Skip to content

Privacy notice

What we collect, in plain language.

Cardiac Companion is a medication reminder app that is still being built. This page explains what this website collects today and what will change when the app is released.

Effective date: 1 November 2026.

What this website collects

The only thing you can do on this site right now is join the waitlist. When you do, we store:

  • Your email address.
  • The date and time you signed up, and which page of this site you came from.
  • A scrambled version of your internet address (a salted hash) for a short time, to stop automated abuse. We cannot turn it back into your address, and it is deleted after 30 days.

We do not ask for your name, your health, your medications or anything else. We do not use analytics scripts, advertising trackers or cookies on this site. The only thing kept in your browser is the light or dark theme you choose with the toggle, and it never leaves your device.

Why we collect it

To keep your address on the waitlist and send you one message when the app is available. Today your address is stored and nothing is sent: no confirmation email goes out unless we turn on email delivery. If we do, you will receive one short confirmation message that carries only a confirm link and an unsubscribe link. That is all. We will not send newsletters or promotions, and we will never email you about your health.

Who sees it

  • Our team, to manage the waitlist.
  • An email service, only once email delivery is turned on, which then sees your email address and the confirm and unsubscribe links, and nothing else.
  • The database provider that stores the waitlist.

We do not sell, rent or share your email address with anyone else.

How long we keep it

Until you unsubscribe, or until the app has launched and the waitlist is closed, plus 30 days. Every email we send has an unsubscribe link, and you can also ask us to delete your address at any time by writing to hello@iyulabs.com.

Your choices

  • Unsubscribe with the link in any email.
  • Ask us to delete your address by writing to hello@iyulabs.com. We will do it within 30 days and confirm.
  • Ask us what we hold about you by writing to the same address.

About the app's health features

The Cardiac Companion app is not released yet. When it is, it will let you keep a list of your medications, set reminders, and, only if you choose, share your list with a clinician. That will involve health information, and before any of it is collected we will publish a new version of this notice that explains exactly what the app stores, where, for how long, and how you control it. We will also tell waitlist members by email that the notice has changed.

A few commitments we are building into the app now, so you know what to expect:

  • Your medication data will be stored encrypted on your phone, and reminders will be generated on your phone rather than sent through a push service.
  • Nobody sees your list unless you share it, and you can stop sharing at any time.
  • The app will show you a record of who has looked at your information.
  • You will be able to download everything the app holds about you, and ask for it to be deleted.
  • The app will never suggest a dose or make a medical recommendation. Always follow your clinician's instructions.

The product is being built to meet HIPAA requirements. Real patient data is not enabled, in any environment, until that review is complete and signed off. Until then every preview runs on synthetic data and says so on screen.

Children

This site and the app are not directed at children under 13, and we do not knowingly collect information from them.

Changes to this notice

If we change this notice we will update the effective date at the top. For changes that affect health information we will also email waitlist members and show a notice in the app.

Contact

Cardiac Companion is an independent project in development; the operator's legal name and postal address will be published here before launch. Write to hello@iyulabs.com for anything about this notice. The contact page lists what to include.

If you believe we have handled your information wrongly, write to us first and we will answer within 30 days. You may also contact your local consumer protection or data protection authority.