Local-First Privacy

Privacy and Security Policy

App: Asystent Praktyki Medycznej (APM)
App version: current Google Play version (number shown in the More tab)
Last updated: September 24, 2026

1. Introduction and data control

Asystent Praktyki Medycznej is built on a Local-First principle — you stay in control of your data, which stays on your device by default, leaving it only through network features you consciously trigger (described in section 3 below). We respect the privacy of healthcare professionals and the protection of data related to running a sole proprietorship (JDG).

2. Data storage (Local-First)

• Local storage by default: All data you enter (shift schedules, your profile, tax ID numbers, invoice data, cost records, drug reference data, and clinical notes) is stored locally by default, on your device, and only sent elsewhere through network features you consciously trigger (section 3 below).
• No external tracking servers: The app does not send your personal, financial or medical data to any external analytics, advertising, or third-party servers, except for the network features described in section 3 below. The app's author uses no telemetry or usage tracking of any kind. Only Google services outside the author's control are involved, as described in the Data safety form on Google Play: the text-recognition library (ML Kit) may send technical operating information and an installation identifier to Google (never the content of your documents), and crash statistics reach Google Play Console in aggregate form if you enable them in Android.

3. Network integrations (optional)

The app offers a few optional features that require an internet connection — each one is triggered exclusively by you, through a manual action in the app. Outside of these, the app never connects to any server.

• KSeF 2.0 (Polish National e-Invoicing System): encrypted data exchange directly between your device and the official Polish Ministry of Finance gateway (KSeF API), only when you manually send an invoice. The app's author does not act as an intermediary in this communication and has no visibility into it.
• Business/Tax ID lookup (wl-api.mf.gov.pl): when you search for an organization by its tax ID (NIP), the app queries only the official, public "VAT Payers Registry" API operated by the Polish Ministry of Finance.
• ZUS contribution rates (ZUS.pl, Dane.gov.pl): retrieves only publicly available contribution-rate tables — none of your own data is sent along with this request.
• Google Drive backup (optional, requires Google sign-in): the app uses only the drive.appdata access scope — a special, hidden area of Google Drive reserved for app data, not visible in your regular Google Drive view; APM does not gain access to your other files. The backup (the same file as the local export) is stored exclusively in your own private Google Drive; we have no access to it.
• "Feedback and suggestions" form (optional): if you choose to send feedback, the message content and the (optional) reply email address you provide are submitted to a Google Form managed by the app's author. This is the only feature through which the app's author receives any data from you — and only when you choose to send it.
• Premium subscription (Google Play Billing): purchasing, renewing and cancelling the subscription is handled exclusively by Google Play (Google LLC / Google Commerce Ltd for EU users) — the app never sees or stores your payment card details or other billing data. Subscription status is read directly from Google Play when the app starts or resumes, and stored only locally on your device. Detailed subscription terms are described in the Terms of Service (Polish only).

4. GDPR

The app does not maintain patient records, nor does it store data entered into medical calculators (e.g. age, weight, test results) as data linked to a specific patient — it is used only for a one-time, local calculation shown on the calculator screen and is never saved anywhere. Documents (invoices, hours reports) are generated for healthcare organizations (hospitals, clinics) or B2B counterparties, not for individual patients. You retain full rights to view, export (JSON format), and permanently delete all your data - with one button in the app (App settings → “Your data” → “Delete all my data”), by uninstalling the app, or by choosing Apps → Asystent Praktyki Medycznej → Storage → Clear data in Android settings (you can remove the Google Drive copy in your Google account settings).

If you choose to voluntarily provide your email address in the "Feedback and suggestions" form (see section 3 above), the data controller is Sławomir Gallewicz (operating under the brand Harmoniq Works), the app's author (contact: apm.support.polska@gmail.com). Your email address is used solely to reply to your feedback, based on the consent you give by providing it. The form is technically handled by Google Forms, so the data also passes through Google's infrastructure, subject to Google's own privacy terms. Data is kept for as long as needed to handle your request, and may be deleted afterwards. You have the right to access, rectify, and erase your data, restrict its processing, object to processing, and lodge a complaint with your local data protection authority (in Poland, the President of the Personal Data Protection Office, UODO) — contact us at the address in section 6 below to exercise these rights.

5. Security

The app supports a local PIN lock and biometric unlock (fingerprint / face recognition, exclusively through the native operating system mechanism — APM never stores or sees your fingerprint or face data), protecting against unauthorized access to the app while on duty. The PIN is never stored in plain text — including in backups — the app only stores an irreversible hash created using the PBKDF2 algorithm with a random salt.

6. Contact

For questions about this privacy policy or how the app works:
Email: apm.support.polska@gmail.com

← Back to homepage