Global Health IQ (Mobile) — Privacy Notice

• No user account or sign-in. We do not ask for your name, email, or phone number in the app.
• Your settings and exposure ledger are stored on your device.
• Location is requested only while the app is in use (foreground). The app does not request Android background location permission.
• To find your city and local conditions, the app sends your device coordinates to mapping, weather, and public-data services. Raw coordinates therefore do leave your device for these lookups.
• The AI assistant is optional. It only sends data through the Rork AI toolkit integration after you give explicit consent. If you decline, the app answers from local content.
• The app contributes public disease-signal reports to a shared Serpens signal service. These are public-signal reports built from public report metadata, not a personal medical history, and are designed to exclude your identity and raw coordinates.
• On-device data stays until you clear it or uninstall the app. Shared signal cache entries are pruned based on latest activity, as described under Data Retention.
• The app does not provide medical diagnosis or treatment advice.

The app uses on-device storage (AsyncStorage) for your app settings, your consent choices, and your exposure ledger (the record of exposure-monitoring activity you keep in the app). This data stays on your device unless a feature described below sends specific information off the device. Uninstalling the app or clearing its storage removes this local data.

If you grant location permission, the app reads your location only while you are using it, to show outbreak activity, advisories, and conditions relevant to your area. The app does not request background location access.

To turn your location into a place name and local conditions, the app sends coordinates to outside services:

• Reverse geocoding: coordinates are sent to Nominatim, a service operated with OpenStreetMap data, to determine your city or region.
• Weather and public-data lookups: location information is sent to weather and public health data providers to retrieve conditions for your area.

These providers operate under their own privacy policies. You can deny or revoke location permission at any time in your device settings; location-based features will then be limited.

The app includes an optional AI assistant. Before any assistant request leaves your device, the app asks for your explicit consent. If you consent, the following is sent through the Rork AI toolkit integration to generate a response:

• The question you ask
• Your recent conversation with the assistant, for context
• Your city-level location
• Your exposure-monitoring status

Do not include information in your questions that you do not want sent to this service. If you decline consent, the assistant uses answers generated locally in the app and nothing is sent for AI processing.

Requests sent through the Rork AI toolkit are handled under the terms of that toolkit and any AI providers it relies on. We have not verified how long those services keep requests or whether they use them to train models, so we cannot promise that assistant requests are not retained or used for training.

To improve public health signal coverage, the app sends public-signal reports to a shared Serpens signal service. These reports describe public outbreak and health signals. They are not a personal medical history. A report can include public report metadata such as:

• Disease keywords
• Region and location labels
• Source information and source counts
• Timestamps
• Severity and confidence values
• Related symptoms and context
• Velocity and anomaly metrics

Reports are designed to exclude your identity and raw coordinates. Because they include location labels, timestamps, and topic details, we do not claim they are anonymous in every circumstance.

When the app requests public health feeds, maps, weather, or other public data, the receiving provider can see standard network information such as your IP address, request time, and device or app information included in the request. This is how internet requests work and is outside the app's control.

• On your device: settings, consent choices, and your exposure ledger remain until you clear the app's storage or uninstall the app.
• Shared signal caches: in the backend code we reviewed, entries in the shared public threat cache are pruned about 30 days after their latest activity, and anomaly cache entries about 14 days after their latest activity. Because pruning is based on latest activity, new activity on a threat can extend how long its entry is kept.

These are in-memory application caches. Pruning an entry is not a guarantee that every copy of the data is deleted. These timings describe application caches only. They do not establish how long hosting providers, server logs, or backups keep data. We have also not verified how long external AI, mapping, weather, public-data, or network providers retain data, or whether they use it for training. Their own terms apply.

• To show public health alerts, disease trends, and conditions for your area
• To answer assistant questions, when you have opted in
• To contribute regional disease-signal reports to the shared signal service
• To remember your settings and exposure ledger on your device

• Nominatim / OpenStreetMap, for reverse geocoding
• Weather and public health data providers, for local conditions and feeds
• The Rork AI toolkit integration, only after you consent to the assistant
• The Serpens shared signal service, for public disease-signal reports

Global Health IQ is intended for people aged 13 and older, in all countries where the app is available on Google Play.

• Deny or revoke location permission in your device settings.
• Decline AI assistant consent to keep assistant answers local.
• Clear app storage or uninstall the app to remove on-device data.
• Contact us to ask about, access, or request deletion of information associated with your use of the app.

We will update this notice when the app's data practices change and revise the date above.

For privacy questions and access or deletion requests, contact info@serpens.app.