Terms & Privacy Policy
Full legal documentation for Praepara Health Suite, the Windows desktop application by Modus Creatio L.L.C., distributed via the Microsoft Store. This document is separate from, and does not apply to, the Praepara Health Suite mobile app.
TERMS & CONDITIONS
Jump to a section
- 1. ACCEPTANCE OF TERMS
- 2. LOCAL-ONLY ARCHITECTURE — CRITICAL UNDERSTANDING
- 3. ASSUMPTION OF RISK — DATA EXPOSURE
- 4. FDA & REGULATORY STATUS
- 5. LICENSE
- 6. FREE APP — NO CHARGE
- 7. NOT MEDICAL ADVICE — CONTACT YOUR DOCTOR
- 8. HEALTH DATA ACCURACY DISCLAIMER
- 9. GENERATED CONTENT — GUIDES ONLY, NOT LEGAL OR MEDICAL DOCUMENTS
- 10. THIRD-PARTY INTEGRATIONS
- 11. DISCLAIMER OF WARRANTIES
- 12. LIMITATION OF LIABILITY — DATA EXPOSURE
- 13. GENERAL LIMITATION OF LIABILITY
- 14. DATA RESPONSIBILITY & BACKUPS
- 15. INDEMNIFICATION
- 16. DISPUTE RESOLUTION & ARBITRATION
- 17. GENERAL PROVISIONS
- 18. CHANGES TO TERMS
- 19. CONTACT
THIS APP IS A PERSONAL HEALTH TRACKING TOOL AND NOTHING MORE. IT IS NOT MEDICAL ADVICE. IT IS NOT LEGAL ADVICE. IT IS NOT A SUBSTITUTE FOR A DOCTOR, NURSE, PHARMACIST, ATTORNEY, OR ANY OTHER LICENSED PROFESSIONAL.
EVERYTHING IN THIS APP — EVERY NUMBER, RANGE, LETTER, DOCUMENT, SUGGESTION, ALERT, OR PIECE OF INFORMATION — IS A GUIDE TO HELP YOU ORGANIZE AND UNDERSTAND YOUR OWN HEALTH INFORMATION. NOTHING IN THIS APP TELLS YOU WHAT TO DO. ALWAYS CONTACT A LICENSED HEALTHCARE PROVIDER WITH ANY MEDICAL QUESTION.
USE OF THIS APP IS ENTIRELY AT YOUR OWN RISK. MODUS CREATIO L.L.C. AND ITS MEMBERS, OFFICERS, AND AGENTS BEAR ZERO LIABILITY FOR ANY CONSEQUENCE OF YOUR USE OF THIS APP. IF YOU DO NOT AGREE, DO NOT USE THIS APP.
IN A MEDICAL EMERGENCY, CALL 911 IMMEDIATELY. DO NOT CONSULT THIS APP.
THIS APP IS PROVIDED STRICTLY ON AN “AS IS, AS AVAILABLE” BASIS. MODUS CREATIO L.L.C. OPERATES NO SERVERS THAT STORE YOUR HEALTH DATA. ALL DATA RESIDES ON YOUR DEVICE. WE MAKE NO WARRANTIES — EXPRESS, IMPLIED, OR STATUTORY — REGARDING DATA SECURITY, ACCURACY, OR UNINTERRUPTED OPERATION. YOU ASSUME FULL, SOLE, AND EXCLUSIVE RESPONSIBILITY FOR ANY AND ALL CONSEQUENCES OF USING THIS APP, INCLUDING ANY EXPOSURE OF DATA STORED ON YOUR DEVICE.
PRAEPARA HEALTH IS NOT A MEDICAL DEVICE. IT HAS NOT BEEN REVIEWED, CLEARED, OR APPROVED BY THE FDA. IT DOES NOT PROVIDE MEDICAL ADVICE, DIAGNOSIS, OR TREATMENT OF ANY KIND.
1. ACCEPTANCE OF TERMS
By downloading, installing, or using Praepara Health (“App”), you affirmatively confirm that you have read, understood, and agree to be bound by these Terms & Conditions (“Terms”) and our Privacy Policy, incorporated herein by reference. Your continued use constitutes renewed acceptance each session.
IF YOU DO NOT AGREE TO EVERY PROVISION OF THESE TERMS, YOU MUST IMMEDIATELY CEASE USE AND UNINSTALL THE APP.
These Terms constitute a legally binding contract between you (“User”) and Modus Creatio L.L.C., a limited liability company (“Company,” “we,” “us,” or “our”). You represent and warrant that you are at least 18 years of age and legally competent to enter into binding contracts in your jurisdiction.
2. LOCAL-ONLY ARCHITECTURE — CRITICAL UNDERSTANDING
YOU ACKNOWLEDGE AND AGREE THAT:
(a) NO SERVER STORAGE: Modus Creatio L.L.C. operates no database, cloud server, or back-end infrastructure that receives, stores, processes, or transmits your health data. All health information you enter is stored exclusively on your device, in a database encrypted with SQLCipher (256-bit AES), with the encryption key itself protected by the Windows Data Protection API (DPAPI), scoped to your specific Windows user account.
(b) ZERO POSSESSION BY COMPANY: Because your health data never leaves your device to reach our systems, Modus Creatio L.L.C. legally possesses none of your health information. We therefore have no ability — technical or otherwise — to access, read, modify, breach, leak, or recover your data.
(c) ARCHITECTURE AS YOUR PROTECTION: The local-only design means there is no Modus Creatio server or database to be breached, subpoenaed, hacked, or sold. The security of your data depends entirely on the physical and logical security of your personal device and Windows user account.
(d) OPTIONAL BACKUP GOES TO A FOLDER YOU CHOOSE: If you enable backup, the App writes an encrypted copy of your database to a folder on your own device that you select — the App has no cloud account of its own and does not transmit data to any server we control. The backup file is re-encrypted with a passphrase you create; we never see, store, or have any way to recover that passphrase. If the folder you chose happens to be synced by a cloud client you’ve separately installed (such as OneDrive), any further transmission is governed by that provider’s own terms, not ours. Modus Creatio L.L.C. cannot access, read, or modify your backup files at any time.
(e) ACKNOWLEDGMENT OF TRADE-OFF: By choosing a local-only architecture, you gain privacy from server breaches at the cost of placing all device-level security responsibility on yourself. You expressly acknowledge, understand, and accept this trade-off.
3. ASSUMPTION OF RISK — DATA EXPOSURE
YOU EXPRESSLY ASSUME ALL RISK OF DATA EXPOSURE. Without limiting Section 2, you specifically acknowledge and accept the following known risks:
(a) PHYSICAL DEVICE ACCESS: Any person who gains physical access to your unlocked device or signed-in Windows account can access App data. We are not liable for data accessed by unauthorized persons who have physical access to your device.
(b) DEVICE THEFT OR LOSS: If your device is lost or stolen, all health data stored on it is potentially accessible to whoever gains access to your Windows account. Enabling full-disk encryption (e.g., BitLocker) and a strong account password mitigates but does not eliminate this risk. We are not responsible for data exposure resulting from device loss or theft.
