Privacy Policy

Summary

Your counting data stays on your device

No account, no sign-in and no server copy of counts, reports or case labels.

Crash and error reports

Technical diagnostics help us fix bugs, without your IP address or identity.

Limited usage analytics

iOS and Android only: anonymous feature-usage events you can switch off in Settings. None on the web. No advertising identifiers.

No selling, no ads

We do not sell or share personal information, and the app contains no advertising.

1. Who we are

Hematopathology Cell Counter is published by SkySword AI (“we”, “us”, “our”). SkySword AI is responsible for the information described in this policy and is the “controller” of it for the purposes of the EU and UK General Data Protection Regulation.

This policy covers the web app at cellcounter.app, the Cell Counter apps for iPhone, iPad and Android, and this website (together, the “Service”). It does not cover third-party services you choose to use with the Service, such as the app you share a report to, which have their own privacy policies.

2. Data that stays on your device

The Service is local-first. Everything you create while counting is stored only on your own device, in the browser's IndexedDB on the web and in an on-device SQLite database on iOS and Android:

• cell counts, count history, quality-control checkpoints and drafts;
• reports, revisions, case labels and notes;
• templates, including any reference images you attach to a cell;
• your settings and preferences, such as theme, targets, sound and haptics.

We do not operate a server that receives or stores this data, we cannot see it, and we cannot recover it for you. It leaves your device only when you choose to send it, for example when you copy, print, save as PDF or share a report, or export a template file. Where it goes then is controlled by you and by the app or service you send it to.

The web app also keeps a small preference in your browser's local storage to remember that you dismissed the keyboard-shortcut hint. It is not used for tracking.

3. Information we collect

We collect only the limited technical information described below.

3.1 Crash reports and error diagnostics (all platforms)

When the app encounters an error or crash, it sends a diagnostic report to our error monitoring provider, Sentry. A report can include the error message and stack trace, the app version and build, the operating system or browser and its version, the device model, screen size, language and time zone setting, the screen in use, a short trail of recent technical events (such as navigation between screens and app log messages), and a random identifier for the app session. The app is configured not to send your IP address, cookies or any user identity with these reports, and it is designed so that case labels, notes and counts are not included.

On iOS and Android, a sample of app sessions (about one in ten, and sessions in which an error occurs) may also be recorded as a session replay: a reconstruction of the screen layout and your taps and navigation, used to understand how an error happened. All text, images and graphics are masked in these recordings, so their content cannot be read.

3.2 Feedback you send us (all platforms)

If you use “Feedback” in Settings, we receive the message you write and, if you choose to provide them, your name and email address, together with the technical context described in section 3.1. Please do not include patient information in feedback.

3.3 Usage analytics (iOS and Android apps only)

The iOS and Android apps use Google Analytics for Firebase to tell us, in aggregate, which features are used and where the app can be improved. The web app does not use analytics. You can turn analytics off at any time with Settings → Privacy → Share usage analytics; from then on the app sends no analytics events.

The app sends a fixed, predefined set of events. They describe how the app is used, never what you counted: for example that a count was started, resumed, completed or discarded; the target size; rounded ranges for the total count and the duration; whether undo, redo or optional features were used; whether a report or template action succeeded; which setting was changed; and which screen was opened. Events never contain cell names, template names, case labels, notes, specimen or report contents, or per-cell counts.

Firebase also automatically processes standard technical information: a random app instance identifier, the device model, operating system version, app version, language, and the approximate country or region derived from your IP address, along with session information such as first open and engagement time. We have disabled the collection of advertising identifiers (IDFA on iOS, Android Advertising ID), the iOS identifier for vendors, the Android SSAID, advertising storage, ad personalisation and ad-network registration.

3.4 Website delivery and app updates

The web app and this website are delivered by Cloudflare, which processes the technical details of each request, such as your IP address, browser user agent and the page requested, to deliver and protect the site. The mobile apps check for and download app updates from Expo's update service, which receives technical information such as the platform, app runtime version and installed update. We do not use cookies for advertising or analytics; Cloudflare may set strictly necessary security cookies.

3.5 Information from app stores

Apple and Google may provide us with aggregated, non-identifying statistics about downloads, crashes and app performance under their own privacy policies. Downloading the app from the App Store or Google Play is governed by Apple's and Google's privacy policies.

4. What we do not do

• We do not require or offer an account, sign-in or registration.
• We do not collect your counts, reports, case labels, notes or templates.
• We do not collect your precise location, contacts, camera, microphone, photos (other than the image you pick, which stays on your device), or health data from your device.
• We do not sell personal information, and we do not share it for cross-context behavioural or targeted advertising.
• We do not show advertising or include advertising SDKs.
• We do not track you across other companies' apps or websites.
• We do not use your information for automated decision-making or profiling.

5. Device permissions

The app asks for access to your photo library only when you choose to attach a reference image to a cell in a template. The image you pick is resized and stored on your device inside the template; it is never uploaded to us. You can decline or revoke this permission at any time in your device settings, and the rest of the app keeps working. Sound and haptic feedback and keeping the screen awake during a count need no special permission.

