What we store, where, and who can see it
DiAlgo holds family messages, medication and medical visits: this is health data. This page explains plainly how it is handled, including what the app does not do.
The data
- What is stored
- Your name and email, the families you belong to and your role in them, messages, medication with its schedule, medical visits and the identifier that allows notifications to reach your phone.
- Where
- Messages, medication and visits are stored in a Google Firebase database hosted in the European Union (region europe-west1, Belgium). DiAlgo’s server code runs in that same region.
- Third-party services
- Sign-in and notifications rely on services from Google (Firebase) and Apple, and the subscription is billed through the App Store or Google Play. These providers may process data outside the European Union under their own terms.
- Encryption
- All communication between the app and the server is encrypted in transit (TLS), and Google encrypts stored data. Messages are not end-to-end encrypted.
Access
- Who sees a family’s data
- Only its members. The database rules reject any read or write from someone who does not belong to that family.
- How people join a family
- With an invite code generated by the administrator. After ten failed attempts the account is locked for an hour to prevent codes being guessed.
- Roles
- Administrator, relative and older person have different permissions. Only the administrator manages members, buttons, medication and visits.
- Passwords and payments
- DiAlgo does not store your password: sign-in is handled by Firebase Authentication, or directly by Google or Apple. Nor do we see your card; payment is processed by the store.
Your rights
- Export
- From the app you can export your family’s conversation history as PDF, CSV or text.
- Delete your account
- You do this from your profile, inside the app. If you pay the subscription, cancel it first in the App Store or Google Play: deleting the account does not stop the charge.
- Access, rectification and erasure
- You can exercise your rights over your personal data by writing to dialgo@onmedic.org.
Do you have a specific question about your data?
Write to us and we will reply within 24 business hours.