(c) COMPROMISED OR MODIFIED SYSTEMS: The encryption protecting App data depends on the integrity of your Windows installation and user account. USING THIS APP ON A COMPROMISED, MALWARE-INFECTED, OR OTHERWISE UNTRUSTED SYSTEM IS DONE ENTIRELY AT YOUR OWN RISK. We make no representation that your data is protected on such a system and we bear zero liability for data exposure on a compromised device.
(d) MALWARE AND DEVICE COMPROMISE: Malicious software installed on your device may, in some configurations, gain access to application data or your Windows account. We are not responsible for data exposure caused by malware, spyware, stalkerware, remote access tools, or other malicious software on your device.
(e) SCREEN RECORDING AND SCREENSHOTS: The App does not implement screenshot- or screen-recording-blocking on Windows. Anyone with access to your screen while the App is open, including via remote-access or screen-recording software, may view displayed data. We are not liable for data captured via screen recording or screenshots.
(f) SHARED DEVICES OR ACCOUNTS: If you use this App on a shared, household, or employer-owned device or Windows account, other persons with access to that account may view App data. Use on non-personal devices or accounts is at your sole risk.
(g) BACKUP SECURITY: If you enable optional backup, the security of your backup file depends on the security of the folder and device you chose for it, the strength and secrecy of the passphrase you created for it, and, if that folder is synced by a third-party cloud provider you’ve separately installed, that provider’s own security practices and your account security with them. We are not responsible for unauthorized access to your backup file or the folder/provider you chose to store it in.
(h) UNAUTHORIZED ACCESS IS A CRIME, NOT OUR FAULT: Unauthorized access to data stored on your device by a third party constitutes a violation of the Computer Fraud and Abuse Act (18 U.S.C. § 1030) and analogous state statutes. Such access is a crime committed by the attacker — not a failure of Modus Creatio L.L.C. We bear no liability for criminal intrusions into your device.
BY USING THIS APP, YOU ACKNOWLEDGE THESE RISKS, AFFIRMATIVELY ASSUME THEM, AND RELEASE MODUS CREATIO L.L.C. FROM ANY AND ALL CLAIMS ARISING FROM DATA EXPOSURE CAUSED BY ANY OF THE ABOVE CIRCUMSTANCES.
4. FDA & REGULATORY STATUS
This application is NOT a medical device as defined by the U.S. Food, Drug, and Cosmetic Act (21 U.S.C. § 321(h)) and has NOT been reviewed, cleared, or approved by the U.S. Food and Drug Administration (FDA).
Praepara Health qualifies as a general wellness application under FDA’s guidance on Mobile Medical Applications (2019) and General Wellness Policy (2019). It is designed to help individuals track self-reported health information for personal awareness. It is NOT intended to:
• Diagnose, cure, mitigate, treat, or prevent any disease or health condition
• Serve as a substitute for professional medical care
• Make clinical decisions or recommendations
• Be used as a medical record or as legally admissible medical evidence
The FTC requires that health claims be truthful and substantiated. We make no therapeutic or diagnostic claims.
5. LICENSE
We grant you a free, limited, personal, non-exclusive, non-transferable, revocable license to download, install, and use the App on a device you own or control, solely for your personal, non-commercial health management purposes. The App is provided at no charge.
You may NOT:
• Copy, modify, distribute, sell, or sublicense the App
• Reverse engineer, decompile, or extract source code (except as permitted by applicable law)
• Use the App to provide commercial health services without written permission
• Remove proprietary notices
• Use the App in violation of applicable law
6. FREE APP — NO CHARGE
Praepara Health is provided completely free of charge. There are no subscription fees, in-app purchases, premium tiers, or hidden costs of any kind. All features are available to all users at no cost.
Modus Creatio L.L.C. makes no money from this App and does not monetize your data. The App is offered as a free public health resource.
We reserve the right to introduce optional features or complementary products in the future. Any such features will be clearly disclosed and will not restrict existing functionality, which will remain free.
7. NOT MEDICAL ADVICE — CONTACT YOUR DOCTOR
THIS APP IS A GUIDE. IT IS NOT MEDICAL ADVICE. PERIOD.
ALL CONTENT IN THE APP — including health reference ranges, trend indicators, condition information, drug interaction data, prescription pricing, generated documents, and Doctor Report compilations — IS PROVIDED SOLELY AS A PERSONAL TRACKING AND ORGANIZATIONAL AID. IT DOES NOT CONSTITUTE PROFESSIONAL ADVICE OF ANY KIND UNDER ANY CIRCUMSTANCES.
NOTHING IN THIS APP CONSTITUTES:
• Medical advice, diagnosis, or treatment
• A doctor-patient or provider-patient relationship of any kind
• Legal advice or the creation of an attorney-client relationship
• Financial advice
• A prescription, dosing recommendation, or clinical protocol
• A second opinion or clinical validation of any kind
FOR ANY MEDICAL QUESTION — no matter how minor it seems — CONTACT A LICENSED HEALTHCARE PROVIDER. Do not rely on this App. Do not interpret this App’s outputs as confirming or denying any health condition.
ALWAYS consult a qualified doctor, nurse, or pharmacist before:
• Starting, stopping, or adjusting any medication or supplement
• Making any health or treatment decision based on readings or trends in this App
• Acting on any drug interaction alert shown in this App
• Interpreting any reference range, clinical scale score, or health summary
THIS APP DOES NOT KNOW YOUR FULL MEDICAL HISTORY. Reference ranges and alerts are general population guidelines — they may not apply to you. Your physician’s clinical judgment and direct instructions always take precedence over anything displayed in this App.
NEVER ignore professional medical advice or delay seeking emergency care because of anything in this App. IF YOU ARE EXPERIENCING A MEDICAL EMERGENCY, CALL 911 IMMEDIATELY. DO NOT CONSULT THIS APP.
8. HEALTH DATA ACCURACY DISCLAIMER
DATA YOU ENTER MAY CONTAIN ERRORS. The App does not and cannot validate the accuracy of data you enter. We are not responsible for any consequence arising from inaccurate, incomplete, or erroneously entered health data.
REFERENCE RANGES: General population guidelines from bodies such as the AHA, ADA, and WHO are displayed as contextual references only. These may not apply to your individual clinical situation. Your physician’s specific instructions take precedence over any range displayed in this App.
CLINICAL SCALES (PHQ-9, GAD-7, MIDAS, ILAE, Bristol, etc.): These are validated screening tools, not diagnostic instruments. A score generated by the App is not a diagnosis. All results must be interpreted by a qualified clinician in the context of a full clinical assessment.
MEDICATION AND PRODUCT LOOKUP DATA: Drug and product name/dosage information returned by the App’s lookup feature is sourced from public FDA and Open Food Facts databases based on a code you type in, and is not exhaustive or guaranteed current. Pricing data is sourced from a public federal wholesale pricing dataset and does not reflect retail prices you will actually pay. The App does not itself compute or check for interactions between your medications — the Drug Interaction tool only opens external reference sites in your browser for that purpose (see Section 10). Always consult a pharmacist or physician before starting, stopping, or combining any medication or supplement.
