Chargewise Privacy Notice
Effective date: 7 October 2026 · Data controller: ANKYR+YRD LIMITED, Cayman Islands (privacy@chargewiseapp.net)
This Privacy Notice explains how ANKYR+YRD LIMITED collects, uses, and protects your sensitive health data in compliance with the Cayman Islands Data Protection Act (DPA), UK GDPR, EU GDPR, and US State Consumer Health Data Laws (including Washington MHMDA).
1. Data we collect and purpose
We process personal data solely to provide you with lifestyle pacing and reminder features:
Account data. Email address (used for passwordless sign-in).
Health and lifestyle data. Self-reported symptom logs, check-ins, custom reminders, day-type selections, and (in future versions) wearable metrics.
2. Lawful basis for processing
Because your symptom logs and check-ins constitute special category health data:
UK / EU GDPR: Article 9(2)(a) — explicit consent.
Cayman DPA: Schedule 3 — explicit consent.
US consumer health laws: explicit opt-in consent for collection and processing.
3. Explicit consent mechanisms
Sign-up. Before first use, you are asked to tick a box that reads: "I agree to the Terms of Use and Privacy Notice, and I explicitly consent to ANKYR+YRD LIMITED processing my sensitive health data (symptom logs, check-ins, and pacing reminders) to provide the Chargewise app. I understand I can withdraw consent by deleting my account at any time." You also confirm that you are 18 or older. The time and version of your agreement are recorded.
Weekly summary emails (off by default). If you enable weekly summary emails in Settings, a summary of your self-reported health data is sent via standard email to your registered address. Standard email is not end-to-end encrypted. You may disable this at any time.
4. Infrastructure and international transfers
Cloudflare. App logic runs on Cloudflare Workers, and data is stored isolated per user in Cloudflare D1. Cloudflare processes data under Standard Contractual Clauses (SCCs).
Resend. Transactional emails (sign-in links and opt-in weekly summaries) are dispatched via Resend under standard UK/EU SCC data transfer addenda.
Operator access. ANKYR+YRD LIMITED maintains no administrative interface to browse user health data.
5. Data retention and deletion
User-initiated deletion. You can delete your account and all associated health records instantly within app settings.
Inactivity policy. Accounts inactive for 12 consecutive months are automatically deleted from Cloudflare D1 databases, preceded by an email warning at month 11.
6. User rights and contact
Depending on your jurisdiction (Cayman, UK, EU, or US), you have the right to access, export (CSV format), rectify, or delete your personal data, or revoke consent. Contact privacy@chargewiseapp.net.