JointCast is committed to protecting your privacy. This policy explains how we collect, use, and safeguard your personal data in accordance with Thailand's Personal Data Protection Act (PDPA).

1. Information We Collect

1.1 Information You Provide Directly

• Email address (when signing up or logging in)
• Daily pain score (0–10) that you enter yourself
• Optional notes attached to each pain log entry

1.2 Automatically Collected Information

• Barometric pressure data: Atmospheric pressure (hPa) read from your device's built-in barometer sensor — captured on-device and uploaded with your daily log. Never shared with third parties.
• Subscription data: Premium status for entitlement management.

1.3 Information We Do Not Collect

• Location (GPS)
• Contacts or data from other apps
• Biometric data or health information beyond the pain score you enter yourself

2. How We Use Your Information

We use your data to:

• Display charts and statistics showing your personal pressure-pain correlation
• Provide and improve the JointCast app
• Manage your account and Premium entitlements
• Process purchases

3. Sharing Data with Third Parties

We do not sell your personal data. We use the following third-party services:

• Supabase: Stores pain logs and account data on encrypted servers with Row-Level Security.
• Google Sign-In: Authentication via Google.
• Google Play / Apple App Store: Purchase processing.

These services have their own privacy policies.

4. Barometric Pressure Data

Pressure readings are taken directly from your device's hardware sensor. This data is never shared with third parties — it is stored only within your own account to generate your personal correlation chart.

5. Data Retention

We retain your data for as long as your account exists. When you delete your account, all data is removed within 30 days.

6. Your Rights Under PDPA

• Access: Request to view your personal data
• Rectify: Request correction of inaccurate data
• Erase: Delete your account and all data from the Account page in the app
• Object: Object to data processing
• Withdraw consent: Withdraw consent at any time
• Data portability: Request a copy of your data in a readable format

7. Data Security

Your data is stored on Supabase servers with encryption at rest and in transit, protected by Row-Level Security (RLS) policies that ensure you can only access your own data.

8. Policy Changes

We may update this policy from time to time. Changes take effect immediately upon publication on this page.