WE EXPRESSLY DISCLAIM ALL LIABILITY for clinical decisions, medication changes, or health outcomes arising from reliance on any data, reference range, scale score, or lookup result displayed in the App.
9. GENERATED CONTENT — GUIDES ONLY, NOT LEGAL OR MEDICAL DOCUMENTS
THIS APP GENERATES TEMPLATE-BASED DOCUMENTS INCLUDING HIPAA RECORDS REQUEST LETTERS, ADA ACCOMMODATION LETTERS, INSURANCE APPEAL LETTERS, PRE-VISIT SUMMARIES, AND DOCTOR REPORTS.
EVERY DOCUMENT GENERATED BY THIS APP IS A GUIDE TO HELP YOU GATHER AND ORGANIZE YOUR THOUGHTS. NOTHING MORE.
SPECIFICALLY:
• Generated letters and documents ARE NOT legal documents, legal advice, or the work product of an attorney. No attorney-client relationship is formed.
• Generated letters and documents ARE NOT medical records, clinical summaries, or the work product of a healthcare provider. No provider-patient relationship is formed.
• Generated letters do NOT guarantee any outcome — not insurance approval, not accommodation grants, not records release, not any other result.
• These documents are STARTING POINTS. You must review, verify, edit, and independently evaluate every generated document before using it.
• You bear SOLE AND EXCLUSIVE RESPONSIBILITY for the content of any document you send, file, or submit.
• We are NOT liable — in any amount, for any reason — for any insurance decision, medical outcome, employment decision, legal consequence, financial result, or any other outcome arising from any document generated by this App.
IF YOU NEED LEGAL ADVICE, CONSULT A LICENSED ATTORNEY. IF YOU NEED MEDICAL ADVICE, CONSULT A LICENSED HEALTHCARE PROVIDER. THIS APP IS NOT A SUBSTITUTE FOR EITHER.
The Doctor Report compiles your self-entered data only. It is not a clinical record, is not signed by a provider, and carries no medical or legal authority. You share it via your chosen method — we never transmit it on your behalf.
10. THIRD-PARTY INTEGRATIONS
The App integrates third-party data sources provided ‘as-is.’ We do not control their accuracy, availability, or terms and are not responsible for their content:
• FDA openFDA API (api.fda.gov): Medication code lookup returning drug name and dosage from the FDA NDC and drug label databases; results are informational only and may not reflect all products or formulations; no personal data is transmitted
• Open Food Facts (world.openfoodfacts.org): Supplement and OTC product code lookup; community-maintained database; accuracy is not guaranteed; no personal data is transmitted
• CMS NPI Registry (npiregistry.cms.hhs.gov): Public federal provider/facility lookup by ZIP code and search text; no personal data is transmitted
• CMS NADAC Dataset (data.medicaid.gov): Public federal wholesale drug pricing lookup by drug name; not retail pricing, and no personal data is transmitted
• GoodRx (goodrx.com): Tapping a pricing link opens GoodRx’s public website in your own web browser; the App does not transmit data to GoodRx itself; price estimates only, actual prices vary
• ClinicalTrials.gov (clinicaltrials.gov): The Clinical Trial Finder opens a pre-filled search on ClinicalTrials.gov’s own website in your browser; the App does not call any ClinicalTrials.gov API itself
• Drug interaction reference sites (Drugs.com, IU School of Medicine, Medscape): The Drug Interaction tool opens one of these sites’ own interaction-checker page in your browser, pre-filled with the drug names you entered; the App does not compute interactions or transmit your medication list on its own
• External advocacy websites linked within the App, including curated directories of patient-assistance, price-transparency, survivorship, financial-assistance, and hair-loss and appearance-support organizations in the Advocacy and Cancer Care sections: Third-party content; we do not endorse or guarantee accuracy
• MicroDicom (optional, a local application, not a website): The Imaging section’s “Open in MicroDicom” button, if you use it and have MicroDicom installed, decrypts the selected study to a temporary folder and launches MicroDicom to view it — the only integration in the App where an outside application, not a website, receives your actual imaging data. Runs entirely on your device with nothing uploaded anywhere. The temporary decrypted copy is deleted when you close MicroDicom, with a sweep at the next App launch as a backstop; this cleanup is best-effort, not guaranteed — see Section 9 for what that means. Tapping “Open download page” when MicroDicom is not installed opens microdicom.com in your browser.
We do not integrate advertising SDKs, analytics platforms, crash-reporting services, or any service that receives your health data.
11. DISCLAIMER OF WARRANTIES
TO THE FULLEST EXTENT PERMITTED BY APPLICABLE LAW, THE APP IS PROVIDED STRICTLY “AS IS” AND “AS AVAILABLE” WITHOUT ANY WARRANTY OF ANY KIND, WHETHER EXPRESS, IMPLIED, STATUTORY, OR OTHERWISE.
MODUS CREATIO L.L.C. EXPRESSLY DISCLAIMS ALL WARRANTIES, INCLUDING WITHOUT LIMITATION:
(a) IMPLIED WARRANTIES: All implied warranties of merchantability, fitness for a particular purpose, title, and non-infringement are hereby disclaimed to the maximum extent permitted by law, including under UCC § 2-316 and any analogous state or foreign law.
(b) SECURITY WARRANTIES: WE MAKE NO WARRANTY, EXPRESS OR IMPLIED, THAT THE APP IS FREE FROM SECURITY VULNERABILITIES, THAT DATA STORED ON YOUR DEVICE WILL REMAIN SECURE, OR THAT UNAUTHORIZED ACCESS TO YOUR DEVICE OR DATA WILL NOT OCCUR. Because all data is stored on your device — not our servers — the security of your data is dependent on your device security, which is beyond our control.
(c) ACCURACY WARRANTIES: We make no warranty that health reference ranges, drug interaction data, clinical scale interpretations, or any other informational content is accurate, complete, current, or appropriate for your individual situation.
(d) AVAILABILITY WARRANTIES: We make no warranty of uninterrupted, error-free, or virus-free operation.
(e) RESULTS WARRANTIES: We make no warranty that use of the App will improve your health, prevent disease, or produce any particular health management outcome.
SOME JURISDICTIONS DO NOT ALLOW THE EXCLUSION OF IMPLIED WARRANTIES. WHERE SUCH EXCLUSIONS ARE PROHIBITED, THEY APPLY ONLY TO THE EXTENT PERMITTED BY APPLICABLE LAW.
12. LIMITATION OF LIABILITY — DATA EXPOSURE
BECAUSE MODUS CREATIO L.L.C. DOES NOT STORE, TRANSMIT, POSSESS, OR CONTROL YOUR HEALTH DATA, WE BEAR NO LIABILITY OF ANY KIND FOR:
(a) Unauthorized access to health data stored on your device, whether caused by theft, loss, malware, rooting, device sharing, screen recording, side-channel attacks, or any other vector;
(b) Disclosure of health data resulting from your voluntary use of the optional backup feature, including any breach of the folder, device, or third-party cloud-sync account you chose to store it in;
(c) Disclosure of health data resulting from your use of the Doctor Report feature to share compiled health information with any third party;
(d) Data loss resulting from device failure, App crash, OS update, uninstallation, or any other cause;
(e) Any consequence — medical, financial, legal, or otherwise — of data you enter being inaccurate, incomplete, or misinterpreted;
(f) Any consequence of relying on reference ranges, drug interaction alerts, clinical scale results, or generated documents within the App.
