This Privacy Policy explains how PacketVisit (“we”, “us”) handles information when you use our marketing website and the PacketVisit application. PacketVisit is a personal wellness journal / visit-packet tool for individual end users (B2C) — not a medical device and not intended to diagnose, treat, cure, or prevent any disease. We are not a clinic EHR vendor and do not process patient charts on behalf of healthcare providers under a B2B DPA in the current product.

1. Who we are (data controller)

The data controller / operator is Jordanics Ferenc, a sole trader in Hungary. Registered address: Hunyadvár utca 95., 1165 Budapest, Hungary. Privacy contact: [email protected]. General support: [email protected] · +36 30 261 5378.

2. What we collect — by layer

PacketVisit separates diary data (on your device) from account / billing (cloud). Creating an account does not sync your diary entries to our servers.

Layer	What	Where it lives
Diary	Entries, body marks, notes, weather snapshots tied to entries	Your browser / later app sandbox (local-first)
Account	Email, auth session (Clerk)	Clerk (auth provider)
Entitlement	Premium / trial status for your account	PacketVisit entitlement API (e.g. Fly-hosted)
Payments (web)	Card / tax / invoices	Paddle as Merchant of Record (we do not store full card numbers)
Weather (optional)	Approximate location → weather context	On-device lookup to weather providers; not a diary upload feed
Marketing site	Essential cookies; analytics only if enabled	See Cookie Notice

2.1 Diary data (local-first)

Pain journal entries, body-location selections, descriptors, optional notes, and weather snapshots associated with entries are designed to stay on your device (browser storage / later iOS and Android app sandboxes). We do not operate a PacketVisit cloud health diary. Data & backup creates a file you save (Downloads, linked folder, or share sheet) — that is not automatic upload of your journal to our servers. Exports (PDF/CSV / backup files) leave the device only when you download or share them.

2.2 Account & subscription

If you create an account, Clerk processes email and authentication. Our entitlement API stores subscription / trial status needed to unlock Premium features. Account ≠ diary sync.

2.3 Payments (Paddle)

Web payments are processed by Paddle as Merchant of Record. Paddle may collect billing name, address, payment method details, and tax information under Paddle’s own privacy policy. We receive limited subscription status / entitlement signals — not your full card number.

2.4 Location (optional)

If you allow location for a diary entry, the app reads your approximate coordinates on-device and sends only those coordinates (latitude / longitude) to weather / geocoding providers to obtain forecast data and a coarse place label (city / region — not your street address). Typical providers: Open-Meteo (forecast), optionally OpenWeatherMap when configured, and reverse geocoding via a public geocoder (e.g. OpenStreetMap Nominatim).

We do not upload your diary entries, pain notes, or body marks with that request. Weather results are stored with the entry on your device. You can skip location and save an entry without weather. Denying the system permission means no weather attach for that flow.

2.5 Website analytics & cookies

The marketing site may use essential cookies and, only with consent where required, analytics cookies. See our Cookie Notice.

3. Why we process data (purposes & legal bases — EU/UK)

Provide the service — contract / steps prior to contract
Secure accounts & prevent abuse — legitimate interests
Billing entitlement via Paddle — contract
Legal compliance — legal obligation
Optional analytics / marketing — consent where required

4. Health-related information

Diary content may be sensitive. Because we design for on-device storage, you control exports (PDF/CSV) and whether you share them with a clinician. Do not use PacketVisit for emergencies or chest symptoms — see the Medical Disclaimer.

5. Sharing

We do not sell your health diary contents. Under CCPA/CPRA, some third-party cookie or advertising practices can count as a “sale” or “sharing” of personal information; see Your Privacy Choices to opt out where applicable. Categories of recipients may include:

Clerk — authentication
Paddle — payments / Merchant of Record
Hosting — entitlement API / marketing site hosts (e.g. Fly, Cloudflare)
Weather / geocoding providers when you opt into location weather
Professional advisors or authorities when legally required

6. International transfers

If personal data is transferred outside the EEA/UK, we will use appropriate safeguards (e.g. Standard Contractual Clauses) as required by law.

7. Retention

Local diary data remains until you delete it or clear site/app storage. Account records are kept while your account is active and thereafter as needed for legal, tax, or dispute purposes.

8. Your rights — EU / EEA / UK (GDPR / UK GDPR)

Subject to law, you may request access, correction, deletion, restriction, portability, and objection, and you may withdraw consent. You may lodge a complaint with your local supervisory authority (in Hungary: NAIH).

9. Your rights — United States / Canada (including California)

Depending on your state or province, you may have rights to know, access, correct, delete, or opt out of certain data practices. PacketVisit does not sell your health diary. California residents may use Your Privacy Choices / Do Not Sell or Share or email [email protected] to exercise CCPA/CPRA rights. Canadian users may contact us regarding access and correction under applicable privacy law (e.g. PIPEDA principles for commercial activity). Privacy contact: [email protected].

10. Children

PacketVisit is not directed to children under 13 (or higher age required in your country, e.g. 16 in some EU contexts). We do not knowingly collect account data from children.

11. Security

We use reasonable technical and organizational measures for account systems. No method of transmission or storage is perfectly secure. Protect device access and exports you create.

12. Changes

We may update this Policy. Material changes will be posted with a new date.

13. Contact

Privacy: [email protected]
Support: [email protected] · +36 30 261 5378
Contact page