POTSI APP PRIVACY POLICY

Effective date and last updated: 28 August 2026

Policy version: 3.0
App version covered: Potsi App 5.0.0 (build 21) for Android
Android package: com.orthopractis.potsiapp
Developer: ORTHOPRACTIS.COM S.M.P.C.
Privacy contact: info@orthopractis.com
Official direct Privacy Policy and support page: https://www.orthopractis.com/potsi-app

IMPORTANT: DATA RETENTION AND DELETION SUMMARY

Potsi App does not create user accounts and does not operate an Orthopractis cloud database for images, landmarks, or measurements. The app does not automatically send selected images, photographs, P1–P8 point coordinates, POTSI/FAI/HAI calculations, or exports to Orthopractis.

Retention periods are as follows:

• Active image, landmark, pan/zoom, and calculation data: retained only in the current app session and removed when the user closes or replaces the image, selects “Delete local session and temporary files,” clears app storage, or the app process ends.
• Temporary camera files: deleted after successful decoding or cancellation when possible; fallback cleanup removes camera-cache files older than approximately 2 hours.
• Temporary share files: retained in app cache only as needed for sharing; fallback cleanup removes share-cache files older than approximately 24 hours.
• User-saved annotated PNG files: retained in the device’s Pictures/PotsiApp collection until the user or device administrator deletes them.
• Copies exported or shared to another app, person, institution, cloud provider, backup, or device: retained under that destination’s rules until deleted there.
• Support email and support attachments voluntarily sent to Orthopractis: retained while the request is active and for no longer than 12 months after the support matter is closed, then deleted or anonymised, unless a longer minimum period is required by applicable law, security, accounting, fraud-prevention, or legal-claims obligations.

HOW TO DELETE DATA OR REQUEST DELETION

1. Delete app-local session and cache data inside Potsi App: open the ◈ Privacy and legal centre, then select “Delete local session and temporary files.” The same action is available in Controls and the More menu.
2. Delete all Android app-private data: Android Settings → Apps → Potsi App → Storage & cache → Clear storage and Clear cache, or uninstall Potsi App.
3. Delete saved or shared copies: remove annotated files from Pictures/PotsiApp and delete copies from every Files, Photos, email, messaging, cloud, backup, institutional, or recipient destination used.
4. Request deletion of information held by Orthopractis: email info@orthopractis.com with the subject “Potsi App Data Deletion Request.” Send the request from the email address used for the original support contact and identify the support correspondence or website submission to be deleted. Do not attach patient images or confidential health records. Orthopractis may request limited information to verify the requester. We will acknowledge the request within 7 days and normally complete it within 30 days, unless applicable law permits or requires a longer period; if an exception applies, we will explain what must be retained and why.

Orthopractis cannot delete app-local material it never received or copies controlled by another app, person, healthcare organisation, cloud provider, or device. Potsi App has no user account, so there is no Potsi account to delete.

1. WHO WE ARE AND WHAT THIS POLICY COVERS

Potsi App is provided by ORTHOPRACTIS.COM S.M.P.C. (“Orthopractis”, “we”, “us”, or “our”). This Privacy Policy explains how the Android edition of Potsi App accesses and processes information, how long different categories are retained, how users delete local data, how users request deletion of information controlled by Orthopractis, and how user-controlled exports and external services operate.

Website: https://www.orthopractis.com
Potsi App public policy and support page: https://www.orthopractis.com/potsi-app
Official direct Privacy Policy and support page: https://www.orthopractis.com/potsi-app
Terms of Use: https://www.orthopractis.com/terms-of-use
Privacy and support contact: info@orthopractis.com

2. APP PURPOSE

Potsi App is a professional image-measurement aid for marking eight posterior-trunk anatomical landmarks and calculating geometric POTSI, FAI, and HAI values. It is designed for appropriately trained and authorised users. It is not an emergency service, is not a substitute for clinical examination or professional judgement, and does not automatically classify a result as normal, abnormal, diagnostic, or treatment-indicating.

3. INFORMATION THE APP ACCESSES OR PROCESSES ON THE DEVICE

Only after a deliberate user action, the app may access and process:

• A user-selected image from Android Photos or a document provider.
• The first page of a user-selected PDF.
• A photograph created by an installed external camera application and written to a temporary, app-controlled content URI.
• Limited source metadata needed to open the item, such as display name, MIME type, dimensions, and image orientation.
• Selector position, P1–P8 point coordinates, pan and zoom transforms, and the active landmark.
• Derived POTSI, FAI, and HAI values, component values, annotations, and a user-requested report or annotated PNG.

