{"id":62,"date":"2026-08-26T21:05:19","date_gmt":"2026-08-26T21:05:19","guid":{"rendered":"https:\/\/deployit.ovh\/?page_id=62"},"modified":"2026-09-08T23:12:40","modified_gmt":"2026-09-08T23:12:40","slug":"mypku-privacy-policy","status":"publish","type":"page","link":"https:\/\/deployit.ovh\/index.php\/mypku-privacy-policy\/","title":{"rendered":"MyPKU Privacy Policy"},"content":{"rendered":"\n<!DOCTYPE html>\n<html <?php language_attributes(); ?>>\n<head>\n    <meta charset=\"<?php bloginfo( 'charset' ); ?>&#8220;>\n    <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\">\n    <meta name=\"description\" content=\"MyPKU Privacy Policy \u2014 DeployIT\">\n    <?php wp_head(); ?>\n    <style>\n        .deployit-privacy {\n            max-width: 780px;\n            margin: 0 auto;\n            padding: 60px 24px 100px;\n        }\n        .deployit-privacy-header {\n            background: linear-gradient(135deg, #1e2a4a 0%, #2a3a5c 40%, #334466 100%);\n            padding: 80px 24px 60px;\n            text-align: center;\n        }\n        .deployit-privacy-header .deployit-logo-link {\n            display: inline-flex;\n            align-items: center;\n            gap: 12px;\n            margin-bottom: 32px;\n            color: #fff;\n            font-size: 1.1rem;\n            font-weight: 600;\n            opacity: 0.7;\n            transition: opacity 0.3s;\n        }\n        .deployit-privacy-header .deployit-logo-link:hover { opacity: 1; }\n        .deployit-privacy-header .deployit-logo-link img { height: 40px; width: auto; }\n        .deployit-privacy-header h1 {\n            font-size: clamp(2rem, 4vw, 2.8rem);\n            font-weight: 800;\n            color: #fff;\n            margin-bottom: 12px;\n        }\n        .deployit-privacy-header .deployit-updated {\n            color: rgba(255,255,255,0.5);\n            font-size: 0.95rem;\n        }\n        .deployit-privacy-header .deployit-dev {\n            color: rgba(255,255,255,0.5);\n            font-size: 0.95rem;\n            margin-top: 4px;\n        }\n        .deployit-privacy-header .deployit-dev a { color: #00b4d8; }\n\n        .deployit-privacy h2 {\n            font-size: 1.4rem;\n            font-weight: 700;\n            margin-top: 48px;\n            margin-bottom: 16px;\n            color: #fff;\n        }\n        .deployit-privacy h3 {\n            font-size: 1.1rem;\n            font-weight: 600;\n            margin-top: 24px;\n            margin-bottom: 10px;\n            color: #fff;\n        }\n        .deployit-privacy p {\n            color: rgba(255,255,255,0.6);\n            font-size: 1rem;\n            line-height: 1.8;\n            margin-bottom: 16px;\n        }\n        .deployit-privacy ul {\n            color: rgba(255,255,255,0.6);\n            font-size: 1rem;\n            line-height: 1.8;\n            margin-bottom: 16px;\n            padding-left: 24px;\n        }\n        .deployit-privacy ul li { margin-bottom: 6px; }\n        .deployit-privacy strong { color: #fff; }\n        .deployit-privacy a { color: #0077b6; }\n        .deployit-privacy a:hover { text-decoration: underline; }\n\n        .deployit-privacy-contact {\n            margin-top: 48px;\n            padding: 32px;\n            background: rgba(255,255,255,0.05);\n            border-radius: 16px;\n        }\n        .deployit-privacy-contact p { margin-bottom: 4px; }\n    <\/style>\n<\/head>\n<body <?php body_class(); ?>>\n<?php wp_body_open(); ?>\n\n    <header class=\"deployit-privacy-header\">\n        <a href=\"<?php echo esc_url( home_url( '\/' ) ); ?>&#8221; class=&#8221;deployit-logo-link&#8221;>\n            <img decoding=\"async\" src=\"<?php echo esc_url( get_template_directory_uri() ); ?>\/logo_transparent.png&#8221; alt=&#8221;DeployIT&#8221; \/>\n        <\/a>\n        <h1>MyPKU Privacy Policy<\/h1>\n        <p class=\"deployit-updated\">Last updated: April 21, 2026<\/p>\n        <p class=\"deployit-dev\">Developer: DeployIT, <a href=\"mailto:contact@deployit.ovh\">contact@deployit.ovh<\/a><\/p>\n    <\/header>\n\n    <div class=\"deployit-privacy\">\n\n        <h2>1. Data We Collect<\/h2>\n        <p>MyPKU stores all diary entries, products, child profiles, and settings locally on your device using an on-device database. No personal data leaves your device unless you opt in to the cloud-based features described below.<\/p>\n        <p>We do <strong>NOT<\/strong> collect analytics, usage statistics, advertising identifiers, or location data.<\/p>\n\n        <h2>2. Cloud Features and Third-Party Services<\/h2>\n        <p>The following optional features transmit data to external services:<\/p>\n\n        <h3>a) Shared Groups<\/h3>\n        <p>When you enable Shared Groups and sign in, your email address, display name, and shared diary entries are transmitted to our backend hosted on Microsoft Azure (West Europe region). Data is stored in Azure Table Storage and is accessible only to members of your group.<\/p>\n\n        <h3>b) Nutrition Label Scanner<\/h3>\n        <p>When you use the scanner, the photo you take is sent to our Azure AI Vision service for text extraction. Photos are processed in real-time and are not stored on our servers.<\/p>\n\n        <h3>c) Premium Subscriptions<\/h3>\n        <p>Purchase and subscription status is managed by Google Play (Android) or Apple App Store (iOS). We use RevenueCat to verify your subscription status. RevenueCat receives your anonymous app user ID and purchase receipts. We do not receive or store your payment information.