Your information

Privacy Policy

Effective date: September 6, 2026 · Version 2.0

FND Sentinel keeps a personal record on your devices. No account is required, and the app does not automatically send William Evans your Health data, family notes, care plan, usage logs, or identifiers. The developer operates no app server, advertising, analytics, or tracking service.

Health records and personal entries

With permission, the app reads available heart rate, heart-rate variability, breathing rate, blood oxygen, sleeping wrist temperature, steps, sleep, and resting heart rate from Apple Health. A live heart-rate check starts only when the wearer starts one on the watch; its workout-style session is discarded rather than saved to Fitness.

Local records can include episodes, warning signs, near misses, symptoms, severity, times, notes, energy and comfort ratings, journal highlights, a preferred name, support steps, preferences, emergency instructions, a trusted contact name and phone number, and appointment questions. The app also stores settings, personal baselines, experimental pattern calculations, alert history, and the identifiers needed to prevent duplicate transfers. These records support the features you use and are not sent automatically to the developer.

Offline watch collection and transfer

The watch can authorize Health access, record a live check, read available local Health records, and save notes without a connection to the iPhone app. It saves pending records locally. When the normally paired devices can communicate, Apple WatchConnectivity transfers batches in the background. The phone saves an inbox copy before confirming receipt; only that confirmation permits the watch to clear its copy. The phone clears its inbox after committing the records to its journal. Transfer timing is controlled by Apple, and the phone may need to be unlocked or reopened after a force-quit.

There is no developer relay, remote caregiver account, or Family Setup integration. A saved contact does not receive automatic messages. Calling a contact requires a user action.

Local storage, protection, and backups

The main phone journal and companion records use Apple complete file protection. Transfer queues, query cursors, and the watch live-reading buffer use protection until first unlock so background collection and receipt can work after the device has been unlocked once. Files remain in private app containers.

From build 8, app-managed record directories and saved record files are marked to be excluded from device backups. This requests exclusion; it cannot guarantee that records never appear in a backup or on a restored device. Apple Health syncing, operating-system services, and older device backups are controlled by Apple and your settings. FND Sentinel provides no app-managed iCloud database or account recovery. Export records you want to retain before replacing, erasing, or uninstalling an app or device.

Retention

The default phone policy keeps raw readings for 30 days, feature snapshots for 120 days, and recent assessment history for seven days; older high-frequency readings may be thinned. Journal entries, care plans, baselines, settings, and transfer receipts remain until removed or reset. Pending watch records are not discarded merely because they are old or the phone is unavailable. Device storage is finite; failed saves are reported rather than confirmed as successful.

Notifications and exports

Experimental pattern notifications and watch haptics are off by default for new installations; existing preferences are preserved. Notifications use Apple’s local delivery mechanisms and are not sent through a developer server.

You can preview a 14-day visit summary or create a CSV export, then choose a recipient or service in Apple’s share sheet. The summary may include check-ins, event details, notes, care and contact information, and appointment questions. Generating a preview does not send it. After you share, the recipient or service controls that copy under its own privacy practices. Deleting app records does not erase copies you have exported.

External resources and support

Care includes optional links to NINDS and FND Hope, opened only when selected. Those independent websites have their own privacy practices. This support website uses no added analytics, cookies, forms, or tracking scripts; its hosting provider, GitHub Pages, may process technical request information as part of hosting.

If you email support, the developer receives the information you choose to send and uses it to respond. Please do not include Health exports or identifying medical details unless you deliberately want to share them. The app includes no third-party advertising, analytics, telemetry, crash-reporting SDK, or data broker integration, and the developer does not sell app records.

Families and your controls

The phone experience is for the person keeping the record and their caregiver; the watch may be used by a child with adult supervision. A parent or guardian should control setup, permissions, exports, and sharing.

• Change or revoke Health permissions on each device through Apple’s Health or Settings controls. Revocation does not erase previously saved app records.
• Stop a live check on the watch. Other available Health records follow watchOS schedules and permissions.
• Edit or delete individual check-ins and events in Journal, and edit the care plan in Care.
• Use Settings → Delete all data to clear the phone’s records and pending transfer inbox. Apple Health and records still on the watch are not erased; the watch may transfer additional records later.
• Removing the apps removes their local containers, subject to Apple’s backup and restore behavior. To prevent a watch backlog from arriving again, remove the watch app as well.

Medical limitation

FND Sentinel is not a medical device, diagnosis, treatment, emergency service, or reliable predictor. Its outputs may be incomplete or wrong. Follow the care team’s plan and do not use the app for safety-critical decisions.

Changes and contact

Material changes to these practices will be reflected in this policy and its effective date.