An image of a person’s back, its file name, selected anatomical points, and derived measurements may be personal data, sensitive health-related data, or identifiable clinical information depending on the image and the user’s context.

4. HOW INFORMATION IS USED

The app uses the selected or captured image to display the measurement workspace, guide P1–P8 point selection, calculate the implemented geometric formulas, render labels and construction guides, and prepare a result only when the user requests Save or Share. The app does not use the image or measurements for advertising, behavioural profiling, cross-app tracking, automated identity recognition, or sale.

5. LOCAL PROCESSING; NO AUTOMATIC ORTHOPRACTIS UPLOAD

The released Android source is designed without an Internet permission, Orthopractis account system, advertising SDK, tracking SDK, or third-party analytics SDK. Potsi App does not automatically transmit selected images, camera photographs, point coordinates, calculations, or exports to Orthopractis. Orthopractis cannot remotely view, retrieve, or delete material that remains only in the app or on the user’s device.

6. PHOTOS, FILES, PDF, AND CAMERA ACCESS

Photo and document selection is performed through Android’s system picker or a compatible installed provider. The app requests only a scoped read grant for the item chosen by the user and does not request broad photo-library or storage access. The app does not retain a persistable document permission after the active selection workflow.

Camera capture is delegated to an installed camera application. Potsi App itself does not request the Android CAMERA runtime permission. The camera application receives a temporary, grant-scoped URI for the requested photograph. The camera provider and any selected photo or document provider operate under their own privacy terms.

7. DATA RETENTION POLICY

Potsi App applies the following retention schedule:

7.1 Active session information
The working bitmap, point coordinates, active landmark, pan/zoom transforms, and calculated values are used for the current app session. They are not written to an Orthopractis server or automatic measurement-history database. They are removed from the active workspace when the user closes or replaces the image, selects the in-app local-deletion action, clears Android app storage, or the process ends.

7.2 Camera cache
A temporary camera item is deleted after successful decoding or cancellation when possible. If immediate deletion is interrupted, fallback cleanup removes camera-cache files older than approximately 2 hours when cleanup next runs.

7.3 Sharing cache
A temporary annotated image prepared for the Android share sheet is kept in app cache only as needed for the share action. Fallback cleanup removes share-cache files older than approximately 24 hours; Android may remove cache data sooner.

7.4 User-saved and externally shared files
An annotated PNG saved to Pictures/PotsiApp remains until the user or device administrator deletes it. The original imported source remains with its original Photos or Files provider. Copies sent to another application, recipient, institution, cloud service, backup, or device are retained according to that destination’s policy and must be deleted there separately.

7.5 Orthopractis support correspondence
Potsi App does not automatically send support data. If a user voluntarily emails Orthopractis, the email address, name, organisation, message, technical details, and any chosen attachment may be retained while the request is active and for no longer than 12 months after closure. They are then deleted or anonymised unless a longer minimum retention period is required for applicable legal, security, accounting, fraud-prevention, dispute, or legal-claims purposes. Any exception is limited to the information and duration necessary for that purpose.

7.6 No account or cloud clinical record
Potsi App does not create a user account, remote patient record, cloud measurement history, or developer-operated image repository. Consequently, there is no Potsi App account-retention period and no account-deletion process.

8. DATA DELETION PROCESS

8.1 In-app deletion
Open the ◈ Privacy and legal centre and select “Delete local session and temporary files.” This removes the active image and measurements from the app session and deletes Potsi app-cache files. The same action is available in Controls and the More menu. It does not delete the original source item or files the user deliberately saved or shared outside the app.

8.2 Android system deletion
To remove all app-private Potsi data, use Android Settings → Apps → Potsi App → Storage & cache → Clear storage and Clear cache. Uninstalling Potsi App also removes its app-private files and cache, subject to Android and device-management behaviour.

8.3 Saved and shared copies
Delete saved files in Pictures/PotsiApp and delete every copy from the external destination that received it. Orthopractis cannot remotely delete a file controlled by another application, recipient, clinic, institution, cloud provider, backup, or device.

