Privacy Policy

—What Cairnwell Is — and Is Not

Cairnwell is a record-keeping tool. It records and organizes what you tell it, so you can see your own history clearly and walk into your next appointment prepared. It does not interpret your health, and it never prescribes or gives medical advice.

• You supply the facts. Cairnwell records doses, injection sites, symptoms, measurements, and notes exactly as you enter them. It does not check them against a prescription and cannot tell whether what you entered is accurate.
• Insights describe; they do not direct. Charts, trends, and injection-cycle insights summarize patterns already present in the data you logged. They are descriptions of your own record — never dose guidance, a treatment recommendation, or a clinical finding.
• Reminders are a convenience, not a safeguard. Reminders depend on your device's notification permissions, power state, and settings. Do not rely on Cairnwell as the only safeguard for taking a medication on schedule.
• Exports are your records, not clinical documents. A CSV or PDF export is a copy of what you logged, formatted so you can share it if you choose. It is not a medical record, and sharing one does not create a clinical relationship between you and Yost Group LLC.
• Cairnwell is independent. Yost Group LLC is not affiliated with, endorsed by, or sponsored by any pharmaceutical manufacturer. Medication names exist in the app only to label your own entries.
• No one is watching on our end. Because your data never leaves your device (Section 03), no one at Yost Group can see what you log. We cannot notice a concerning entry, and no one is reviewing your data for safety. That privacy is deliberate — and it means the responsibility for acting on what you record stays with you and your clinician.

Full statement: Cairnwell Product Boundary Statement — what the app does, what it will never do, how to read its summaries, who it is for, and its regulatory status. Effective August 1, 2026.

This boundary is not confined to the website. It is presented inside the app during onboarding, where you acknowledge it before reaching the medication setup screen, and it is restated inside the clinician PDF report so that anyone you share a report with sees the same limits you agreed to.

01Information Cairnwell Handles

The table below summarizes the categories of information Cairnwell handles, where each comes from, and where it is stored.

02Health & Fitness Data (Apple Health & Health Connect)

Cairnwell is a health app, so it handles health and fitness information. All of it stays on your device. There are two ways health data enters Cairnwell:

• Data you enter. Medications, doses, injection sites, symptoms, weight, body measurements, nutrition, workouts, and journal entries you type into the app.
• Data read from your device's health store, only if you connect it. If you grant access, Cairnwell reads a limited set of data from Apple Health (HealthKit) on iOS or Health Connect on Android and copies it into the same on-device database, so your charts and history stay complete.

What Cairnwell reads, if you connect Apple Health or Health Connect

• Body weight
• Steps
• Workouts / exercise sessions

• Read-only. The health integration is read-only. Cairnwell does not write data back into Apple Health or Health Connect.
• Optional and revocable. Connecting Apple Health or Health Connect is entirely optional. Cairnwell works fully without it. You can revoke access at any time — see Section 07 — and doing so stops any further reads.
• No onward sharing. Cairnwell does not share health data with any other app, service, or company. Because Cairnwell has no servers, there is nowhere for this data to go.

This handling is consistent with Apple's HealthKit requirements (App Store Review Guideline 5.1.3) and the Google Play Health Connect data-use policy: health and fitness data obtained through these frameworks is used only to provide the app's stated features to you, is not disclosed to third parties, and is never used for advertising.

03Where Your Data Lives

• On your device only. All of your Cairnwell data is stored in a private database (SQLite) inside the app's own storage on your device. On iOS this sits in the app's sandboxed container; on Android it sits in the app's private storage directory.
• No servers. Yost Group LLC operates no servers that receive, store, or process your Cairnwell data. Nothing you record passes through Yost Group infrastructure.
• No cloud sync, no account. Cairnwell does not sync to iCloud, Google, or any cloud service, and does not create or require an account. Your data is not backed up to us and cannot be retrieved by us. If you subscribe to Cairnwell Premium, that subscription is tied to your Apple or Google account — not to a Cairnwell account — and carries none of your health data with it.

04Information We Do Not Collect

Apple may collect standard crash data through iOS, and Google may collect standard crash data through Android Vitals, each governed by their own privacy policies. These are platform-level processes, not something Cairnwell configures or receives.