THE LEGAL BASIS FOR THESE LIMITATIONS: Under established data security liability principles (see, e.g., Dittman v. UPMC, 196 A.3d 1036 (Pa. 2018)), liability for data breaches attaches to entities that possess and control the data at issue. Because Modus Creatio L.L.C. neither possesses nor controls your health data — which resides exclusively on your device — we are not the proximate or but-for cause of any unauthorized access to that data.
13. GENERAL LIMITATION OF LIABILITY
TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW:
MODUS CREATIO L.L.C., ITS OFFICERS, DIRECTORS, EMPLOYEES, AGENTS, LICENSORS, AND SERVICE PROVIDERS SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, INCLUDING WITHOUT LIMITATION: lost health outcomes, lost data, lost profits, lost goodwill, medical expenses, legal fees, or personal injury arising from use of the App, even if advised of the possibility of such damages.
TOTAL AGGREGATE LIABILITY: Because the App is provided free of charge, our total liability to you for all claims arising from or relating to these Terms or the App shall not exceed USD $10.00.
ESSENTIAL BASIS OF BARGAIN: You acknowledge that the limitations in this section reflect a reasonable allocation of risk and are an essential element of the basis of the bargain between the parties. Without these limitations, we would not provide the App.
JURISDICTIONAL EXCEPTIONS: Some jurisdictions do not allow limitation or exclusion of certain damages. Where such limitations are prohibited by applicable mandatory law, they apply only to the fullest extent permitted.
14. DATA RESPONSIBILITY & BACKUPS
YOU ARE SOLELY AND EXCLUSIVELY RESPONSIBLE FOR:
• Maintaining adequate backups of your health data (we strongly recommend enabling the App’s optional encrypted backup feature in Settings)
• Choosing a strong, secret passphrase for your backup, and keeping it safe — we cannot recover it if lost
• Securing your device and Windows account with a strong password and full-disk encryption
• Ensuring that other persons cannot access your device or Windows account
• Deciding whether to use the App on a shared or employer-owned device
• All consequences of using the App on a compromised, malware-infected, or otherwise untrusted system
• Managing access to your backup folder and any third-party cloud-sync account you use to store it
WE ARE NOT LIABLE FOR ANY DATA LOSS, CORRUPTION, OR EXPOSURE, REGARDLESS OF CAUSE.
15. INDEMNIFICATION
You agree to indemnify, defend, and hold harmless Modus Creatio L.L.C. and its officers, directors, members, employees, agents, and licensors from and against any and all claims, liabilities, damages, judgments, losses, costs, and expenses (including reasonable attorneys’ fees) arising out of or relating to:
(a) Your use of, or inability to use, the App;
(b) Your violation of these Terms or any applicable law;
(c) Your violation of any third-party right, including any privacy or data protection right;
(d) Any health decision you make based on App data or content;
(e) Any document you generate using App features and transmit to a third party;
(f) Your use of the App on a compromised, modified, or shared device;
(g) Any unauthorized access to your device or App data.
This indemnification obligation survives termination of these Terms.
16. DISPUTE RESOLUTION & ARBITRATION
PLEASE READ THIS SECTION CAREFULLY. IT AFFECTS YOUR LEGAL RIGHTS AND WAIVES YOUR RIGHT TO A JURY TRIAL.
BINDING ARBITRATION: Any dispute, claim, or controversy arising out of or relating to these Terms, the App, or any data exposure claim shall be resolved exclusively by final and binding individual arbitration administered by the American Arbitration Association (AAA) under its Consumer Arbitration Rules in effect at the time of the dispute.
CLASS ACTION WAIVER: YOU AND MODUS CREATIO L.L.C. EACH IRREVOCABLY WAIVE THE RIGHT TO PARTICIPATE IN ANY CLASS ACTION, COLLECTIVE ACTION, OR REPRESENTATIVE PROCEEDING, INCLUDING CLASS ARBITRATION. All claims must be brought solely in your individual capacity. This waiver is material to this agreement; if it is found unenforceable, the entire arbitration provision shall be void.
EXCEPTIONS: Either party may bring an individual action in small claims court. Either party may seek emergency injunctive relief in court to prevent irreparable harm pending arbitration.
COSTS: For claims under $10,000, AAA filing fees are governed by AAA Consumer Rules. We will pay arbitration costs that exceed those applicable in court for comparable claims.
OPT-OUT: You may opt out of this arbitration agreement by emailing modus_creatiollc@pm.me within 30 days of first installing the App. Include your name and the subject line: ‘Arbitration Opt-Out.’
GOVERNING LAW: These Terms are governed by the laws of the United States and, to the extent applicable, the laws of the state in which Modus Creatio L.L.C. is formed, without regard to conflict-of-law principles. For EEA/UK users, mandatory consumer protection laws of your country of residence apply to the extent they provide greater protections.
STATUTE OF LIMITATIONS: Any claim must be filed within one (1) year after the claim arose or be permanently barred.
17. GENERAL PROVISIONS
ENTIRE AGREEMENT: These Terms and the Privacy Policy constitute the entire agreement between the parties regarding the App and supersede all prior and contemporaneous understandings.
SEVERABILITY: If any provision is held invalid or unenforceable, that provision is modified to the minimum extent necessary to make it enforceable, and all remaining provisions remain in full effect. The class action waiver in Section 16 is non-severable from the arbitration provision.
NO WAIVER: Our failure or delay in enforcing any provision does not waive our right to enforce it later.
FORCE MAJEURE: We are not liable for delay or failure caused by circumstances beyond our reasonable control, including Acts of God, government action, cyberattacks on third-party infrastructure, or internet outages.
ASSIGNMENT: You may not assign these Terms or any right hereunder. We may assign these Terms in connection with a merger, acquisition, or sale of all or substantially all of our assets, with notice to you.
NOTICES: We may provide notices via in-App messages, updated Terms posted in the App, or a notice on our website. Because the App collects no email address or contact information from you, we have no way to notify you directly outside the App.
SURVIVAL: Sections 3, 7, 8, 9, 11, 12, 13, 14, 15, 16, and 17 survive termination of these Terms.
18. CHANGES TO TERMS
We reserve the right to modify these Terms at any time. For material changes, we will: (1) provide in-App notice at least 15 days before changes take effect; (2) post updated Terms with a revised effective date; and (3) for changes that materially reduce your rights or expand our liability limitations, seek your affirmative renewed consent.
Continued use of the App after the effective date of revised Terms constitutes your binding acceptance. If you do not agree to revised Terms, you must stop using and uninstall the App.
19. CONTACT
Legal notices, rights requests, or Terms questions:
Modus Creatio L.L.C.
