Privacy Policy

Kestrel ABA · Last updated July 22, 2026

What we collect

Account: your email address and sign-in identifier (via Sign in with Apple).
Your setup: the states and payers you choose to watch, and a push-notification token if you enable notifications.
Questions you ask: the text of questions to the Ask feature and the answers, kept to operate and improve the service. Questions that appear to contain patient information are blocked and are not stored.
Subscription status: handled by Apple and our payments processor (RevenueCat); we never see your payment details.

What we don't collect

No protected health information (PHI) — the product is designed so client and patient data never enters it. No advertising identifiers, no sale of personal data, no tracking across other companies' apps or websites.

How we use it

To run the service: sync your watchlist across devices, send the alerts you asked for, answer your questions, and fix problems. Service providers that process data for us: Supabase (accounts and database), Render (hosting), Anthropic (processing question text to generate answers), RevenueCat and Apple (subscriptions), Expo (push delivery). We share data with no one else.

Retention and deletion

Your data is kept while your account exists. Delete your account in the app (Profile › Delete account) and your account, watchlist, push token, and question history are removed from our systems.

Your choices

You can use the app without enabling notifications; you can change your watchlist anytime; you can request a copy or deletion of your data at kestrelaba@gmail.com.

Contact

kestrelaba@gmail.com