Privacy Policy

Last updated: July 1, 2026

The short version: your health data stays on your device. We built EczemaClues so that we couldn't see it even if we wanted to.

What EczemaClues is

EczemaClues is a private eczema journal. All logging, analysis, and reports run entirely in your browser, on your device. There is no account and no sign-up required to use it.

Health data: stored on your device only

Everything you log — flare severity, affected areas, foods, products, weather, sleep, notes, and photos — is stored locally in your browser's storage (localStorage and IndexedDB) on your own device. It is not transmitted to us or anyone else in normal use. We have no servers that receive it, and no way to view it.

Photos

Photos you add are compressed and stored on your device alongside your journal. They are never uploaded anywhere unless you explicitly create a backup (see below).

Backups you choose to make

• File backup: creates a file on your device that you may save wherever you choose (e.g. your own iCloud Drive or Google Drive). That copy lives in your storage provider account, under their terms — we never receive it.
• Cloud backup (optional): if you use the cloud backup button, an encrypted-in-transit copy of your journal is stored with our hosting provider (Cloudflare), addressed only by a random sync code that exists on your device. We do not link backups to names, emails, or identities. Anyone with your sync code can restore your backup, so treat it like a password. You can overwrite the backup at any time, and you may email us to request deletion.

No ads, no analytics, no trackers

The app contains no advertising, no third-party analytics or tracking SDKs, no social media pixels, and no third-party scripts or fonts. The app makes no network requests in normal use. We do not sell, rent, share, or monetize your data — we don't have it.

Waitlist emails

If you join our waitlist on the website, we store the email address (and any message you choose to include) so we can contact you about EczemaClues. We use Loops to send those emails. Your email is never connected to any health data (we don't have your health data). Unsubscribe or request deletion anytime via the link in any email or by writing to us.

Children

EczemaClues is intended for use by adults — parents and caregivers logging on behalf of their children, or adults tracking their own eczema. We do not knowingly collect personal information from children. Data a parent logs about a child stays on the parent's device as described above.

Data loss & your responsibility

Because your data lives only on your device (and in backups you make), clearing your browser data or losing your device can erase it. Please make regular backups. We cannot recover data we never had.

Changes

If we ever change how data is handled — for example, adding an optional encrypted sync service — we will update this policy and ask for your consent before any health data leaves your device under the new model.

Contact

Questions or deletion requests: support@eczemaclues.com

EczemaClues is not a medical device and does not provide medical advice. Patterns it shows are correlations to discuss with your doctor.