Privacy Policy

The short version

• Your symptom selections, tracked effects and drug-request drafts stay in your browser (local storage). They are not sent to us or stored on a server.
• We do not ask for your name, HIV status, or contact details to use the tools.
• We use privacy-friendly analytics cookies only after you accept them in the cookie banner. You can decline and still use everything.
• We do not sell your personal information, and we don’t run cross-site advertising trackers.

What we collect — and what we don’t

Stays on your device (not collected by us)

• Tracked symptoms & report data — saved in your browser’s localStorage so your PDF report and tracker persist between visits. Clearing your browser data removes it.
• “Request a medication” drafts — queued locally; only sent onward if a backend is connected in future (and only the drug name/notes you type, plus optional email).
• Cookie choice — a single flag remembering whether you accepted or declined analytics.

Collected only with consent

• Aggregate analytics — if you accept cookies, we may record anonymised, aggregated usage (pages viewed, device type, country-level location) to improve the tool. This uses Google Consent Mode; declining keeps analytics storage switched off.
• Server logs — like all websites, our host may keep standard technical logs (IP address, timestamp, browser) for security and reliability. These are not used to profile you.

Cookies & how to control them

We keep cookies to a minimum:

Change your mind any time: clear this site’s data in your browser settings to reset the cookie banner, or use your browser’s cookie controls to block/delete cookies. Declining analytics does not limit any feature.

Your rights (GDPR & CCPA/CPRA)

Depending on where you live, you have the right to:

• Access a copy of any personal data we hold about you.
• Correct or delete your data (“right to erasure”).
• Object to or restrict processing, and withdraw consent for analytics at any time.
• Data portability — receive your data in a portable format.
• Opt out of “sale”/“sharing” of personal information (CCPA/CPRA) — note we do not sell or share personal information.
• Non-discrimination — we won’t treat you differently for exercising these rights.

Data sharing, retention & security

• Sharing: we don’t sell personal information. Limited technical processors (e.g. our hosting/analytics providers) act only on our instructions under data-processing terms.
• Retention: browser-stored data lasts until you clear it. Aggregate analytics are kept only as long as needed to understand trends.
• International transfers: where data (e.g. analytics) is processed outside your region, we rely on appropriate safeguards (such as Standard Contractual Clauses).
• Security: the site is served over HTTPS; the tools run locally in your browser.
• Children: this site is intended for adults and adolescents making health decisions; it is not directed at children under 13.

Changes to this policy

We may update this policy as the site evolves (for example, if we add optional accounts or analytics). We’ll revise the “effective” date above and, for material changes, make it clear on the site.