Privacy Policy

Last updated: July 2026

What we collect

Account info (email, password hash), health tracking data you enter (flares, uric acid readings, medications, food, hydration), photos you upload of affected joints, and technical data (device type for push notifications, IP address for security).

How we use it

Solely to run the app: showing your trends, computing your flare-risk score, generating reports, sending reminders you opt into, and processing subscription payments. We do not sell your data.

Who sees it

Only you, by default. If you generate a shareable doctor report or post in the Community forum, that content becomes visible to whoever holds the link (share report) or other signed-in users (forum posts, under your display name — not your email).

Third parties

Stripe (payment processing), web push services (browser-native, for reminders), and your hosting provider. Each only receives what's necessary to do its job — Stripe never sees your health data.

Data retention & deletion

Your data is kept as long as your account is active. Email us to request full account deletion; we'll remove your data within 30 days, except records we're legally required to retain (e.g. payment history).

Security

Passwords are hashed (never stored in plain text). Sessions use HTTP-only cookies. All traffic is encrypted via HTTPS.

Not medical advice

GoutTrack is an educational tracking tool, not a medical device or a substitute for professional medical advice, diagnosis, or treatment. Always consult a physician about your condition and treatment.

Children

GoutTrack is not directed at children under 16 and we do not knowingly collect their data.

Changes

We'll update the "last updated" date above if this policy changes materially.

Contact

Questions about your data? Reach us through the app or the email on your account confirmation.