Last updated on October 1st, 2026.
Welcome to Lupus Leaf App ("Lupus Leaf," "we," "our," or "us"). We respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, store, and protect information when you access or use our application and related services (collectively, the "App").
Please read this Privacy Policy carefully. By accessing or using the App, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the App.
1. Information We Collect
a. Personal Information
When you create an account, we may collect personal information necessary to create and manage your account, including:
- Full name
- Email address
- Password or account authentication information
- Account and profile information
We may also collect additional information that you choose to provide after registration when using certain features of the App.
b. Health Information
Lupus Leaf does not require you to provide health or symptom information during account registration. After creating an account, you may voluntarily enter health-related information while using the App, including symptoms, symptom history, triggers, flare-related information, medication information, medication schedules, and other health-related information you choose to provide.
This information may be used to provide features such as symptom and trigger tracking, lupus report generation, AI-powered reports and insights, flare forecasting, medication reminders, and other health-related features available within the App.
When you choose to enter symptoms, triggers, and other health-related information, Lupus Leaf may process that information to generate personalized lupus reports and AI-powered insights based on the information you provide.
We treat health-related information as sensitive information and take reasonable measures to protect it. We do not sell your health information or use it for advertising purposes without your consent.
c. Location Information
If you grant permission, we may collect location information to provide certain features, including flare forecasts and environmental insights. You can control location permissions through your device settings. If you disable location access, certain features may not function correctly.
d. Device and Usage Information
We may automatically collect certain technical and usage information when you use the App, including:
- Device type and model
- Operating system and version
- Unique device or application identifiers
- IP address
- App version
- Crash and diagnostic information
- App usage and interaction information
- Features accessed and general usage patterns
e. Cookies and Similar Technologies
We may use cookies, SDKs, pixels, web beacons, and similar technologies where applicable to maintain functionality, understand how users interact with the App, improve our services, and provide relevant reminders or insights.
2. How We Use Your Information
We may use the information we collect to:
- Provide and maintain the App and its features.
- Create and manage your account.
- Provide personalized symptom and trigger tracking.
- Generate AI-powered reports and health-related insights based on information you provide.
- Provide flare forecasts and environmental insights using permitted location information.
- Provide medication reminders and other notifications.
- Provide community and user interaction features when you choose to use them.
- Respond to customer support requests and inquiries.
- Monitor, analyze, and improve the performance and functionality of the App.
- Detect, prevent, and investigate fraud, abuse, unauthorized access, and security incidents.
- Enforce our Terms and Conditions.
- Comply with applicable laws, regulations, legal processes, and governmental requests.
3. AI-Powered Features
Lupus Leaf may use artificial intelligence and machine-learning technologies to generate reports, insights, forecasts, summaries, reminders, or other personalized content based on information you provide.
Information submitted to AI-powered features may be processed by service providers that assist us in providing these features. We take reasonable steps to require appropriate confidentiality and security protections from service providers that process information on our behalf.
AI-generated content is provided for informational and educational purposes and should not be considered medical advice, diagnosis, or treatment.
4. How We Share Your Information
Data categories, recipients, and purposes
The following describes the personal data that may be sent from the App, the recipient, and the purpose for sending it. We only send the minimum information reasonably required for the selected feature or service.
- Account data (name, email address, account identifier, and authentication information) is sent to Lupus Leaf and our contracted hosting and database providers to create and secure your account, store your data, provide customer support, and maintain the App.
- Health data (symptoms, triggers, notes, medication names and schedules, and related reports) is sent to Lupus Leaf and our hosting/database providers to save your records, generate reports, provide reminders, and deliver the health features you request. When you use an AI report, AI insight, or Lupus Copilot feature, the relevant health information and your request may also be sent to OpenAI for processing and generation of the requested response.
- Location data (latitude, longitude, or approximate location) is sent to Lupus Leaf and, when you request a flare forecast or environmental insight, to OpenWeatherMap to obtain weather information for that feature. Location is collected only after you grant the applicable device permission.
- Device and notification data (device/application identifiers, operating-system details, push-notification token, and notification status) may be sent to Google Firebase Cloud Messaging to deliver medication, account, and other notifications that you enable, and to Lupus Leaf for diagnostics and notification management.
- Email and support data (email address, one-time-password or account recovery details, and the contents of a support request) may be sent to Mailgun to deliver account and support emails and to Lupus Leaf to respond to you.
- Purchase and subscription data (transaction or subscription identifier, product, purchase date, expiration, and renewal status) is received by Lupus Leaf from Apple or Google Play when you buy through their stores. Apple or Google processes payment-card information; Lupus Leaf does not receive your complete payment-card number for those purchases.
- Technical and usage data (IP address, app version, crash and diagnostic details, and feature interactions) may be sent to Lupus Leaf and our hosting, security, and diagnostic providers to operate, secure, troubleshoot, and improve the App.
Permission before transmission or sharing
Before personal data is sent to a third party, we provide a just-in-time notice or other clear disclosure identifying the data, the recipient, and the purpose, and obtain your affirmative permission. Health data is sent to OpenAI only when you choose an AI-powered feature and submit information for that feature. Location is sent only after you allow location access and request a location-based feature. Notifications are sent through Firebase only after you allow notifications. Account, email, and purchase processing may be necessary to provide a feature you request; your account creation, email submission, or purchase action is your affirmative instruction and permission for that disclosed processing, and we disclose it before transmission.
You may withdraw optional permission at any time by turning off the related App or device permission, or by contacting us. Withdrawal does not affect processing already completed lawfully and may prevent us from providing the related feature. We do not sell personal information or health information.
