PatientMemo
Privacy Policy
Effective date: 4 October 2026
Version: 1.0
1. Summary
- PatientMemo sends no data to us. There is no account, no sign-in and no server run by the app's maker.
- The app contains no advertising, no analytics and no tracking.
- Patient names, notes and settings are stored on your iPhone. If you turn on sync, they are also stored in your private iCloud, in your own Apple Account.
- The maker of the app has no access to your notes, neither on your device nor in iCloud.
2. Who we are
PatientMemo is made and published under the brand Built in the Attic by:
Filip Lechowicz, running a sole proprietorship in Poland ("we", "us").
Contact on all privacy matters: builtintheattic@gmail.com
Because the app sends us no data, we are not the controller of the data stored in the app. We are the controller only of the data described in sections 11 and 12 (e-mail contact and this website).
3. What the app stores
| Data | Where | How long |
|---|---|---|
| Patient's first and last name (the app has no fields for any other details about a person) | The app's storage on your iPhone and, with sync on, your private iCloud | Until you delete it |
| Notes with their date and time, whether they were edited, and their state ("pinned", "next visit", "done") | As above | Until you delete them |
| Settings (Face ID lock, iCloud sync, language, appearance, app colour and icon) | The app's storage on your iPhone | Until you delete the app |
What you write in your notes is entirely up to you. The app does not analyse, assess or send their content anywhere.
4. iCloud sync
With iCloud sync on, the data in section 3 is kept in the app's private database in your iCloud account (Apple CloudKit). Only you can reach it, from your devices signed in to the same Apple Account. We cannot see its contents and cannot download it.
Storage in iCloud is provided by Apple under your agreement with Apple and Apple's Privacy Policy. You can turn sync off at any time in the app's settings. Your data then stays on this iPhone.
5. Backup, restore and export
You start a backup or an export yourself, in the app's settings. This creates a file with your data, which you save or share wherever you choose. The file is never sent to us. Because it contains names and notes, please keep it as safe as you keep your phone.
If you use iCloud Backup or back up your iPhone to a computer, the app's data may be included in that backup. This depends on your system settings and does not involve us.
6. Face ID lock and the app switcher
The Face ID lock is handled by iOS. The app only receives an answer from the system on whether recognition succeeded. It has no access to biometric data and stores nothing of the kind.
When the app goes to the background, its preview in the app switcher is covered, so your notes are not visible to people around you.
7. Permissions
The app only asks to use Face ID, and only when you turn on the lock. It does not ask for access to your location, camera, photos, microphone, contacts, calendar, Health data or advertising identifier.
8. Ads, analytics and tracking
The app shows no ads, uses no analytics or tracking tools and does not combine your data with data from other apps or websites. Apart from your private iCloud, the app sends data nowhere.
9. Data we receive from Apple
If you agreed to share analytics with app developers in iPhone Settings (Privacy & Security → Analytics & Improvements), Apple may share anonymous crash reports and usage statistics with us. They contain no note content, do not identify you and are used only to fix errors. You can turn this off at any time.
10. Your patients' data - your responsibility
PatientMemo is a tool, like a paper notebook. You decide whom you write about and what you write. If you keep notes about other people as part of your work:
- You are the controller of that data under the GDPR. Notes kept in connection with therapy or care may contain data concerning health (Art. 9 GDPR).
- Write only what you actually need for your work. The app deliberately stores nothing about a person except their name.
- Keep your device secure: a passcode, the Face ID lock in the app and a protected Apple Account (two-factor authentication).
- If the rules of your profession require you to keep records, keep them in the required form. PatientMemo does not replace them.
- When your screen is shown on another device (AirPlay, screen recording), anything visible in the app may be seen by others.
We have no insight into the data stored in the app, so we are not responsible for its content or for how a user stores or shares it.
11. When you contact us
If you e-mail us, we receive your e-mail address and whatever you write. We use it only to answer you (legal basis: Art. 6(1)(f) GDPR, our legitimate interest in answering messages). We keep this correspondence for as long as needed to handle the matter and no longer than 2 years after it is closed. We do not share it with anyone except our e-mail provider, Google (Gmail), who acts on our behalf. If the provider processes data outside the European Economic Area, this is based on standard contractual clauses or a European Commission decision.
Please do not send us notes or any data about your patients.
12. This website
The website builtintheattic.com, including the PatientMemo page, is informational only. It does not use tracking cookies or analytics tools. It is hosted by Cloudflare, Inc., whose servers may automatically record basic technical data (IP address, date and time of the visit, browser type) to deliver the website and keep it secure. The legal basis is our legitimate interest in keeping the website secure and working (Art. 6(1)(f) GDPR).
13. Your rights
For the data we control (sections 11 and 12), you have the right to access, rectify and erase it, to restrict processing, to object and to data portability. To use these rights, write to builtintheattic@gmail.com. You also have the right to lodge a complaint with a supervisory authority. In Poland, this is the President of the Personal Data Protection Office (Prezes UODO), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl.
You manage the data in the app yourself: delete patients and notes in the app, and deleting the app removes the data stored on this iPhone. You can delete the app's data in iCloud in iPhone Settings → [your name] → iCloud → Manage Storage.
14. Children
The app is meant for adult users, especially professionals, and is not directed at children as users. If you keep notes about minors, section 10 applies.
15. What the app is
PatientMemo is a notebook for working with people. It is not a medical device or a medical records system, and it is not intended for diagnosis, assessment or treatment planning. It does not analyse, assess or interpret what you write.
Use of the app is governed by Apple's Standard Licensed Application End User License Agreement (EULA): apple.com/legal/internet-services/itunes/dev/stdeula
16. Changes to this policy
If the app changes how it handles data, we will update this policy and its effective date. Important changes will also be announced in the app's update notes. If the app were ever to start sending data to us, the policy would be updated before that change. The current version is always available at: https://builtintheattic.com/apps/patientmemo/privacy-policy/
17. Governing law and contact
This policy is governed by Polish law and the GDPR (Regulation (EU) 2016/679). Privacy questions: builtintheattic@gmail.com.