you sleep in order to detect snoring. It is off by default, runs only on nights you start it, and shows a persistent notification the whole time it runs. The audio is never saved — it is analysed in memory and discarded, and only a count of snoring minutes is logged.
• Camera and torch — photos you choose or take (body photos, for example), stored locally; and camera-based heart-rate measurement using the rear camera and torch, where frames are processed in memory and discarded. No image is kept and nothing is sent.

Network access. The app also has network access, which comes with Google Play's billing component, included for in-app purchases. It talks to Google Play about a purchase and, like other Google components, may report its own diagnostics to Google. What you log is not sent through it, or anywhere else.

Platform services. Speech features may use the device's speech recognizer, which on some devices/configs may process audio via the system provider (e.g., Google); we never receive the audio. Avoid the speech features if you prefer. Fonts: Rubik is bundled with the app and runtime font fetching is disabled, so the app does not call Google's servers to render text.

Sharing/export happens only when you initiate it, to a destination you choose. Children: Chronicle is intended for adults (18+). It is not directed at children and we do not knowingly collect data from them; the parenting module is for parents logging about their own child, and that data is stored on the device like everything else in the app. Not medical advice — Chronicle is not a medical device.