Privacy Policy — SPM Health Tech & PANDAS Tracker

SPM Health Tech LLC is committed to protecting the privacy of families and children who use PANDAS Tracker. This policy covers data collection, storage, HIPAA-aligned practices, children's privacy under COPPA, and your family's rights.

Data we collect

We collect only the data needed to provide the service: account credentials (email), caregiver-entered health observations for your child, and usage data necessary for app functionality. We do not collect advertising identifiers, device fingerprints, or behavioral tracking data.

HIPAA-aligned practices

SPM Health Tech has a Business Associate Agreement (BAA) with Google Cloud (Firebase). Data is encrypted at rest (AES-256) and in transit (TLS 1.3). Access to health records is logged and auditable. Data minimization is practiced.

Children's privacy (COPPA)

PANDAS Tracker is designed for adult caregivers. Accounts are created and managed by parents or guardians. We do not knowingly collect personal information directly from children under 13.

Your rights

You have the right to access, correct, export, and delete your data. You can delete your account and all associated data at any time from within the app. Data is permanently removed within 30 days. Contact: info@spmhealthtech.com.