Andy Arevalo

Privacy Policy

Last Updated: May 2026

Andy Arevalo ("we," "us," or "our") is committed to protecting your privacy. This policy covers all our iOS, iPadOS, watchOS, and macOS apps: Student Guardian (SchoolSync), OnTime Speaker Pro, OnStage Timer Pro, Not Another Twin Calculator, Not Another Stage Timer, Not Another Countdown, Not Another Fasting Timer, Not Another Coloring Book, Duse – Habit Tracker, ThermoTimer, RoadWatch CA, CareLedger, PawLedger, PetSitterPro, Healko, Kickoff (Weight Loss & Fitness), NetForge: Engineer's Toolkit, and future releases.

1. Our Privacy Principles

Our apps are designed to keep your personal data on your device wherever possible. We follow these principles across the whole portfolio:

Some apps DO need to access specific data on-device or send specific information to a service in order to work — for example, PetSitterPro needs GPS to record a pet-sitting visit, CareLedger sends a prescription image to our AI processing service when you tap "Scan", and Healko reads selected Apple Health metrics with your explicit permission. Those flows are described per-app in Section 3.

2. Google API Services Usage (Student Guardian)

Student Guardian (SchoolSync) uses Google API Services to provide email synchronization functionality. This section describes our use of Google user data in compliance with the Google API Services User Data Policy.

2.1 Data We Access

When you connect your Gmail account, we request access to:

2.2 How We Use Google User Data

Your Google data is used exclusively to:

Important: We do NOT use your Google data for advertising, marketing, or any purpose unrelated to the app's core functionality of organizing school communications.

2.3 Data Storage and Protection

Your Google data is protected through multiple security measures:

2.4 Data Retention and Deletion

2.5 AI/ML Training Disclosure

We do NOT use Google user data for AI or machine learning model training. When you request an AI summary of an email, the email content is processed in real-time and is not stored or used to train any models. The AI summarization feature uses third-party APIs that process data ephemerally and do not retain your content.

2.6 Third-Party Sharing

We do not share, sell, or transfer your Google user data to third parties except:

3. Per-App Data Flows

The following table summarizes what each app accesses, where it stores data, and what (if anything) it sends to a network service. All on-device data stays on your device unless you explicitly export or share it.

3.0 On-device storage (all apps)

3.1 RoadWatch CA — Location data

RoadWatch CA requests location permission to show traffic cameras near you, calculate distances, and sort by proximity. Location data stays on your device. Camera images are fetched directly from the public Caltrans API. We do not track location history, do not send location to our servers, and do not have any servers in the loop for RoadWatch CA at all.

3.2 CareLedger — Health data and AI scanning

CareLedger handles sensitive health-related information for personal and family medication management:

Important: CareLedger is a personal health-tracking utility for individual and family use. It is NOT HIPAA-compliant, does not provide medical advice, and should not be used by healthcare providers or covered entities. Always consult a qualified healthcare provider for medical decisions.

3.3 PawLedger — Pet health data and AI med-info

PawLedger stores pet health records (vaccinations, medications, weight, vet visits, photos) on-device. AI features that look up medication information send the medication name (text only) to our Cloudflare Worker proxy (see Section 5) for forwarding to an upstream AI provider. We do not store pet health records on our servers. PawLedger is not a veterinary diagnostic tool and does not provide veterinary advice.

3.4 PetSitterPro — Location, calendar, photos, biometric, contacts

PetSitterPro is a business tool for independent pet sitters. With your explicit permission per iOS prompts, it accesses:

None of the above is transmitted to our servers; reports and invoices are generated on-device and shared via Apple's standard share sheet when you choose to send them.

3.5 Healko — Apple Health and Home Assistant bridge

Healko is a home-automation utility that bridges Apple Health to a Home Assistant instance you control. With your explicit permission per iOS prompts:

Important: Healko is a home-automation utility, not a medical device. It does not diagnose, treat, cure, or prevent any disease. The values displayed are the same metrics already stored in Apple Health on your device. Always consult a qualified healthcare provider for medical advice.

3.6 Kickoff — HealthKit and match-data fetching

Kickoff is a weight-loss and fitness tracker. With your explicit permission via iOS, it may read weight and body-fat values from Apple Health and write back any weight you log in-app. When you connect a league URL, Kickoff fetches public match data directly from that URL; no Kickoff servers are involved in this loop. All entries are stored on-device. Kickoff is not medical advice; do not use it to make medical decisions.

3.7 Student Guardian — Email, OAuth, calendar, AI summaries

Student Guardian uses Apple Sign-in plus IMAP / Gmail OAuth to read school-related emails you select. Email content is cached locally for offline access. With your explicit action, the app can send a specific email's text to our Cloudflare Worker proxy (see Section 5) for AI summarization. Section 2 above describes the Gmail-specific flow in more detail; this section applies equally to other email providers if connected.

3.8 NetForge — Network diagnostics on your behalf

NetForge runs network-diagnostic operations (DNS lookups, ping, traceroute, port scans, TLS inspection, etc.) on behalf of you, against hosts and IPs that you type in. The app sends those network requests directly from your device to the target host. Results are stored on-device. NetForge does not collect telemetry about the targets you scan, does not phone home, and does not send any of your queries to our servers.

3.9 Apps with no network use

The following apps operate entirely on-device with no network requests except where you explicitly initiate sharing: Not Another Twin Calculator, Not Another Stage Timer, Not Another Countdown, Not Another Fasting Timer, Not Another Coloring Book, Duse, ThermoTimer, OnStage Timer Pro, OnTime Speaker Pro.

4. Payment Processing

All transactions occur through Apple's system using your Apple ID. We receive only anonymized subscription status from Apple, never your payment details. Apple's own Privacy Policy applies to that transaction.

5. Service Providers

For the apps that have AI features (CareLedger prescription scanning + medication info, PawLedger pet-med info, Student Guardian email summaries), we operate a Cloudflare Worker proxy that receives the specific request from your device and forwards it to a third-party AI provider for processing. The Worker:

The upstream AI provider (a major commercial LLM vendor) processes each request ephemerally and is contractually prohibited from training on or retaining the data per its enterprise API terms. We do not allow data to be used for model training under any circumstances.

5.1 What this means in practice

If you never tap the AI scan / AI summary buttons, no data leaves your device for these flows. The Cloudflare Worker is only invoked when you initiate an AI feature.

5.2 No third-party analytics SDKs

Our apps do not include Google Analytics, Firebase Analytics, advertising SDKs, social plugins, or behavioral tracking tools. The Cloudflare Worker described above is operational infrastructure for specific AI features, not an analytics service.

6. User-Initiated Data Sharing

Exported information (such as timer reports via email/messages or shared calendar events) remains outside our control once shared.

7. Child Safety

Our apps contain no child-specific data collection mechanisms. Student Guardian is designed for adults (parents or students) to manage school communications they receive; the app does not actively collect, profile, or process children's personal data.

8. Data Security

We implement industry-standard security measures to protect your data:

9. Your Rights

You have the right to:

10. Policy Updates

Changes will be published on this page with an updated "Last Updated" date. Continued use of our apps after changes constitutes acceptance of the updated policy.

11. Contact

For privacy-related questions or to exercise your data rights:

Email: [email protected]
We typically respond within 48 hours.