Email: modus_creatiollc@pm.me
Website: moduscreatio.com/praepara-health-legal/
PRIVACY POLICY
Jump to a section
- 1. WHO WE ARE
- 2. SCOPE & ELIGIBILITY
- 3. DATA WE COLLECT
- 4. HOW WE USE INFORMATION
- 5. HIPAA ALIGNMENT
- 6. DATA SHARING & DISCLOSURE
- 7. DATA RETENTION
- 8. DATA SECURITY
- 9. THIRD-PARTY SERVICES
- 10. YOUR RIGHTS
- 11. CALIFORNIA RESIDENTS (CCPA/CPRA)
- 12. WASHINGTON STATE RESIDENTS (MY HEALTH MY DATA ACT)
- 13. EEA / UK RESIDENTS (GDPR)
- 14. FTC HEALTH BREACH NOTIFICATION
- 15. CHANGES TO THIS POLICY
- 16. CONTACT
Your health data stays on your device, encrypted with SQLCipher (AES-256) and protected by the Windows Data Protection API (DPAPI) tied to your Windows account. We do not operate servers that store your health information, and we have no account system of any kind — there is nothing tied to your identity for us to lose, sell, or be compelled to hand over. We do not sell, share, or monetize your health data. Optional backup is encrypted with a passphrase only you know, and goes to a folder on your own device that you choose — we never see it. You can delete everything at any time in Settings.
IMPORTANT: This App is a personal health tracking guide only. It is not medical advice and does not replace your doctor. Contact a licensed healthcare provider for any medical question. Use of this App is at your own risk.
1. WHO WE ARE
Praepara Health (“Praepara Health,” “App,” “we,” “us,” or “our”) is a product of Modus Creatio L.L.C., a limited liability company organized in the United States. This Privacy Policy describes our data practices in compliance with applicable federal and state law, including the FTC Act, the Washington My Health My Data Act (MHMDA), the California Consumer Privacy Act (CCPA/CPRA), GDPR (for users in the European Economic Area), and the FTC Health Breach Notification Rule.
Contact: modus_creatiollc@pm.me | moduscreatio.com/praepara-health-legal/
2. SCOPE & ELIGIBILITY
This policy applies to all users of the Praepara Health desktop application for Windows. The App is intended for use by individuals 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If you believe a minor is using the App, contact us immediately at modus_creatiollc@pm.me and we will assist in removing all data.
3. DATA WE COLLECT
A. HEALTH DATA (LOCAL ONLY — WE CANNOT ACCESS THIS)
All health information you manually enter is stored exclusively in an encrypted database on your device. The App has no account system, no sign-in, and collects no name, email, or contact information from you at any point — the only “identity” is whatever you optionally type into fields like Emergency Medical ID. Categories of health data you may enter include:
• Vitals: blood pressure, blood oxygen (SpO2), heart rate, weight, blood glucose, temperature
• Medications: name, dosage, schedule, refill status
• Conditions: selections from a catalog of 200+ chronic and acute conditions across categories including cardiovascular, metabolic, respiratory, neurological, cognitive/memory (dementia), autoimmune, mental health, kidney, reproductive/urological, cancer, digestive, blood/clotting, maternal, dermatological, and more
• Condition-specific trackers: heart failure check-ins, migraine diary, peak flow, flare tracker, infusion sessions, seizure log, INR/anticoagulation, PHQ-9/GAD-7 mental health screens, bowel log, carb/insulin logs, fall log, cognitive/behavioral check-ins, hospital-prep items, vaccinations, and acute illness episodes
• Cancer and radiation treatment tracking: treatment plan, stage, cycle schedule, side-effect check-ins, and lab results
• Durable medical equipment and consumable supply tracking, including maintenance and usage logs
• Medical imaging (DICOM) — studies, series, and images you import from a disc or file, plus attached radiologist reports
• Insurance and billing records — insurance cards, prior authorizations, HSA/FSA receipts, balance-bill disputes, itemized bills, and denial-appeal prep sheets
• Emergency Medical ID and Health Passport — blood type, allergies, implanted devices, advance directives, and emergency contacts
• Survivorship Plan (post-cancer-treatment follow-up care)
• Additional household profiles you create, and optional Caregiver View access for a person you designate
• Symptoms, mood, sleep, and activity logs
• Appointments, care team contacts, and visit notes
• Auto-saved drafts of any in-progress form entry, so unsaved work isn’t lost if you’re interrupted
• A cross-tracker “Doctor Report” export compiled from the above, generated only when you request it
B. OPTIONAL LOCAL/CLOUD-SYNCED BACKUP (OPT-IN)
If you choose to enable backup, the App writes an encrypted copy of your database to a folder on your own device that you select — for example, a folder already synced by a cloud client you’ve installed yourself (such as OneDrive). The App does not connect to any cloud service directly; it has no cloud account, no API key, and no upload target it controls. The backup file is re-encrypted with a passphrase you create and type yourself, which we never see, store, or have any way to recover. If that passphrase is lost, the backup cannot be decrypted by anyone, including us. Whether that folder is later uploaded anywhere is entirely between you and whatever cloud-sync software you’ve chosen to run on your device.
C. NO CRASH ANALYTICS OR TELEMETRY
The App does not contain any automated crash-reporting, analytics, or telemetry system, and does not transmit diagnostic information about your use of the App to us or anyone else. If the App encounters an error, a plain-text log entry is written only to a file on your own device. The App’s optional “Report an Issue” feature lets you review that local log and, if you choose, open your own email application with an excerpt pre-filled — nothing is ever sent automatically, and nothing is sent unless you personally review it and click Send.
4. HOW WE USE INFORMATION
We use the limited data we collect for the following purposes only:
• To provide the App’s health tracking and advocacy features, entirely on your device
• To send important notices about material policy changes, shown in-App
• To respond to a support request, only if you choose to email us directly
We do NOT use your information for:
• Advertising or targeted marketing
• Profiling or behavioral analysis
• Selling to data brokers or third parties
• Any purpose not listed above
We will obtain your separate, explicit consent before using your data for any new purpose not described here.
5. HIPAA ALIGNMENT
Praepara Health is a direct-to-consumer personal health app used by individuals to manage their own health data. In this capacity, Praepara Health is generally not a HIPAA-covered entity or business associate, and the HIPAA Privacy and Security Rules do not technically apply to our operations.
However, we voluntarily implement HIPAA-equivalent safeguards because we believe you deserve that level of protection:
• All health data encrypted at rest using SQLCipher (256-bit AES), with the encryption key itself protected by the Windows Data Protection API (DPAPI), tied to your Windows user account
• Each profile in the App (e.g., separate family members) has its own independently encrypted database and its own independent encryption key — one profile’s data cannot be read using another profile’s key
• No transmission of health data to our servers — we operate no servers that receive it
• Optional encrypted backup stored only in a local or cloud-synced folder you choose and control, protected by a passphrase only you know
• No third-party sharing of health information
• User-controlled data deletion, immediate and irreversible
• No automated diagnostics ever include health data, because no automated diagnostics exist at all
Note: If you use the Doctor Report feature to share data with a healthcare provider, that sharing is initiated and controlled entirely by you. We do not transmit the report — you do, by printing it, saving it, or sending it however you choose.