8.4 Deletion requests to Orthopractis
To request deletion of support correspondence, website contact information, or another record actually controlled by Orthopractis, email info@orthopractis.com with the subject “Potsi App Data Deletion Request.” Send the request from the email address used for the original contact, identify what should be deleted, and do not include patient images or confidential health records. Orthopractis may request limited verification information. The request will be acknowledged within 7 days and normally completed within 30 days. Where applicable law requires or permits continued retention, Orthopractis will explain the category retained, reason, and applicable period, and will delete or anonymise the remainder.

8.5 Requests concerning a healthcare organisation or third party
A clinic, hospital, university, employer, researcher, recipient, cloud provider, or other organisation may separately control its own copy. Send the request directly to that controller or provider. Orthopractis cannot fulfil deletion requests for information it does not possess or control.

9. USER-INITIATED SHARING AND THIRD PARTIES

Information leaves the app only after a deliberate action such as Save, Share, opening a web page, or composing an email. Android MediaStore, the system share sheet, browser, email client, camera application, photo picker, document provider, and any destination selected by the user are separate services with their own privacy practices. Orthopractis does not receive a copy merely because the user saves or shares a result.

10. SUPPORT COMMUNICATIONS AND WEBSITE USE

If a user voluntarily contacts info@orthopractis.com, Orthopractis may receive the sender’s name, email address, organisation, device or app version information, the support message, and any attachment the sender chooses to include. Do not send identifiable patient photographs, medical record numbers, dates of birth, or confidential health records through ordinary support email. Use a synthetic or properly de-identified example.

Opening an Orthopractis web page leaves the app. Website hosting, security logs, cookies, and contact forms are governed by the applicable website notice and settings. A deletion request for Orthopractis-controlled website or support information may be made using the process in Section 8.4.

11. SECURITY

The app reduces exposure by using local processing, no direct Internet permission, scoped Android content grants, a non-exported grant-controlled cache provider, read-only share grants, disabled app backup, bounded image decoding, and a privacy shield when the app leaves the foreground. No device, storage medium, or transfer method can be guaranteed completely secure. Users and deploying organisations remain responsible for device access controls, de-identification, authorised recipients, institutional storage, retention schedules, backups, and secure deletion.

12. PATIENTS, MINORS, AND AUTHORISATION

Potsi App is not directed to children as independent users. A clinician, parent, guardian, institution, researcher, or other responsible operator must obtain every permission, consent, legal basis, ethics approval, and institutional authorisation required before photographing, importing, measuring, storing, or sharing information about another person, including a minor. Acceptance of the app notice is not a substitute for patient consent or research consent.

13. USER CHOICES AND DATA RIGHTS

A user can decline the launch acknowledgement and close the app; avoid selecting or capturing an image; close or replace the active image; clear points; use the in-app local-deletion action; clear Android app storage; delete saved results; remove shared copies where the destination permits; and uninstall the app. Potsi App does not create user accounts, so there is no app account to delete.

Privacy rights vary by jurisdiction. Orthopractis can respond only regarding information it actually controls, such as support correspondence. Requests concerning copies held by a hospital, clinic, employer, cloud provider, recipient, or other destination must be addressed to that controller or provider.

14. DATA SALE, ADVERTISING, AND AUTOMATED DECISIONS

Orthopractis does not sell app-derived images, point coordinates, measurements, or reports. The app does not contain advertising, does not use app data for personalised advertising, and does not make an automated diagnosis, treatment recommendation, eligibility decision, or other decision producing legal or similarly significant effects.

15. INTERNATIONAL USE

Users and deploying organisations are responsible for determining whether their use is permitted in their jurisdiction and clinical or research setting. Where European data-protection law applies, the healthcare professional, clinic, hospital, university, or other organisation deciding why and how patient information is processed may act as the controller for that processing and must provide its own notices, legal basis, safeguards, retention rules, and data-subject procedures.

16. CHANGES TO THIS POLICY

We may update this Privacy Policy when app functionality, data practices, legal requirements, or platform rules change. The public page will show a revised effective date. Material changes will be reflected in the in-app notice, the direct Potsi App public policy page, and Google Play declarations before the related release is submitted.

17. CONTACT AND OFFICIAL LINKS

Developer: ORTHOPRACTIS.COM S.M.P.C.
Website: https://www.orthopractis.com
Potsi App public policy and support page: https://www.orthopractis.com/potsi-app
Potsi App Privacy Policy: https://www.orthopractis.com/potsi-app
Potsi App Terms of Use: https://www.orthopractis.com/terms-of-use
Privacy and support email: info@orthopractis.com