Privacy Policy

App and clinical data

This policy applies to CuidaZ for Android, published by Help DEV under package br.com.helpdev.cuidaz. The app helps professionals organize patients, schedules, visits, clinical notes, and payments. Records may include names, contact details, health information, and financial information about patients or other people.

Clinical and financial records stay in an encrypted database on the device. Help DEV does not receive these records. Free works without an account; signing in with Google on Free does not upload records to Firebase or enable backup or sync. An active Bronze subscription allows you to create and restore a password-encrypted local backup file. Android's document picker saves it to a destination you choose. That destination may belong to another provider, including a remote storage provider, which handles the file under its own terms. Help DEV does not receive the file or password. Free and Bronze do not sync clinical records between devices or automatically back them up to the cloud.

Android is configured to exclude app data from its automatic device backup. The local copy does not replace any professional record-retention duties. Help DEV cannot recover a forgotten Bronze backup password. Delete exported backup files from each destination when you no longer need them.

Google, Firebase, and subscriptions

Google sign-in is optional on Free and required to subscribe to or restore Bronze. Google and Firebase Authentication process technical data needed for authentication and security, such as your email, account identifier, IP address, and connection information. The app does not request access to your Google contacts or files.

Google Play processes purchases and renewals. To verify a subscription, the app sends the purchase token and authenticated account identity to the CuidaZ verification service, which checks with Google Play. The service stores entitlement metadata such as account UID, product, state, and expiration, plus a token hash to prevent use by another account. The original token is not stored in Firestore. These records do not include patient records. Purchasing remains disabled until the product and secure verification endpoint are configured.

Ads

Free may show a Google Mobile Ads (AdMob) banner. The app uses Google User Messaging Platform (UMP) to present and check applicable consent choices and configures requests as non-personalized. Google's SDK may process IP address, device identifiers, interactions, and diagnostics to provide, protect, and measure ads. Help DEV does not send patient names, records, schedules, clinical notes, or payments to ads. Bronze does not show ads.

See Google's Privacy Policy, Google Mobile Ads Android data disclosure, and Firebase privacy information.

Deletion, retention, and contact

Clinical records stay on the device until you clear app data or uninstall the app. Exported files remain at the destination you chose until you delete them. Deleting a CuidaZ account removes its Firebase identity and active associated data that can be removed. A technical deletion marker and purchase-token hashes may be retained to prevent reuse or improper reassignment; they do not contain clinical records, and the current code does not configure an automatic expiration period for them. Account deletion does not erase local data or backup files and does not cancel a Google Play subscription. Cancel renewal separately in Play Store.

When available, request deletion from the app's Account screen. You can also follow the external CuidaZ account-deletion instructions. For privacy questions or requests, email contato@cuidaz.com.br. Do not email patient data, passwords, or purchase tokens. CuidaZ is an organization tool; restrict access to your device and follow the professional confidentiality and record-retention rules that apply to your work.