6. How and why we use information

We use the information described in section 3 only to:

• detect, diagnose and fix crashes, errors and performance problems;
• understand, in aggregate, which features are used so we can improve the app;
• respond to feedback and support requests;
• deliver, secure and update the Service and prevent abuse; and
• comply with legal obligations and enforce our rights.

Where the EU or UK GDPR applies, we rely on our legitimate interests in providing a reliable, secure and improving Service for diagnostics, analytics, delivery and security, having designed this processing to have minimal privacy impact; on your consent for information you choose to send us in feedback; and on legal obligation where the law requires us to keep or disclose information.

7. Service providers

We share information only with the service providers below, who process it on our behalf under contracts that limit its use to providing their services to us. We may also disclose information if required by law, to protect the rights, safety or property of our users or others, or as part of a merger, acquisition or sale of assets, in which case this policy will continue to apply to it.

8. How long we keep information

• Data on your device stays until you delete it in the app, clear the browser's site data, or uninstall the app. We cannot delete it for you because we never receive it.
• Crash reports, diagnostics and session replays are kept for up to 90 days, then deleted automatically.
• Usage analytics event data is kept for no longer than 14 months, then deleted automatically; we may keep aggregated reports that identify no one.
• Feedback and correspondence is kept for as long as needed to respond and to improve the app, and no longer than two years unless the law requires otherwise.

9. Your choices

• Delete counts, reports and templates in the app at any time, or remove all of the Service's data by clearing the site data in your browser or uninstalling the app.
• Leave the name and email fields of the feedback form empty to send feedback without your name or email address.
• Turn off usage analytics in the iOS or Android app with Settings → Privacy → Share usage analytics. The web app sends none.
• Turn off photo library access in your device settings at any time.
• Contact us at the address below to ask us to delete feedback you sent or to exercise any other right described in this policy.

10. Your privacy rights

Depending on where you live, you may have the right to ask us for access to, a copy of, correction of, or deletion of personal information we hold about you; to restrict or object to our processing of it; to receive it in a portable format; and to withdraw consent you have given, without affecting earlier processing.

United States

Residents of California and other states with comprehensive privacy laws (including Colorado, Connecticut, Virginia, Utah, Texas, Oregon and others) have the right to know what personal information we collect, use and disclose; to access, correct and delete it; and to opt out of its sale, sharing for cross-context behavioural advertising, targeted advertising and profiling. We do not sell or share personal information, do not use it for targeted advertising or profiling, and do not use or disclose sensitive personal information for purposes that would give rise to a right to limit. In the past 12 months we have collected the categories described in section 3: identifiers (random app and session identifiers, and the name and email address you optionally give in feedback), internet or other electronic network activity information (diagnostics and usage events), and approximate geolocation (country or region). We disclose these only to the service providers in section 7 for the business purposes described in section 6.

You may make a request yourself or through an authorised agent. We will not discriminate against you for exercising your rights. If we decline your request, you may appeal by replying to our decision; if your appeal is denied, you may contact your state attorney general.

European Economic Area, United Kingdom and Switzerland

You have the rights listed above under the GDPR, the UK GDPR and the Swiss Federal Act on Data Protection, including the right to object at any time to processing based on our legitimate interests, and the right to lodge a complaint with your local data protection authority.

How to make a request

Email [email protected]. Because we do not have accounts and the information we collect does not identify you by name, we may need details from you, such as the approximate date and time of an error or the email address you used for feedback, to find any information related to you. We will respond within the time the law requires, normally within 30 days, or 45 days where US state law applies.

11. Patient and health information

Do not enter patient-identifying information. Use non-identifying case labels such as “Bench 3”. The app warns when a label looks like a person's name, a date of birth, or an accession or record number.

Because everything you enter stays on your device, we do not receive, store or have access to any patient or specimen information, and we do not collect consumer health data. We are not a covered entity or business associate under the US Health Insurance Portability and Accountability Act (HIPAA), and the Service is not designed to store protected health information. You and your institution remain responsible for complying with your own policies and the laws that apply to patient information, including when you share or export reports.

Hematopathology Cell Counter is a professional counting aid. It does not provide diagnoses, risk classification or treatment recommendations.

12. International transfers

We and our service providers are based in the United States and may process information in the United States and other countries whose data protection laws may differ from those where you live. Where the GDPR or UK GDPR applies, transfers are protected by appropriate safeguards, such as the European Commission's Standard Contractual Clauses or the EU–US Data Privacy Framework and its UK and Swiss extensions, where our providers participate in them.

13. Security

Information sent to us and to our providers is encrypted in transit using HTTPS. Keeping your counting data on your device means there is no central database of user data to breach. On your device, it is protected by your device's own security, so please use a screen lock and keep your operating system and browser up to date. No method of transmission or storage is completely secure, but we work to protect the limited information we receive.

14. Children

The Service is a professional tool for hematopathologists and laboratory professionals and is not directed to children. We do not knowingly collect personal information from children under 13, or under 16 where local law sets a higher age. If you believe a child has sent us personal information, contact us and we will delete it.

15. Changes to this policy

We may update this policy as the Service or the law changes. We will post the new version on this page and update the effective date at the top. If a change materially affects how we handle your information, we will give notice on this website and in the app's release notes before it takes effect.

16. Contact us

Questions, requests or complaints about this policy or your information:

For help using the app, email [email protected].