Privacy Policy

Last updated: 5 August 2026

Dizzin ("the app", "we") helps you track vestibular symptoms. This policy explains what we collect, why, and the control you have. Plain language first; the specifics follow.

The short version

Your health logs live on your device. Episodes, daily check-ins, and the patterns we detect are stored locally and analyzed on your phone.
Sign in with Google. We store your account details on our secure server (email, name, and Google's unique identifier).
Subscription status only. If you buy Dizzin Pro, we store your subscription status and billing metadata (not payment card numbers) so we can recognize your Pro access.
We never sell your data and never use it for advertising.
Pro cloud backup (optional) stores an encrypted copy in your own iCloud (iOS) or Google Drive (Android), not on Dizzin servers.
Anonymous usage data tells us which screens and buttons get used - never what you logged. It is tied to a random app id, not to you, and you can turn it off in Settings.

What we collect

Health and lifestyle data you enter - episode details (time, type, intensity, symptoms), daily check-ins (sleep, sodium, stress, water, exercise, medication adherence, menstrual cycle if you choose), and free-text notes. This is stored locally on your device. It is not transmitted to our servers except when you optionally enable Pro cloud backup to your own cloud account.

Account data (on our server) - when you sign in with Google, Google returns your email, name, and a unique identifier. We store these in PostgreSQL on Railway to recognize your account across devices. Sign-in is required to use the app.

Subscription and purchase data (on our server) - if you subscribe to Dizzin Pro, we store subscription status (active or not), product identifier, app store (Apple or Google), renewal/expiry dates, and related billing events. Payments are processed by Apple or Google; we do not receive or store your card number. RevenueCat helps us validate subscriptions and sends us webhook events, which we store to keep your Pro status accurate.

Approximate location (only if you allow it) - used at the moment you save a check-in to fetch local weather and barometric pressure (a known vestibular trigger). We store the resulting weather/pressure values, not your coordinates, and location is never shared with third parties. You can deny or revoke this permission at any time in your device settings.

Anonymous usage data (on our server) - so we can see which parts of the app help and which get ignored, Dizzin records product-interaction events: app opens, which screens you visit, that a log was saved (never what was in it), which onboarding step you reached, and steps in the upgrade flow. Each event carries only your app version, platform, OS version, and whether the app was on Free or Pro.

These events are tied to a random identifier created on your device when you install the app. It is not your account, your email, or a device id, and we keep no way to connect it to you - the usage records live in a separate table with no link to your account. Uninstalling the app, or deleting your data in Settings, discards that identifier permanently.

We never send anything you have logged: no symptom scores, no notes, no medications, no diagnosis, no dates of your entries. The server also enforces a fixed list of what an event may contain and discards anything else. You can switch this off at any time in Settings → Your data → Share anonymous usage data; collection stops immediately and anything still waiting to be sent is discarded.

What we do NOT do

We do not sell, rent, or trade your data.
We do not use your data for advertising or build advertising profiles.
We do not run pattern detection on our servers - it happens on your device.
We do not store your health logs on our servers.
We do not store payment card numbers.
We do not track you across other apps or websites, and we share nothing with advertising networks or data brokers.
We do not link usage data to your identity.

Third parties

Google Sign-In - required to use the app; governed by Google's privacy policy.
RevenueCat - manages in-app subscriptions and sends us subscription events (not health data). See RevenueCat's privacy policy.
Apple App Store / Google Play - process payments when you subscribe; governed by their respective privacy policies.
Open-Meteo - provides weather/pressure data. We send approximate coordinates to retrieve a forecast; no account or identifying data is sent.
Apple iCloud / Google Drive - only if you enable Pro cloud backup; data stays in your personal cloud account.
Railway - hosts our authentication API and PostgreSQL database for account and subscription records only.

Your rights and controls

Export - Settings → Your data → "Export my data" produces a JSON file of everything you've logged.
Delete - Settings → Your data → "Delete account & data" erases your local data and deletes your server account. This is immediate and irreversible.
Location - manage or revoke at any time in your device settings.
Usage data - Settings → Your data → Share anonymous usage data, off whenever you want.

Depending on where you live (e.g. EEA/UK under GDPR, California under CCPA) you may have additional rights to access, correct, or erase your data; the export and delete tools above satisfy these for the data we hold.

Data retention

How long we keep your data depends on where it lives and whether you keep using Dizzin. We keep each type only for as long as it serves the purpose it was collected for.

Health and lifestyle logs (on your device) - retained on your device for as long as you choose. They remain until you delete them in the app or uninstall Dizzin. Because these logs are never sent to our servers, we hold no server-side copy to retain, and uninstalling the app removes the local database from your device.
Account data (on our server) - your email, name, and Google identifier are retained for as long as your account exists. When you delete your account (Settings → Your data → "Delete account & data", or by emailing us), we permanently remove your account record from our active database immediately. Any residual copies in our encrypted database backups are purged within 30 days.
Subscription and billing metadata (on our server) - retained for the life of your account so we can keep your Pro access accurate, then deleted together with your account on the same schedule above. Apple, Google, and RevenueCat keep their own transaction records under their respective policies, which are outside our control.
Weather and pressure values - stored on your device alongside the check-in they belong to, and removed when you delete that log or uninstall the app. We never store your location coordinates.
Optional Pro cloud backup - lives in your own iCloud or Google Drive and is retained under your control. Deleting it from your cloud account, or turning off backup and removing it, erases that copy. Dizzin keeps no backup on its own servers.
Anonymous usage data - kept for 180 days, then deleted automatically. Because it carries no link to your account, we cannot single out and remove one person's events; switching the setting off stops any further collection.

If you stop using Dizzin without deleting your account, your account and subscription records stay until you ask us to remove them. You can request deletion at any time at support@dizzin.app.

Children

Dizzin is not directed at children under 13 (or the minimum age in your region) and we do not knowingly collect their data.

Medical disclaimer

Dizzin is a self-tracking tool, not a medical device. It does not diagnose, treat, or prevent any condition. The patterns it surfaces are statistical correlations in your own logs, not medical advice. Always consult a qualified clinician about your symptoms.

Changes

We'll update this page and the "last updated" date when our practices change. Material changes will be highlighted in the app when practical.

Contact

Questions about this policy or your data: support@dizzin.app