Consumer health data privacy notice

1. Who we are

Kidney Navigator is run by Medical Adventure Voyage Travel Group LLC, doing business as Moore Audax Voyage Travel Group (MAVTG), a Florida limited liability company in Tampa. Contact: michael@mavtg.com. Kidney Navigator is a consumer tool you fill in yourself. It is not run by your doctor or insurer, so HIPAA generally does not apply to it. This notice is our own plain-language statement and has not been reviewed by an attorney.

2. What we collect and why

• Health entries you type in (medicines, fluids, weight, blood pressure, labs, dialysis sessions, notes). By default these stay in your browser on your device and we do not receive them.
• If you turn on optional sync: your entries are encrypted in your browser before they are uploaded. We cannot read them, and we cannot recover your recovery phrase.
• Your email address and, for age checks, a one-time age band, used to send a sign-in code and to follow our age rules. A sign-in cookie lasts 7 days. When an account is created we also record the date and which version of the Terms was in force.
• Payment details only if Premium opens. Stripe handles them on its own page; we do not see or store your card number.
• Server logs (such as IP address, time and page) that our host keeps to run the site.
• Apple Health file, scans and voice: a file you choose to import, a photo or text you scan, and dictation are processed on your device. If you use Dictate, your browser may send audio to its own speech service. That is separate from sync and is handled under that service's own privacy terms.

We collect only what is needed to run the features you use. We use no analytics, advertising or third-party trackers in the app or on Kidney Navigator pages.

3. Who we share it with

Stripe (payments), our hosting provider (server logs and delivery), and our email provider (sign-in codes) when you use those features. We do not sell your information, and we do not try to re-identify any data. We do not use it for advertising, to train AI, or for decisions about insurance, employment or credit. We may disclose information if the law requires it. If you share a caregiver or doctor link, you choose who gets it.

4. Your rights

You can ask us to tell you what we hold, to delete it, and to withdraw your consent (for example, turn off sync and delete the synced copy). In the app you can download your information, erase it from your device, delete the cloud copy and delete your sync account. Data kept only in your browser is under your control.

To make a request, email michael@mavtg.com from the address you use to sign in. We will send a one-time code to that address to confirm it is you. We will respond within 45 days and tell you why if we need more time or cannot grant a request. You can also contact your state attorney general if you are unhappy with our answer.

5. Security and incidents

Your synced health entries are end-to-end encrypted. Your email address, age band, account records and the time of each sync are not. No system is perfectly secure. If we learn that information we hold was accessed or disclosed without authorization, we will tell the people affected, and the authorities where the law requires, without unreasonable delay.

6. How long we keep it

Synced data stays until you delete the cloud copy or your account, or ask us to. Server logs are kept by our host under its own schedule. Stripe may keep payment records the law requires.

7. Changes

If this notice changes, we will post the new version here with a new date. Related: Privacy Policy · Terms of Use · Trust and security.