Local-First Privacy

Privacy and Security Policy

App: Asystent Praktyki Medycznej (APM)
App version: 1.1.0 (build number visible in Settings > About)
Last updated: August 6, 2026

1. Introduction and data control

Asystent Praktyki Medycznej is built on a Local-First principle — your data belongs to you and stays on your device. We respect the privacy of healthcare professionals and the protection of data related to running a sole proprietorship (JDG).

2. Data storage (Local-First)

• Local storage only: All data you enter (shift schedules, your profile, tax ID numbers, invoice data, cost records, drug reference data, and clinical notes) is stored exclusively on your device.
• No external tracking servers: The app does not send your personal, financial or medical data to any external analytics, advertising, or third-party servers. There is no telemetry or usage tracking of any kind.

3. Network integrations (optional)

The app offers a few optional features that require an internet connection — each one is triggered exclusively by you, through a manual action in the app. Outside of these, the app never connects to any server.

• KSeF 2.0 (Polish National e-Invoicing System): encrypted data exchange directly between your device and the official Polish Ministry of Finance gateway (KSeF API), only when you manually send an invoice. The app's author does not act as an intermediary in this communication and has no visibility into it.
• Business/Tax ID lookup (wl-api.mf.gov.pl): when you search for an organization by its tax ID (NIP), the app queries only the official, public "VAT Payers Registry" API operated by the Polish Ministry of Finance.
• ZUS contribution rates (ZUS.pl, Dane.gov.pl): retrieves only publicly available contribution-rate tables — none of your own data is sent along with this request.
• Google Drive backup (optional, requires Google sign-in): the app requests only the drive.appdata access scope — a hidden, app-specific folder that is not visible in your regular Google Drive view and is not accessible to any other app or to us. The backup (the same file as the local export) is stored exclusively in your own private Google Drive; we have no access to it.
• "Feedback and suggestions" form (optional): if you choose to send feedback, the message content and the (optional) reply email address you provide are submitted to a Google Form managed by the app's author. This is the only feature through which the app's author receives any data from you — and only when you choose to send it.

4. GDPR

The app does not collect patient data — documents (invoices, hours reports) are generated for healthcare organizations (hospitals, clinics) or B2B counterparties, not for individual patients. You retain full rights to view, export (JSON format), and permanently and immediately delete all your data from within the app's Settings.

5. Security

The app supports a local PIN lock (hashed using PBKDF2 with a random salt, never stored in plain text) and biometric unlock (fingerprint / face recognition, exclusively through the native operating system mechanism), protecting against unauthorized access to the app while on duty. Even in backups, the PIN is never stored in plain text — only as an irreversible hash (PBKDF2, random salt).

6. Contact

For questions about this privacy policy or how the app works:
Email: apm.support.polska@gmail.com

← Back to homepage