Biojrnl Biojrnl
Download

Legal

Consumer Health Data

Last updated: 9 September 2026

The short version: Biojrnl collects the health information you choose to write down, uses it for one purpose, which is showing your own record back to you, and shares it with nobody except the infrastructure that runs the app. We do not sell health data and we never have.

This notice is for people in the United States. States including Washington and Nevada require a health app to publish a consumer health data privacy policy, and this page is ours. It supplements our Privacy Policy, which applies to everyone, everywhere. If the two ever appear to differ, the more protective reading applies.

The regulated entity is Biojrnl Ltd, the company that operates Biojrnl. Our company details and postal address are at the foot of this page. We have no affiliates.

1. The health data we collect

Biojrnl collects only what you, or someone you have invited to a profile, choose to enter:

  • Journal entries: symptoms, notes, dates and severity ratings
  • Medication names, dosages, schedules and dose logs
  • Blood test results recorded manually
  • Vaccination records
  • Appointment and trip records
  • Documents and attachments you upload
  • Care plans kept on a profile: the tasks in the plan, and who the plan is from, such as a clinician's name
  • Handover notes left on a profile, and the replies carers leave under them
  • The names of any custom categories you create
  • Profile details: name, date of birth, blood type, emergency contacts, and any optional details you add, such as gender, address, height and weight readings, allergies, ongoing conditions, GP, insurance and national health identifiers

We collect no location data from your device, no biometric identifiers, no browsing history and no advertising identifiers, and we do not infer health information about you from anything; places you type in yourself, such as an appointment location, are simply part of your record. The app stores what you write and shows it back to you.

2. Why we collect it

One purpose: operating your journal. That means storing your record, backing it up to the cloud if you turn cloud backup on, showing it to the people you have explicitly invited, and producing the exports you ask for. We do not use health data for advertising, marketing, research, training, profiling or any other secondary purpose.

3. Where it comes from

Three sources, all of them people you know: you, typing it in; a guest or co-manager you invited to a profile, writing entries their invitation allows; and the account holder of a managed profile, recording on behalf of the person the profile describes.

4. Who it is shared with

We do not sell consumer health data, and we do not share it with advertisers, data brokers, analytics companies or any third party for their own use. The only parties that touch it are the processors that run the service under contract with us, such as our cloud database in the EU. The current list, with what each one receives, is always at biojrnl.com/subprocessors.

Because we do not sell health data, there is nothing to opt out of, and no one may buy it.

5. Your rights

You have the right to:

  • Know and access: ask what health data we hold about you and receive a copy. The fastest way is the in-app export, in Settings, then Export & backup
  • Withdraw consent: turn cloud backup off in Settings, then Backup & sync, then Cloud backup & sync, and new writes to profiles you have not shared stay on your device. A profile you have shared keeps syncing so the people in it can read it; withdraw the share to stop that. Turning backup off does not retract what is already uploaded; use Delete to remove what is on our servers
  • Delete: remove your account and every record in it, in Settings, then Danger zone, then Delete all my data, or via biojrnl.com/delete-account. You have 30 days to change your mind; erasure of your records from our live systems completes within 24 hours after that window ends, uploaded files follow on their deletion cycle, and short-term disaster-recovery backups expire on their rolling cycle in the days that follow

To exercise any right by email, write to gdpr@biojrnl.com from the address on your account. We respond within the timelines the law of your state sets, and there is no charge.

Two more rights, stated plainly: you can ask us for the list of every third party we have shared consumer health data with, along with an email address for each; that list is published and kept current at biojrnl.com/subprocessors, and we will confirm it on request. And exercising any right here will never change how Biojrnl treats you: same features, same prices, same service.

When you delete your data, we also delete it from the processors that hold it for us and require the same of them; where a processor keeps short-term operational logs, those expire on the cycles described on the subprocessors page.

6. Appeals

If we refuse a request, we will tell you why. You can appeal by replying to our response, and a person, not a machine, will review it. If your appeal fails, you can raise the matter with your state Attorney General; in Washington that is the Office of the Attorney General at atg.wa.gov.

7. Contact