6. DATA SHARING & DISCLOSURE
We do not sell, rent, or trade your personal information or health data.
We may disclose limited information only in these circumstances:
• PUBLIC DATA LOOKUPS: The App makes read-only lookups to a small number of free, public U.S. government and community data sources — described in Section 9 below — to look up a medication or product name from a code you type in, find nearby provider facilities by ZIP code, or check public wholesale drug pricing data. Only the text you type into that specific field is sent — a product code, a ZIP code, a drug name, or a condition name — together with what your browser or network normally reveals, such as your IP address. Nothing else about you is attached: no identity, no profile, no other health data, and no record of what else you track in the App. Note that where the text you type is itself health information — a drug name in the pricing or interaction lookups, or a condition in the Clinical Trial Finder — that text does reach the third party you are searching, which is what makes the search work. Section 9 lists each service and exactly what is sent.
• LEGAL REQUIREMENTS: We may disclose information if required by a valid court order, subpoena, or government request, or to protect the rights, property, or safety of Modus Creatio L.L.C., our users, or the public. Because we do not possess your health data — it exists only on your device — there is nothing for us to disclose in response to such a request beyond confirming that we operate no server capable of accessing it. We will notify you when legally permitted to do so.
• BUSINESS TRANSFERS: If Modus Creatio L.L.C. is acquired or merges with another entity, your information may be transferred as part of that transaction. We will notify you before your data becomes subject to a different privacy policy.
In all cases, we share only the minimum information necessary.
7. DATA RETENTION
Health data you enter is retained on your device until you delete it. We do not have access to it and cannot delete it on your behalf except by helping you understand how to use the in-app deletion tools.
If you enable optional backup, the backup file is retained in the folder you chose until you delete it yourself or turn off the feature in Settings. Each new backup overwrites the previous one in that folder.
We retain no data of any kind on our own systems, because we operate none that receive App data. Any email you voluntarily send us (for support, or via Report an Issue) is retained only as needed to respond to you and is never used for any other purpose.
8. DATA SECURITY
We implement the following security measures:
• ENCRYPTION AT REST: Health data is stored in a SQLCipher-encrypted database (256-bit AES) on your device
• KEY PROTECTION: The database encryption key is itself protected using the Windows Data Protection API (DPAPI), scoped to your specific Windows user account, so it cannot be unwrapped by another user account or another device
• PER-PROFILE ISOLATION: Each profile you create has its own separate encrypted database and its own separate encryption key
• OPTIONAL PIN LOCK: You may enable a PIN screen with escalating lockout delays after repeated failed attempts; this is a privacy screen for shared-device situations, not the underlying encryption boundary, which is protected by DPAPI regardless of the PIN
• BACKUP ENCRYPTION: Optional backup files are re-encrypted with a passphrase you choose, separate from your device’s own key, so the backup remains protected even if moved off your device
• NO CENTRAL DATABASE: We operate no central health data server — there is nothing for a server breach to expose
IMPORTANT LIMITATION: No security system is foolproof. Physical or administrative compromise of your Windows account (theft, unauthorized access, malware) could expose locally stored data. We strongly recommend using your device’s built-in account password, lock screen, and full-disk encryption (e.g., BitLocker). We cannot guarantee absolute security, and use of the App is at your own risk in this regard.
9. THIRD-PARTY SERVICES
The App makes read-only lookups to the following public data sources. None of these receive any health data — only the specific code, ZIP code, or search text you type into the relevant lookup screen:
• FDA OPENFDA API — medication and product lookup by NDC/UPC code you type in; queries the FDA drug and NDC databases to return drug name and dosage information; no personal or health data transmitted (open.fda.gov)
• OPEN FOOD FACTS — supplement and OTC product lookup by code you type in; a community-maintained open database of food and health products; no personal data transmitted (world.openfoodfacts.org/privacy)
• CMS NPI REGISTRY — lookup of nearby provider/facility information by ZIP code and search text you provide; a public federal registry (npiregistry.cms.hhs.gov)
• CMS NADAC DATASET — public wholesale drug pricing lookup by drug name you type in; a public federal dataset (data.medicaid.gov)
• GOODRX — tapping a GoodRx pricing link opens your device’s own web browser to GoodRx’s public website; the App itself does not send any data to GoodRx (goodrx.com/privacy)
• CLINICALTRIALS.GOV — the Clinical Trial Finder opens your device’s own web browser to a ClinicalTrials.gov search pre-filled with the condition, ZIP code, and phase you entered; the App itself does not call any ClinicalTrials.gov API (clinicaltrials.gov)
• DRUG INTERACTION REFERENCE SITES — the Drug Interaction tool opens your device’s own web browser to one of three public interaction-checker sites you choose (Drugs.com, the Indiana University School of Medicine interaction checker, or Medscape), pre-filled with the drug names you entered; the App itself does not compute interactions or transmit your medication list anywhere on its own (drugs.com/privacy, medicine.iu.edu, medscape.com/public/privacy)
• EXTERNAL ADVOCACY DIRECTORIES — the Advocacy and Cancer Care sections include curated directories of patient-assistance, price-transparency, and survivorship organizations (such as the Patient Advocate Foundation, CancerCare, the American Cancer Society, NeedyMeds, and others); tapping one opens that organization’s own public website in your browser, the same way as the links above
• MICRODICOM (OPTIONAL, LOCAL APPLICATION, NOT A WEBSITE) — the Imaging section offers an “Open in MicroDicom” button. If you use it and already have MicroDicom (a free third-party DICOM viewer) installed on your device, the App decrypts the selected study’s images to a temporary folder on your device and launches MicroDicom to open them. This is the only third-party integration in the App where an outside application, rather than a website, receives your actual health imaging data. It runs entirely on your device — MicroDicom is not a network service and nothing is uploaded anywhere — and the feature is optional and only runs when you tap it. The App deletes the decrypted temporary copy when MicroDicom closes, and sweeps any leftover temporary folder the next time the App starts. Be aware this cleanup is best-effort rather than guaranteed: if Praepara Health is closed before MicroDicom, or the delete is blocked because a file is still open, the decrypted copy can remain in your device’s temporary folder until the next App launch clears it. Those files sit outside the App’s encryption while they exist. If that matters to you, close MicroDicom before closing Praepara Health, or use the in-App viewer instead.
We do not integrate advertising SDKs, analytics platforms, crash-reporting services, or any service that receives your health data.
10. YOUR RIGHTS
Regardless of where you live, you have the following rights with respect to your data:
RIGHT TO ACCESS: All your health data is on your device and accessible to you at any time.
RIGHT TO CORRECT: You may edit any health entry directly in the App.
RIGHT TO DELETE: Use “Delete All Health Data” in Settings, or “Erase All App Data” in Security Settings, to permanently erase all health data from your device. To delete a backup file, delete it directly from the folder you chose for it, or turn off backup in Settings to stop future backups.
RIGHT TO WITHDRAW CONSENT: You may withdraw consent by deleting the App. Deleting the App removes all locally stored health data. To stop backup, turn off the backup feature in Settings.
RIGHT TO DATA PORTABILITY: Use Profile > Export Center to export your data in PDF or structured format.
