Lusog Privacy Policy

Effective date: 19 August 2026

Last updated: 19 August 2026

Lusog ("the app") is developed by Krafftd ("we", "us"). This policy explains what information the app handles and what happens to it.

The short version: your health records never leave your phone, and we have no way to receive them.

That is not a promise about our intentions. Lusog does not request the Android INTERNET permission, so the operating system itself prevents the app from making any network connection at all. We operate no servers for this app. There is no account, no sign-up, and no sync. Even if we wanted your records, we could not get them.

Information the app stores

Everything you enter is saved only on your device, in the app's private storage, which other apps cannot read. This includes:

• Blood pressure and vital sign readings — values, dates, arm, body position, timing relative to medication, and context tags you select
• Medications — names, strengths, doses, schedules, reminder settings, stock counts, and your record of which doses you took or skipped
• Clinical records — diagnoses, symptoms, laboratory results, procedures, allergies, and immunisations, each marked with whether a clinician recorded it or you did
• Doctors and appointments — names, specialisations, clinics, schedules, contact details you choose to save
• Documents — photos and files you attach to any record, such as prescriptions, laboratory reports, and receipts
• Your health profile — name, date of birth, blood type, height, and the emergency contact and emergency card details you fill in
• App settings — reminder preferences, lock settings, and display options

We never see any of this. None of it is transmitted to us or to anyone else.

Health data

Lusog is a personal health record. Much of what it stores is sensitive health information under the Data Privacy Act of 2012 (RA 10173) and equivalent laws elsewhere.

We handle that by not handling it: the data stays in one place, on your device, under your control. There is no analytics pipeline it flows into, no crash reporter that might capture it, no backup service it silently copies to, and no advertising identifier associated with it.

Lusog does not diagnose, treat, or give medical advice. It records what you and your clinicians tell it, and shows it back to you. It never recommends starting, stopping, or changing a medication or a dose. It is not a medical device and is not a substitute for your doctor, nurse, or pharmacist.

Camera, photos, and files

The app requests camera access so you can photograph a prescription, laboratory result, or other document and attach it to a record. It requests access to photos and files so you can attach ones you already have.

These are used only at the moment you choose to attach something. Attached documents are copied into the app's private storage on your device and are never uploaded. Deleting a record or its attachment deletes the file. You can use every other part of Lusog without granting either permission.

Reminders and notifications

Medication reminders and appointment reminders are local notifications, scheduled by your phone's own alarm service. Nothing is sent to or received from any server, and no external push notification service is involved.

Lusog requests permission to schedule exact alarms and, for medications you set to alarm style, to show a full-screen notification. These exist so an 8:00 dose reminder arrives at 8:00 and can wake you the way a clock alarm does. They are used for nothing else.

The app can also ask to be exempted from battery optimisation. This is a request to your phone, not to us, and it exists because phones otherwise silently stop delivering scheduled medication reminders.

Your PIN and biometric lock

If you set an app lock, your PIN is stored as a salted cryptographic hash in the Android Keystore, not as the PIN itself. Biometric unlock is handled entirely by Android's own BiometricPrompt: your fingerprint or face data never reaches the app, and Lusog receives only a yes-or-no answer.

Neither the PIN nor any biometric data leaves your device.

Data leaving your device

Data leaves your device only when you deliberately send it. Lusog can:

• Export a backup file of your records, and restore from one
• Generate a PDF report — for example, a summary to hand to your doctor

When you export or share, Android's own share sheet asks which app to send it to. Where it goes from there — email, messaging, a cloud drive, a printer — is your choice, and is governed by that service's privacy policy, not this one. A backup file and a PDF report both contain your health information, so treat them the way you would treat a paper medical record.

Analytics, advertising, and third parties

Lusog contains no analytics, no crash reporting, no advertising, and no third-party trackers. We do not sell, rent, or share your information, because we never receive it.

Should this ever change, it would require adding the INTERNET permission — a visible change to the app's permissions — and we would update this policy and the Play Store listing before that version shipped.

Data retention and deletion

Because everything is stored locally, deletion is immediate and entirely yours:

• Deleting a record deletes it and any documents attached to it.
• Clearing the app's data from Android Settings erases everything.
• Uninstalling Lusog permanently deletes all of it.

We cannot recover any of it for you afterwards, because we never had it. If your history matters to you, export a backup before you uninstall, change phones, or reset your device.

Children

Lusog is intended for adults managing their own health records or those of a family member. It is not directed at children and collects no personal information from anyone, children included. A parent or carer may use it to keep records on a child's behalf; that data is subject to this policy like any other, and stays on the device.

Your rights

For users in the Philippines, we respect your rights under the Data Privacy Act of 2012 (RA 10173), including the rights to be informed, to access, to correct, and to erase your personal data.

Because your data never reaches us, you exercise all of these directly in the app, on your own device, as described above. There is no request to file with us and no waiting period. If you have a question about this policy, contact us using the details below.

Changes to this policy

If a future version of Lusog changes how data is handled — for example, if optional encrypted cloud backup is ever added — we will update this policy, change the "Last updated" date, and ask for your explicit consent inside the app before anything leaves your device.

Contact

Krafftd Email: hello@krafftd.com