Privacy Policy

1. Who we are and who controls your information

Conny Cooper is operated by Divaldo Magalhães Lucas, an individual operator established in Spain. For data-protection purposes, Divaldo Magalhães Lucas is the controller of personal information processed for Conny Cooper.

2. Scope

This policy applies to the Conny Cooper iOS app, the website at connycooper.com, and related support. Conny Cooper is available worldwide and is intended for people aged 16 or older.

3. Information we process

Account and profile information

An account may include a user identifier, email address where supplied, display name or nickname, date of birth, language, time zone, pronouns or gender, and optional family-seat information. Conny Cooper does not offer guest or anonymous accounts.

You can sign in using Apple, Google, or email and password. Supabase provides authentication and cloud account services. Apple or Google provides authentication information when you choose the corresponding sign-in method.

Medication and treatment information

Account-linked information synchronised through Supabase can include treatments, medicine core fields, treatment dates, dose schedules, and dose logs or statuses.

Depending on how you use the app, additional medicine details, doctor or hospital details and notes, feelings or mood notes, refill or stock details, gamification or reward records, and local community notes may remain on your device. Not every field entered into Conny Cooper is cloud-synchronised.

Medication and treatment information can constitute information concerning health under applicable data-protection law. We process this information only to provide the features you choose to use and on an appropriate legal basis, including explicit consent where applicable.

Support communications

If you contact support, we process the contact details and information you include so that we can respond to and manage your request.

4. Prescription scanning and local OCR

Camera images and photos are processed on the device using Apple Vision. PDFs are processed using PDFKit and on-device Apple Vision. Manual entry does not use OCR.

Original prescription images and PDFs are not uploaded to Supabase for OCR. They can be archived locally on your device. After you review and confirm extracted information, applicable structured medication or treatment information may synchronise to Supabase. You are responsible for checking extracted information before relying on it.

5. How we use information

We use personal information to:

• create, authenticate and maintain your account;
• provide medication and treatment-organisation features;
• synchronise supported account-linked information;
• provide configured reminders and alarms on your device;
• provide optional nearby-pharmacy search;
• manage Conny Cooper Super access and purchase restoration;
• provide support and respond to privacy requests;
• protect the service, users and account security; and
• comply with applicable legal obligations.

6. Legal bases

Depending on the information and context, we rely on:

• Contract: to create and operate your account and provide features you request.
• Consent or explicit consent: where required, including for medication or treatment information that constitutes health data and for optional device permissions.
• Legitimate interests: to provide support, secure and maintain the service, and prevent misuse, where those interests are not overridden by your rights.
• Legal obligations: where processing is needed to comply with applicable law.

Where processing depends on consent, you may withdraw it at any time. Withdrawal does not affect processing already carried out lawfully. Some features may no longer work if their necessary permission or consent is withdrawn.

7. Where information is stored

Supabase handles authentication, profiles, the supported medication replica and server-side account deletion. Supported treatments, medicine core fields, treatment dates, dose schedules and dose logs or statuses can be stored in that account-linked cloud service.

Other information may remain locally on the device, including the additional medicine details and notes described above, refill or stock details, reward records, local community notes, and original prescription images or PDFs. Removing the app, signing out and deleting an account are different actions and may have different effects on local and cloud information.

8. Service providers and platform services

• Supabase: authentication, account profiles, supported medication-data synchronisation and account deletion.
• Apple: Sign in with Apple, StoreKit purchases, on-device Vision and PDFKit processing, local notifications, AlarmKit services, and MapKit where used.
• Google: Google Sign-In when you select that authentication method. Google is not used as an OCR recipient in the current release.

These providers process information under their own applicable terms and privacy arrangements as well as any arrangements that apply to services they provide to Conny Cooper.

9. Location and nearby-pharmacy search

If you choose nearby-pharmacy search and grant location permission, approximate or current location is used to perform the search through Apple MapKit and Core Location. That location is sent through Apple’s mapping services for the requested search. It is not stored in the Supabase medication replica.

10. Purchases

Conny Cooper Super purchases and restores are handled by Apple through StoreKit. Conny Cooper receives the purchase or entitlement information needed to provide and restore access, but does not directly receive or store your payment-card information.

11. Notifications and alarms

If you enable them, Conny Cooper uses Apple’s local notification and AlarmKit services to provide reminders configured on your device. You control notification permission through iOS settings.

12. International transfers

Conny Cooper is available worldwide, and service providers may process information in countries outside your own. Where applicable law requires safeguards for an international transfer, we rely on the lawful transfer mechanisms and safeguards applicable to the relevant provider and processing activity. We do not represent that all information remains in Spain or the European Economic Area.

13. Retention

Account-linked information is retained while needed to provide your account and the service, and as otherwise required or permitted by applicable law. Retention depends on the type of information, why it is processed, account status, security requirements and legal obligations.

Account deletion removes the Supabase account and associated replica or profile rows through the implemented server-side process, then erases owned local app data, the local prescription archive, and managed reminders or alarms. Apple Sign in authorisation is revoked for Apple-linked accounts.

Residual copies may remain for limited periods in backups, security records or provider systems according to provider retention processes and applicable legal obligations. No fixed backup or log period is promised by this policy.

14. Security

We use technical and organisational measures appropriate to the nature of the service and information processed. Authentication and supported cloud data are handled through Supabase, while specified information remains on the device. No method of storage or transmission can be guaranteed to be completely secure.

15. Account deletion

You can initiate permanent deletion in the app by opening Profile, choosing Delete account & data, and confirming the deletion. Apple-linked accounts may require Apple authorisation to complete revocation.

Remote deletion must succeed before the app erases owned local data. If it fails, the app does not falsely treat local data as deleted. Signing out is not account deletion. For assistance, contact support@connycooper.com.

16. Your privacy rights

Depending on where you live and applicable law, you may have rights to request access, correction, deletion, restriction, objection or portability, and to withdraw consent where processing relies on consent. You may also have rights under mandatory local privacy or consumer law.

To exercise a right, contact support@connycooper.com. We may need to verify your identity before completing a request. You may complain to the data-protection supervisory authority applicable to you, including the Spanish Data Protection Agency where it is the competent authority.

17. Age policy

Conny Cooper is intended for users aged 16 or older. It does not provide child accounts or a parental-consent account system. Optional family-seat information is not a child-account feature.

18. No advertising or cross-app tracking

The current release does not include advertising SDKs, cross-app tracking, App Tracking Transparency tracking, analytics SDKs, crash-reporting SDKs or behavioural advertising. Local analytics or marketing preference controls do not, by themselves, send analytics or marketing data.

19. Changes to this policy

We may update this policy when the product, providers or legal requirements change. We will publish the updated policy here and change its effective date. Where required, we will provide additional notice or request consent.

20. Contact

Privacy questions and requests can be sent to support@connycooper.com. You can also review the Legal Notice.