RIGHT TO LODGE A COMPLAINT: You may file a complaint with your relevant data protection authority.
TO EXERCISE RIGHTS or make a privacy request: Email modus_creatiollc@pm.me. We will respond within 45 calendar days (with one possible 45-day extension for complex requests). You may make up to two requests per year at no charge.
11. CALIFORNIA RESIDENTS (CCPA/CPRA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):
• RIGHT TO KNOW: You have the right to know what personal information we collect, use, share, and sell.
• RIGHT TO DELETE: You have the right to request deletion of your personal information.
• RIGHT TO OPT OUT OF SALE: We do not sell personal information. No opt-out is needed.
• RIGHT TO NON-DISCRIMINATION: We will not discriminate against you for exercising your CCPA rights.
• RIGHT TO CORRECT: You have the right to correct inaccurate personal information.
• RIGHT TO LIMIT USE OF SENSITIVE PERSONAL INFORMATION: Your health data is classified as sensitive personal information under CPRA. We use it only to provide the App’s features — not for advertising or secondary purposes.
Your health data (including physical and mental health conditions, diagnoses, medications, vital signs, and related information) constitutes sensitive personal information under CPRA. We process it only for the primary purpose of providing health tracking features to you.
To exercise CCPA/CPRA rights: Email modus_creatiollc@pm.me.
12. WASHINGTON STATE RESIDENTS (MY HEALTH MY DATA ACT)
If you are a Washington State resident, the Washington My Health My Data Act (MHMDA, Chapter 19.373 RCW) provides additional protections for your consumer health data.
We have published a separate Consumer Health Data Privacy Notice (see the ‘Health Data Notice’ tab) in compliance with MHMDA. That notice contains the specific disclosures required by the Act.
Key MHMDA rights:
• RIGHT TO CONFIRM AND ACCESS: You may confirm whether we collect, share, or sell your health data.
• RIGHT TO DELETE: You may request deletion of your consumer health data.
• RIGHT TO WITHDRAW CONSENT: You may revoke permission for us to collect or share your health data.
We obtained your separate affirmative consent before collecting health data (via the consent screen at first launch). We do not share consumer health data. We will process deletion requests within 45 days.
Violations of MHMDA constitute unfair or deceptive acts under the Washington Consumer Protection Act, and you may have a private right of action.
13. EEA / UK RESIDENTS (GDPR)
If you are located in the European Economic Area or United Kingdom, the General Data Protection Regulation (GDPR) applies to our processing of your personal data.
LEGAL BASIS FOR PROCESSING:
• Health data: Explicit consent (Article 9(2)(a)) — obtained via the consent screen at first launch
YOUR GDPR RIGHTS:
• Right of access (Article 15)
• Right to rectification (Article 16)
• Right to erasure / ‘right to be forgotten’ (Article 17)
• Right to restriction of processing (Article 18)
• Right to data portability (Article 20)
• Right to object (Article 21)
• Right to withdraw consent at any time without affecting prior lawful processing
• Right to lodge a complaint with your national supervisory authority
Data Controller: Modus Creatio L.L.C., modus_creatiollc@pm.me
International Transfers: Your health data is NOT transferred internationally — it remains on your device. If you enable optional backup to a folder synced by a third-party cloud provider you’ve installed yourself (such as OneDrive), that provider’s own infrastructure and data transfer terms apply to that provider — not to Modus Creatio L.L.C., which never receives or transmits your data internationally or otherwise.
14. FTC HEALTH BREACH NOTIFICATION
Under the FTC Health Breach Notification Rule (16 CFR Part 318), if a breach of security occurs involving your identifiable health information, we are required to notify you without unreasonable delay and no later than 60 calendar days after discovery of the breach.
Because your health data is stored only on your device, encrypted, and we maintain no central health data server or account system, the primary breach risk is unauthorized access to your own device. Since we collect no email address, name, or other contact information from you, in the unlikely event we became aware of a breach affecting our own systems (which do not process your health data), we would notify affected users via a prominent in-App notice and a public notice on our website, as we would have no other means of reaching you directly.
15. CHANGES TO THIS POLICY
We may update this Privacy Policy when required by changes in law, our practices, or App features. Material changes will be communicated via an in-App notice and, where possible, by email. We will obtain fresh consent for any new processing of health data.
The version number and effective date at the top of this policy allow you to track changes. Prior versions are available upon request.
16. CONTACT
Privacy questions, rights requests, or concerns:
Modus Creatio L.L.C.
Email: modus_creatiollc@pm.me
Website: moduscreatio.com/praepara-health-legal/
Response time: Within 45 calendar days for rights requests.
CONSUMER HEALTH DATA PRIVACY NOTICE
Jump to a section
This notice is required by Washington State’s My Health My Data Act and applies to all users, including those outside Washington. It provides specific disclosures about our practices regarding consumer health data — health information beyond what is protected by HIPAA.
1. CATEGORIES OF CONSUMER HEALTH DATA WE COLLECT
We collect the following categories of consumer health data that you voluntarily enter into, or import into, the App:
• Vital signs and biometrics: blood pressure, blood oxygen saturation (SpO2), heart rate, body weight, blood glucose levels, temperature
• Chronic and acute medical conditions you self-select from a catalog of 200+ conditions across categories including cardiovascular, metabolic, respiratory, neurological, cognitive/memory (dementia), autoimmune, mental health, kidney, reproductive/urological, cancer, digestive, blood/clotting, maternal, dermatological, and more
• Mental health: mood ratings, PHQ-9 depression screening scores, GAD-7 anxiety screening scores, cognitive/behavioral check-ins for dementia and memory care
• Neurological: migraine diary entries (frequency, severity, triggers, aura), seizure log entries (type, duration, triggers), fall log entries
• Gastrointestinal: bowel frequency and quality logs, flare tracker entries, carb/insulin logs
• Respiratory: peak flow measurements
• Cardiovascular: heart failure daily check-in data, INR/anticoagulation results, infusion session records
• Cancer and radiation treatment: treatment plan, stage, cycle schedule, symptom check-ins, and lab results
• Medical imaging (DICOM): imported studies, series, and images from a disc or file, plus attached radiologist reports
• Durable medical equipment and consumable supply records, including usage and maintenance logs
• Insurance and billing records: insurance cards, prior authorizations, HSA/FSA receipts, balance-bill disputes, itemized bills, and denial-appeal prep sheets
• Medication lists (name, dosage, schedule)
• Symptoms (description, severity, body area)
• Sleep duration and quality
• Physical activity logs
• Lab results (manually entered)
• Allergies
• Emergency Medical ID and Health Passport (blood type, conditions, implanted devices, advance directives, emergency contacts)
• Survivorship Plan (post-cancer-treatment follow-up care)
• Appointment records and visit notes
• Data for additional household profiles you create, and optional Caregiver View access you grant to a designated person
• Auto-saved drafts of any in-progress form entry
SOURCE: All data is entered manually by you, or imported by you from a file or disc you provide (in the case of medical imaging). We do not collect health data from wearables, connected devices, or third-party health records.
