Bitbit MD privacy policy

Effective date: TODO (owner): effective date

This policy covers the Bitbit MD Android app (app id com.bitbitmd.app) and this website. The app is in testing and is not yet released.

Who we are

Bitbit MD is made by TODO (owner): legal name of the maker, TODO (owner): address. In this policy, "we" means the maker.

Who holds patient records

• The doctor keeps her patients' records in the app, on her own devices.
• The doctor is the data controller for those records under the Philippine Data Privacy Act (Republic Act 10173).
• The doctor gives her patients her own privacy notice.
• We run no server today. We are not given patient records and we hold none.

Where the app stores data

• Records are kept in an encrypted database on the doctor's own devices: her tablet and her secretary's phone.
• Each device holds a full copy. The two devices keep in step directly with each other over the clinic's Wi-Fi or hotspot when they are near each other. This does not pass through any server of ours.
• Backups are stored in the doctor's own Google Drive, as described below.

Google user data

What the app accesses. The doctor signs in with her own Google account. The app asks for one permission only: https://www.googleapis.com/auth/drive.appdata. This gives the app access to its own hidden folder in her Google Drive. The app cannot see, open or change her other Drive files.

How the app uses it. The app uses this folder only to store its encrypted backups and to read them back, for example to restore records on a new device.

How it is stored. Each backup is encrypted on the device before it is uploaded. The backups stay in the doctor's own Google Drive. We do not receive a copy.

How it is shared. Nothing received from Google is sold, used for ads, or shared with anyone. It is not used for any purpose other than the backups described here.

Bitbit MD's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Ads, analytics and tracking

The app has no ads, no analytics and no tracking.

Removing data

• The doctor can sign out of Google in the app.
• She can remove the app's backup folder from her Google Drive. In Google Drive, open Settings, then "Manage apps", find Bitbit MD and choose to delete its hidden app data.
• Uninstalling the app removes the copy of the records on that device.

Planned change

We plan to start a relay server from about January 2027. It will forward sealed, encrypted bundles between a doctor's own devices. This is planned, not running today. When it starts, we will update this policy before it is used.

Changes to this policy

If this policy changes, we will post the new version on this page and change the effective date.

Contact

Privacy questions: TODO (owner): contact email for privacy questions

Patients with questions about their own records should contact their doctor, who is the data controller.