Privacy Policy

Your health journal stays under your control.

INR Wizard stores the live journal in protected app storage on your iPhone and does not synchronise it to a developer-operated server. There is no account or sign-in, advertising, or analytics inside the app.

Effective 11 September 2026 INR Wizard 1.0

Stored on your iPhone

Your live journal is stored inside protected app storage and marked to be excluded from ordinary device backup. It is not synchronised through CloudKit or a developer-operated record server.

No tracking or advertising

INR Wizard does not contain advertising, analytics trackers, or third-party marketing SDKs, and it does not sell personal information.

Sharing is your choice

Reports and manually exported encrypted backups leave the app only when you choose a destination through Apple’s standard sharing or Files interface.

Who is responsible

INR Wizard is published by Kudige Panduranga Shenoy, an individual developer, who is responsible for the app and for this policy. Contact: kudige@icloud.com.

India’s Digital Personal Data Protection Act, 2023 (DPDP Act): the journal you enter in INR Wizard stays on your iPhone and is never sent to the developer, so the developer does not hold, process, or share it. Beyond that, the developer can receive only: what you choose to include in an email to the address above; crash reports and aggregated usage statistics that Apple shares with app developers when the iPhone setting Share with App Developers (Settings → Privacy & Security → Analytics & Improvements) is on, which Apple controls and which are not drawn from your journal; and, for invited testers only, the TestFlight information described under Data collection and tracking. You can ask for support correspondence to be deleted at any time; requests are answered from the same address.

Information handled by the app

INR Wizard can store information that you enter, including a patient name, date of birth, height, weight, clinician details, INR measurements, anticoagulant information, prescribed schedules, dose records, symptom check-ins, home and laboratory testing-reminder schedules, range-alert and dose-reminder preferences, automatic-backup preferences, notes, and other installation-specific settings. It can also keep content-free reminder-readiness details on the iPhone, such as the latest alarm-sync time and aggregate scheduling counts. BMI is calculated on the device from the height and weight entered in the profile.

This is sensitive health information. It is kept in the app’s protected local storage and is not transmitted to the developer by INR Wizard. Images on this public Help Centre use fictional demonstration data, not a live patient journal.

Data collection and tracking

The app has no user account, advertising, cross-app tracking, analytics service, or developer-operated record server. It does not use HealthKit or automatically synchronise the journal through CloudKit.

If you install INR Wizard through TestFlight as an invited tester rather than from the App Store, Apple automatically collects crash logs and usage information and shares them with the app provider. Feedback submitted through TestFlight, including comments, screenshots, and related tester and device details, may also be shared. Avoid including patient records or other sensitive health information in feedback or screenshots. The developer uses TestFlight information only to test, diagnose, and improve INR Wizard. Apple controls this processing under its TestFlight privacy notice.

The live SwiftData journal, its database sidecars, and the optional rolling backup are marked to be excluded from ordinary iPhone device backup. INR Wizard does not use CloudKit synchronisation. A report or manually exported encrypted backup may still be saved to iCloud Drive or another provider when you deliberately select that destination.

Reports and sharing

PDF reports are created on the device as unencrypted files in protected temporary app storage. INR Wizard normally removes generated report files after about 24 hours when cleanup next runs, and reset or a full restore removes its generated copies.

A report leaves INR Wizard only when you choose to share, save, print, or send it. Reports can contain patient, clinician, INR, treatment, dose, and symptom information. Review the destination carefully. A copy saved, printed, or sent outside the app is handled by that destination and cannot be erased by INR Wizard.

Encrypted backup and restore

Manual backup: an exported backup is encrypted using the password you provide. INR Wizard does not retain, transmit, or recover that manual-backup password. You choose the destination in Apple’s Files interface. The selected provider stores the encrypted file under its own terms; the developer does not receive it.

Automatic backup: this optional feature keeps one encrypted rolling file inside INR Wizard and replaces the same file after each successful run. Its password is stored only in this iPhone’s device-only Keychain so the app can run the backup. It is never sent to the developer, and the developer cannot recover it. The rolling file is marked to be excluded from device backup. iOS controls exact background timing, so the app also checks when it opens.

Automatic background backup pauses if INR Wizard has not yet verified that old reminder cleanup finished after data was replaced or erased. The app retries the cleanup and resumes automatic backup after it succeeds.

Turning automatic backup off, resetting all app data, or completing a full restore removes the rolling file and its saved password. Notification and Alarm permissions are controlled by iOS and are not restored from an INR Wizard backup. Keep a separately exported encrypted backup in a trusted place if losing the iPhone or app would otherwise remove your only copy.

Notifications

Dose reminders, home and laboratory INR-testing reminders, measured-result range alerts, and reminder tests are scheduled locally. Notification and alarm text is generic and does not include patient name, medicine, dose, or INR value. An alarm and the name INR Wizard appear full screen on the Lock Screen and cannot be hidden by notification-preview settings. Apple’s alarm screen follows the iPhone language.