05How Cairnwell Uses Your Data

• To run the app's features. Your entries and any connected health data are stored on your device so Cairnwell can display your logs, charts, history, and trends.
• To keep your progress views complete. Weight, step, and workout data read from Apple Health or Health Connect (if you connect it) is used only to fill in your on-device charts and history.
• To respond to support requests. If you email us, we use your message and contact details only to reply.

We do not use any of your data for advertising, marketing, profiling, sale, sharing, or model training. There is no purpose beyond running the app for you.

06Exporting & Sharing Your Data

Cairnwell lets you export your data at any time. CSV export is free for every user; PDF reports are part of Cairnwell Premium. When you export, the file is created on your device and handed to your device's standard share sheet. From there, you decide where it goes — email, a file, another app, or nowhere at all.

• Exports go only where you send them. Cairnwell does not upload exports anywhere.
• Once you share an exported file with another app or service, that file is governed by wherever you sent it, not by this policy.

07Your Choices & Permissions

Apple Health (iOS)

You can review or revoke Cairnwell's Health access at any time: Settings > Health > Data Access & Devices > Cairnwell, or inside the Health app under Sharing > Apps. Turning off access stops Cairnwell from reading further data. Data Cairnwell already copied into its on-device database remains until you delete it in the app or delete the app.

Health Connect (Android)

You can review or revoke Cairnwell's Health Connect access at any time in the Health Connect settings on your device: Settings > Apps > Health Connect > App permissions > Cairnwell. Turning off access stops further reads. You can also delete data held within Health Connect from that same screen.

Your entries

You can edit or delete any entry — medications, doses, symptoms, measurements, workouts, journal entries, and more — directly in the app at any time.

08Retention & Deletion

• Your data: retained in the on-device database until you delete individual entries in the app, use any in-app reset option, or delete the app. Deleting the app deletes the database and everything in it.
• Health integration data: weight, step, and workout data Cairnwell copied from Apple Health or Health Connect is stored in the same on-device database and is removed the same way — by deleting it in the app or deleting the app. Revoking access (Section 07) stops future reads.
• Support email: if you contacted us, we keep your email only as long as reasonably necessary to resolve your issue, then delete it.

Because we hold no copy of your Cairnwell data on any server, there is nothing on our side to delete or retain.

09Security

• On iOS. iOS Data Protection encrypts app storage at rest, and the iOS app sandbox isolates Cairnwell's data from other apps. Your device passcode protects access.
• On Android. Cairnwell's database resides in the app's private storage directory, isolated from other apps and protected by Android's file-based encryption and your device lock.
• No transmission surface. Because Cairnwell transmits none of your data off your device and runs no servers, there is no Yost Group system that could suffer a server-side breach of your health data.

No method of storage is completely secure. We recommend protecting your device with a passcode or biometric lock and keeping a device-level backup, since your Cairnwell data lives only on your device.

10Children's Privacy

Cairnwell is not directed to children under 13, and we do not knowingly collect personal information from them. Because Cairnwell stores data only on the device and sends nothing to us, we do not receive information from any user. If you have questions, contact info@yost.group.

11Your Rights (GDPR / CCPA)

Health information is treated as sensitive personal information under the CPRA and as special category data under the GDPR. Cairnwell is designed so that this data never leaves your device and is never received by us.

If you emailed us for support and want us to delete that correspondence, or you have any other request, email info@yost.group and we will respond within the time required by applicable law. You may also lodge a complaint with your local data protection authority (in the UK, the Information Commissioner's Office). We do not discriminate against anyone for exercising these rights.

12Health Data Laws & Regulatory Status

Cairnwell handles health information, so it is worth stating plainly which health data regimes apply to us and which do not.

Cairnwell is a general wellness and recordkeeping product. It is not a medical device and has not been reviewed or approved by the FDA. See the Product Boundary Statement for its full regulatory status.

13Changes to This Policy

We will update this page when we make material changes and revise the Last Updated date above. For significant changes, we will surface a notice inside the app on its next launch.