<\/p>\n\n        <h3>d) Authentication<\/h3>\n        <p>Sign-in is provided by Microsoft Entra External ID. We receive your email address and display name. We do not receive or store passwords.<\/p>\n\n        <h2>3. Legal Basis for Processing (GDPR)<\/h2>\n        <p>We process your data based on the following legal grounds:<\/p>\n        <ul>\n            <li><strong>Contract performance:<\/strong> To provide the app features you use (Article 6(1)(b) GDPR).<\/li>\n            <li><strong>Legitimate interest:<\/strong> To maintain service security and prevent abuse (Article 6(1)(f) GDPR).<\/li>\n            <li><strong>Consent:<\/strong> For optional cloud features that you explicitly enable (Article 6(1)(a) GDPR). You may withdraw consent at any time by disabling the feature or deleting your account.<\/li>\n        <\/ul>\n\n        <h2>4. Your Rights<\/h2>\n        <p>Under the GDPR and applicable data protection laws, you have the right to:<\/p>\n        <ul>\n            <li><strong>Access<\/strong> the personal data we hold about you.<\/li>\n            <li><strong>Rectify<\/strong> inaccurate personal data.<\/li>\n            <li><strong>Erase<\/strong> your personal data (&#8220;right to be forgotten&#8221;).<\/li>\n            <li><strong>Restrict or object<\/strong> to processing of your data.<\/li>\n            <li><strong>Data portability<\/strong> \u2014 receive your data in a machine-readable format (use the Backup feature in Settings).<\/li>\n            <li><strong>Withdraw consent<\/strong> at any time for optional features.<\/li>\n            <li><strong>Lodge a complaint<\/strong> with your local data protection authority.<\/li>\n        <\/ul>\n        <p>To exercise any of these rights, contact us at <a href=\"mailto:contact@deployit.ovh\">contact@deployit.ovh<\/a>. We will respond within 30 days.<\/p>\n\n        <h2>5. Data Retention<\/h2>\n        <p>Local data is stored on your device until you uninstall the app or manually delete it.<\/p>\n        <p>Cloud data (Shared Groups activity) is retained as long as the group exists. When you leave a group, your shared entries remain visible to other group members. You may request full deletion of your cloud data by contacting us.<\/p>\n        <p>Subscription verification data is retained by RevenueCat according to their privacy policy.<\/p>\n\n        <h2>6. Data Security<\/h2>\n        <p>All network communication uses TLS 1.2 or higher. Authentication tokens are stored in platform-secure storage (Android Keystore \/ iOS Keychain). Our backend enforces access control so that only group members can view shared data.<\/p>\n\n        <h2>7. International Data Transfers<\/h2>\n        <p>Our backend is hosted in Microsoft Azure (West Europe). RevenueCat may process data in the United States under Standard Contractual Clauses (SCCs) as approved by the European Commission.<\/p>\n\n        <h2>8. Children<\/h2>\n        <p>MyPKU is designed for caregivers and parents to track dietary information for children with Phenylketonuria (PKU). The app is operated by adults on behalf of children. We do not knowingly collect personal data directly from children under 16. If you believe a child has provided data directly, contact us and we will delete it promptly.<\/p>\n\n        <h2>9. Tracking and Advertising<\/h2>\n        <p>MyPKU does <strong>NOT<\/strong> use any tracking technologies, advertising SDKs, or analytics services. We do not share data with advertisers or data brokers. We do not participate in cross-app tracking.<\/p>\n\n        <h2>10. Changes to This Policy<\/h2>\n        <p>We may update this privacy policy from time to time. The &#8220;Last updated&#8221; date at the top indicates when the latest changes were made. Continued use of the app after changes constitutes acceptance of the updated policy.<\/p>\n\n        <h2>11. Contact<\/h2>\n        <div class=\"deployit-privacy-contact\">\n            <p>For privacy inquiries or to exercise your data rights, contact us at:<\/p>\n            <p><strong>DeployIT<\/strong><\/p>\n            <p>Email: <a href=\"mailto:contact@deployit.ovh\">contact@deployit.ovh<\/a><\/p>\n        <\/div>\n\n    <\/div>\n\n    <footer class=\"deployit-footer\">\n        &copy; <?php echo esc_html( date( 'Y' ) ); ?> DeployIT. All rights reserved.\n    <\/footer>\n\n    <?php wp_footer(); ?>\n<\/body>\n<\/html>\n","protected":false},"excerpt":{"rendered":"","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-62","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/deployit.ovh\/index.php\/wp-json\/wp\/v2\/pages\/62","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/deployit.ovh\/index.php\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/deployit.ovh\/index.php\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/deployit.ovh\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/deployit.ovh\/index.php\/wp-json\/wp\/v2\/comments?post=62"}],"version-history":[{"count":3,"href":"https:\/\/deployit.ovh\/index.php\/wp-json\/wp\/v2\/pages\/62\/revisions"}],"predecessor-version":[{"id":76,"href":"https:\/\/deployit.ovh\/index.php\/wp-json\/wp\/v2\/pages\/62\/revisions\/76"}],"wp:attachment":[{"href":"https:\/\/deployit.ovh\/index.php\/wp-json\/wp\/v2\/media?parent=62"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}