Saved dose and INR-testing reminders can use notification delivery or, on a compatible iPhone with permission, Alarm delivery. Notification dose reminders and the notification sound test are Time Sensitive; testing notifications and range alerts are ordinary notifications. Notification settings, Focus, Silent mode, device state, and iOS can silence, delay, or prevent notification delivery. Apple documents that an authorised AlarmKit alarm can override Silent mode and Focus when it fires, but permission, system limits, a hidden or locked app, travel, clock changes, or scheduling failure can still affect it. If Alarm delivery is unavailable, not yet permitted, turned off, or too close to a one-time fire time, INR Wizard attempts notification delivery instead; actual delivery still depends on notification permission, iPhone settings, and iOS. INR Wizard does not use Critical Alerts.

The Reminder notifications section in Settings can store and display the most recent alarm-sync time and aggregate counts. Requested is the number of reminder occurrences the app evaluated, including occurrences that could not be scheduled. Scheduled and sent as notifications mean that iOS accepted a scheduling request through that route. This diagnostic summary contains no reminder title, occurrence date, patient name, medicine, dose, or INR value and stays on the iPhone. None of the counts proves that a reminder rang, appeared, was seen, or was acted upon.

Protection and retention

INR Wizard uses Apple’s complete file-protection class for its app data. Device security also depends on your iPhone passcode, Apple Account security, operating-system updates, and the destinations to which you export files.

When INR Wizard is inactive, or when protected records are temporarily unavailable, it covers patient content with a neutral privacy screen. This prevents the ordinary app-switcher snapshot from displaying the health journal.

Records remain until you edit or delete them, reset the app, or remove the app from the iPhone. The rolling backup retains one latest encrypted snapshot; a recently corrected or deleted record may remain in that prior snapshot until the next successful backup replaces it. Turning automatic backup off or resetting removes the rolling file and saved password.

Exported reports and manually saved backups are separate files and must be deleted from their destinations by you. A file deliberately saved to iCloud Drive or another provider is governed by that destination, even though the live journal and rolling backup are excluded from ordinary device backup.

Deleting your data and withdrawing consent

Delete everything on the iPhone: in INR Wizard open Settings and choose Erase all app data. This removes the live journal, generated reports, the rolling backup, and its saved backup password, then returns to setup. Deleting the INR Wizard app from the iPhone also removes the live journal, generated reports, and the rolling backup; use Erase all app data first if you also want the saved backup password removed.

Delete individual records: INR results, dose records, symptom check-ins, testing reminders, and physicians can be edited or deleted from within the app; a physician recorded as the source of the saved INR range can be deleted once the range names another source. A dose schedule can be deleted while unused and otherwise stopped, which keeps its history. A treatment is ended with an end date rather than deleted. The patient profile is removed only by Erase all app data.

Files outside the app: reports and manual backups you exported are separate files. Delete them from the place you saved, printed, or sent them; INR Wizard cannot reach them.

Withdraw consent: the developer holds none of your journal, so there is nothing held by the developer to delete or to stop processing. To withdraw consent for the app’s own handling of your information, stop using INR Wizard and erase or delete it as above. Notification and Alarm permissions can be withdrawn at any time in iPhone Settings, and Apple’s crash and usage sharing is switched off under Analytics & Improvements. If you have emailed support, you may ask for that correspondence to be deleted, subject to technical, legal, or provider-backup limits.

Your choices

  • Review, correct, or delete records from within INR Wizard.
  • Review notification and alarm readiness, view aggregate alarm-sync counts, send a generic notification or alarm test, and open iPhone settings.
  • Change dose-reminder, testing-reminder, range-alert, and automatic-backup preferences.
  • Create a manual encrypted backup before replacing or erasing data.
  • Use Erase all app data when preparing the app for another person.
  • Delete exported reports and backups from the places you saved them.

Medical safety

INR Wizard is a patient-entered record and reporting tool. It does not provide individual medical or dosing advice, diagnose a condition, determine whether a result is safe, calculate or recommend a medication dose, choose a testing interval, or replace a clinician, laboratory test, prescription label, or emergency service.

Do not change Warfarin or another anticoagulant based on the app. When a treatment decision depends on an INR result, follow the instructions of the appropriate healthcare professional and obtain laboratory confirmation when advised.

Website and support privacy

The developer has added no website analytics, advertising, tracking pixels, or marketing cookies to inrwizard.com. The site is hosted using GitHub Pages, and the domain and hosting infrastructure may process ordinary connection information such as an IP address, browser details, requested page, and access time under their own terms.

Links to Apple, MedlinePlus, the FDA, email, or another external destination leave this website and are handled by that destination. If you email support, the developer and email provider receive the sender address, message, and any attachments. Do not send patient records, backup passwords, or unnecessary health screenshots.

Changes to this policy

This page will be updated when INR Wizard’s data practices materially change. The effective date at the top identifies the current version.

Contact

Questions about this policy or INR Wizard’s privacy practices can be sent to the address below. Emailing support gives the developer your sender address, message, and any attachments, and the email provider handles those items under its terms. They may be retained as reasonably needed to answer or investigate the request. Do not send patient records, backup passwords, or unnecessary health screenshots. You may ask for support correspondence to be deleted, subject to technical, legal, or provider-backup limits.

Kudige Panduranga Shenoy
kudige@icloud.com