2. PURPOSES FOR WHICH WE USE CONSUMER HEALTH DATA
We use your consumer health data for the following purposes only:
• To display your health history, trends, and summaries within the App
• To populate the Doctor Report you generate and choose to share
• To pre-fill condition-specific tracking modules relevant to your selected conditions
• To calculate and display reference-range comparisons (e.g., blood pressure categories)
• To enable optional encrypted backup to a folder on your device that you choose
WE DO NOT USE CONSUMER HEALTH DATA FOR:
• Advertising or marketing
• Sale to third parties
• Building consumer profiles for commercial use
• Any secondary purpose not listed above
3. CATEGORIES OF PARTIES WITH WHOM WE SHARE CONSUMER HEALTH DATA
WE DO NOT SHARE, SELL, OR DISCLOSE CONSUMER HEALTH DATA TO ANY THIRD PARTY.
Your health data is stored only on your device. The only exception is optional encrypted backup, which stores data only in a folder on your own device that you choose, protected by a passphrase only you know — not accessible to us or any other party.
When you use the Doctor Report feature to generate and share a report, you choose the recipient and the sharing method. That sharing is performed by you, using your chosen app (e.g., Gmail), and is governed by that app’s terms — not ours.
We do not geofence healthcare facilities or use location data.
4. YOUR CONSUMER HEALTH DATA RIGHTS
Under the Washington My Health My Data Act and other applicable law, you have the following rights:
RIGHT TO CONFIRM AND ACCESS
You may confirm whether we collect consumer health data about you: we do not. We operate no server or account system that receives, sees, or has access to any consumer health data — there is nothing on our end to confirm beyond this notice itself. All health data is on your device and accessible to you directly.
RIGHT TO DELETE
You may request deletion of consumer health data:
• IN-APP: “Delete All Health Data” in Settings, or “Erase All App Data” in Security Settings (immediate, permanent, irrevocable)
• EMAIL REQUEST: modus_creatiollc@pm.me (we will assist and respond within 45 days)
• BACKUP FILE: delete it directly from the folder you chose for it, or turn off backup in Settings
RIGHT TO WITHDRAW CONSENT
You may withdraw consent for health data collection at any time by:
• Deleting all data in Settings (stops collection by removing stored data)
• Uninstalling the App (removes all locally stored health data)
• Emailing us to confirm withdrawal: modus_creatiollc@pm.me
Withdrawing consent does not affect the lawfulness of processing before withdrawal.
RIGHT TO NON-RETALIATION
We will not discriminate against you for exercising any of these rights. You will not lose App functionality or receive degraded service for submitting a rights request.
HOW TO SUBMIT A REQUEST
Email: modus_creatiollc@pm.me
Subject line: ‘Health Data Rights Request’
We will acknowledge your request within 10 days and fulfill it within 45 days (extendable once by 45 days with notice). You may make up to two requests per year at no cost.
5. HOW WE PROTECT CONSUMER HEALTH DATA
We maintain a data security program that includes:
• Administrative safeguards: This privacy notice, internal data handling policies, and staff training on privacy obligations
• Technical safeguards: App data encrypted at rest with SQLCipher (256-bit AES); the encryption key protected by the Windows Data Protection API (DPAPI), scoped to your specific Windows user account; each profile independently encrypted with its own key; health data is never transmitted anywhere by the App, so no transmission-security question arises for it; no automated diagnostics of any kind exist, so there is no exclusion to make — none is ever collected
• Physical safeguards: No central server storing health data — there is no Modus Creatio database to breach
We meet the reasonable standard of care for consumer health data security in the desktop application industry.
6. CONSENT
Before collecting consumer health data, we obtained your explicit affirmative consent via the consent screen shown at first launch. That consent:
• Named the specific categories of health data collected
• Stated the purposes of collection
• Confirmed you are 18 or older
• Was separate from general terms acceptance
• Can be withdrawn at any time as described above
We will seek fresh consent before collecting new categories of health data or using existing data for new purposes not described in this notice.
7. CONTACT FOR HEALTH DATA REQUESTS
Modus Creatio L.L.C.
Email: modus_creatiollc@pm.me — Subject: ‘Health Data Rights Request’
Website: moduscreatio.com/praepara-health-legal/
Washington consumers may also file a complaint with the Washington State Attorney General’s Office if they believe their rights under the My Health My Data Act have been violated.
Violations of MHMDA are deemed unfair or deceptive acts under the Washington Consumer Protection Act (RCW 19.86) and may give rise to a private right of action.
OPEN SOURCE LICENSES
Jump to a section
Praepara Health uses a small number of open-source software components to provide local database encryption and medical image handling. All are used under free, permissive open-source licenses. No paid or commercial license is required for any component listed below.
SQLCipher
Used for: encrypting the local health-data database on your device.
SQLCipher is an open-source extension to SQLite providing transparent 256-bit AES encryption, developed and published by Zetetic LLC under a BSD-style open-source license.
Copyright (c) 2008-2024, Zetetic LLC. All rights reserved. Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met: (1) Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer. (2) Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution. (3) Neither the name of the ZETETIC LLC nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission. THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS “AS IS” AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
SQLitePCLRaw
Used for: providing the .NET interface to the SQLCipher-encrypted database.
SQLitePCLRaw, developed by Eric Sink / SourceGear, LLC, and its native SQLCipher build package (SQLitePCLRaw.lib.e_sqlcipher) are licensed under the Apache License, Version 2.0. Copyright 2014-2024 SourceGear, LLC. A copy of the license is available at apache.org/licenses/LICENSE-2.0.
SixLabors.ImageSharp
Used for: rendering and processing medical imaging (DICOM) files within the app.
SixLabors.ImageSharp, developed by Six Labors, is included as an indirect (transitive) dependency of the DICOM imaging library used by this app. It is used here under the Apache License, Version 2.0 terms of the Six Labors Split License, Version 1.0, which applies to transitive package dependencies. Copyright Six Labors and contributors. A copy of the license is available at github.com/SixLabors/ImageSharp/blob/main/LICENSE.
fo-dicom
Used for: reading, parsing, and rendering DICOM medical imaging files in the Imaging section.
fo-dicom (Fellow Oak DICOM) is an open-source DICOM library for .NET, licensed under the Microsoft Public License (MS-PL). Copyright fo-dicom contributors. A copy of the license is available at github.com/fo-dicom/fo-dicom/blob/development/License.txt.
PdfSharp
Used for: generating the PDF reports and exports produced by the app.
PdfSharp, published by empira Software GmbH, is licensed under the MIT License. Copyright empira Software GmbH. A copy of the license is available at github.com/empira/PDFsharp/blob/master/LICENSE.md.
sqlite-net-pcl
Used for: the object-relational mapping layer over the encrypted SQLite database.
sqlite-net, developed by Frank A. Krueger, is licensed under the MIT License. Copyright Krueger Systems, Inc. A copy of the license is available at github.com/praeclarum/sqlite-net/blob/master/LICENSE.md.
.NET and Windows App SDK
Used for: the application runtime and user interface framework (.NET, .NET MAUI, Windows App SDK / WinUI 3), published by Microsoft Corporation under the MIT License.