UroTrax · The simple bladder diary
Privacy Policy
UroTrax is published by Hoefer Designs LLC. This policy describes the UroTrax app and this website. Website browsing and support communications may involve separate website or service-provider practices. For UroTrax, this policy controls over conflicting provisions of our general privacy policy.
Information stored in the app
UroTrax stores the information you enter, including drinks, bathroom visits, bowel movements, leakage, protection changes, food, medicines, notes, and associated dates and times. It also stores your app preferences and whether you accepted the initial terms. These records can contain sensitive health information.
Your diary is stored locally in an encrypted database. Its encryption key is kept in the device Keychain. UroTrax currently provides no account, developer-operated diary server, automatic diary upload, or cloud-sync feature. We do not receive your diary through normal logging. UroTrax does not use analytics, advertising, or tracking SDKs. We do not sell your diary information or use it for advertising.
Device unlock and privacy controls
You can enable device unlock to require Face ID or your iPhone passcode when opening your diary. iOS handles biometric authentication; UroTrax does not receive your facial images or biometric templates. With device unlock disabled, someone who can use your unlocked device can open the diary. No security measure provides an absolute guarantee.
Quick Hide covers the diary with a fictional, editable expenses worksheet. The cover setting stays after relaunch. It is a screen cover, not a separate app or a guarantee of concealment; the app icon and exported files remain visible. Returning requires authentication when device unlock is enabled.
Reports and sharing
When you create a PDF or CSV report, UroTrax writes an unencrypted report to temporary app storage. These files may remain until removed by the operating system or app removal. You choose whether and where to share them using the system share sheet. The receiving app or person controls its copy under its own practices. Hide Incontinence changes the Log and Trends display; it does not redact exported reports.
Retention, deletion, and recovery
Diary records stay in the app until you delete entries or use Delete all diary data in Settings. That action deletes the diary database and its keys. It currently does not explicitly remove cached report files, and it cannot delete copies you saved or shared elsewhere. We do not maintain a server copy from which we can recover your diary. Device backups and restores are controlled by the operating system and your settings; do not rely on them to recover a usable diary or its encryption key.
Support and platform services
If you email us, we receive your email address and information you include. Please avoid sending diary reports or sensitive details unless necessary for your request. We use support messages to respond and address the issue. Apple may separately process store, TestFlight, or diagnostic information under its policies and your settings. We may receive diagnostic information that Apple makes available to developers.
This product website
This website introduces UroTrax and provides product and legal information. We do not use analytics, advertising, or tracking scripts on this product page. Our hosting provider may process technical request information, such as IP addresses and server logs, to deliver and secure the website. Emailing us shares the information described under Support above.
Changes and contact
We will update this policy when our practices change and identify the effective date. Contact Hoefer Designs LLC at dangsimple@hoefer.dev with privacy questions or requests concerning information you sent us. We cannot access or remotely delete the diary stored on your device.