We do not sell or rent your personal information or health information. We may disclose information in the following circumstances:
a. With Your Consent
We may share information with third parties when you specifically request or authorize us to do so.
b. Service Providers
We may use trusted third-party service providers to help us operate and maintain the App. These providers may support services such as hosting, analytics, cloud storage, notifications, authentication, customer support, AI processing, and other technical services.
These service providers may process information on our behalf and are expected to use reasonable safeguards and only process information as necessary to provide their services. We require each third party that receives personal or health information to provide the same or equal level of privacy, confidentiality, security, and data-protection safeguards described in this Privacy Policy, and to use the information only for the disclosed purpose. We do not authorize service providers to sell your information or use it for their own advertising.
c. Aggregated and Anonymized Information
We may use or share aggregated, statistical, or anonymized information that cannot reasonably be used to identify you. Such information may be used for research, analytics, product development, and improving the App and its services.
d. Legal Requirements
We may disclose information if required or permitted by applicable law, regulation, court order, legal process, or governmental authority, or when necessary to protect our rights, users, property, or the safety of others.
e. Business Transfers
If Lupus Leaf or substantially all of its assets are involved in a merger, acquisition, financing, reorganization, sale, or other business transaction, your information may be transferred as part of that transaction, subject to applicable privacy requirements.
5. Subscription and Payment Information
The App may offer paid subscriptions or other in-app purchases. Purchases made through Apple's App Store are processed by Apple, and purchases made through Google Play are processed by Google Play.
We do not directly collect or store your complete Apple payment card, credit card, or banking information for App Store purchases. Apple processes payment information in accordance with Apple's applicable terms and privacy policies.
Similarly, for purchases made through Google Play, payment information is processed by Google through Google Play. We do not directly collect or store your complete payment card, credit card, or banking information used for Google Play purchases.
We may receive limited transaction or subscription-related information necessary to provide and manage your subscription, verify entitlement, provide access to subscription features, maintain our services, process subscription status information, and provide customer support.
The information we receive from Apple or Google may include information such as subscription status, purchase or transaction identifiers, product or subscription information, purchase dates, expiration dates, renewal status, and other information necessary to verify and manage your subscription.
6. Data Security
We use reasonable administrative, technical, and organizational safeguards designed to protect your information against unauthorized access, disclosure, alteration, or destruction.
These safeguards may include access controls, secure servers, encryption where appropriate, authentication mechanisms, and monitoring of our systems.
However, no method of transmission or electronic storage is completely secure. Therefore, we cannot guarantee absolute security of your information.
7. Data Retention
We retain personal information for as long as reasonably necessary to provide our services, maintain your account, comply with legal obligations, resolve disputes, enforce our agreements, and protect our legitimate business interests.
When information is no longer required, we may delete, anonymize, or securely dispose of it in accordance with applicable laws and our internal data retention practices.
8. Your Privacy Rights and Choices
a. Account Information
You may update certain account and profile information through the App's available settings and features.
b. Location Permissions
You can enable or disable location permissions through your device settings. Disabling location access may affect features that require location information.
c. Notifications
You can manage notification permissions through your device settings and, where available, through the App's settings.
d. Access, Correction, and Deletion
Subject to applicable law, you may request access to, correction of, or deletion of your personal information by contacting us at Info@lupusleaf.com.
e. Account Deletion
You may request deletion of your account and associated personal information by contacting us at Info@lupusleaf.com or by using any account deletion functionality provided within the App.
Some information may need to be retained where required by law, necessary to resolve disputes, prevent fraud, enforce agreements, or otherwise permitted by applicable law.
9. Children's Privacy
The App is intended for users aged 18 and older. We do not knowingly collect personal information from children under 18.
If we become aware that we have collected personal information from a child under 18, we will take reasonable steps to delete that information as required by applicable law.
10. Third-Party Services and Links
The App may use or provide access to third-party services, integrations, websites, or platforms. These third parties may have their own privacy policies and terms.
We are not responsible for the privacy practices of third-party services that we do not control. We encourage you to review the privacy policies of any third-party services before providing information to them.
11. Apple App Store
If you download or use Lupus Leaf through Apple's App Store, your use of the App is also subject to Apple's applicable terms and policies.
Apple may collect and process certain information associated with your App Store account, device, purchases, and subscriptions. Such processing is governed by Apple's applicable privacy policies and terms.
12. Google Play Store
If you download or use Lupus Leaf through Google Play, your use of the App is also subject to Google's applicable terms, policies, and privacy practices.
Google may collect and process certain information associated with your Google account, device, purchases, subscriptions, and use of Google Play. Such processing is governed by Google's applicable privacy policies and terms.
Purchases and subscriptions made through Google Play are processed through Google's payment and billing systems. Lupus Leaf does not directly receive or store your complete payment card or banking information for Google Play purchases.
13. International Data Transfers
Your information may be processed or stored in countries other than the country in which you live. Privacy and data protection laws in those countries may differ from the laws in your jurisdiction.
Where required by applicable law, we will take appropriate measures to protect personal information when it is transferred internationally.
14. Do Not Sell or Share My Personal Information
We do not sell your personal information or health information for monetary consideration. We also do not knowingly use sensitive health information for targeted advertising.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our services, technology, legal requirements, or privacy practices.
When we make changes, we will update the "Last updated" date at the top of this page. Continued use of the App after an updated Privacy Policy becomes effective constitutes acknowledgment of the updated policy, to the extent permitted by applicable law.
16. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:
- By email: Info@lupusleaf.com
Thank you for using Lupus Leaf App. We are committed to protecting your privacy and providing a secure and reliable lupus management experience.