Privacy Policy

Last Updated: June 5, 2026

Cyber and Sons built the TCM Clinic Aid app as a commercial app. This SERVICE is provided by Cyber and Sons and is intended for use as is.

This page is used to inform users regarding our policies with the collection, use, and disclosure of personal information if anyone decides to use our Service. If you choose to use our Service, then you agree to the collection and use of information in relation to this policy. The personal information that we collect is used for providing and improving the Service. We will not use or share your information with anyone except as described in this Privacy Policy.

The terms used in this Privacy Policy have the same meanings as in our Terms and Conditions, which is accessible at TCM Clinic Aid unless otherwise defined in this Privacy Policy.

Information Collection and Use

For a better experience while using our Service, we may request that you provide us with certain personally identifiable information, including but not limited to:

• Email address (when you contact us for support)
• Device information (for support and troubleshooting)
• Account information (if you create an account or make in-app purchases)
• TCM-related notes and preferences (stored locally on your device)

Local Storage: Most data is stored locally on your device. Your patient records, clinical (SOAP) notes, quiz history, item-comparison history, and app settings always remain on your device and are never transmitted to our backend. Other data, such as your favorites and customized TCM reference content, is transmitted to our backend service (Back4App) only if you choose to use the optional Cross-Device Sync or Community Sharing features described below.

iCloud Synchronization: If you choose to enable iCloud synchronization through our backup features, certain data (such as favorites, notes, and preferences) may be synced with Apple's iCloud service to enable backup and cross-device access. This is optional and can be disabled at any time through the app settings.

The app uses third-party services that may collect information used to identify you. These services operate independently and have their own privacy policies.

Third-Party Service Providers

The TCM Clinic Aid iOS app uses the following third-party services, each with their own data collection and privacy practices:

• Apple App Store and In-App Purchase - For app distribution and payment processing
• Apple iCloud - For optional cloud backup and synchronization of user data
• Apple iCloud Data Processing - For secure cloud storage
• Google Firebase - For analytics and crash reporting
• Firebase Data Processing and Security Terms
• Qonversion - For in-app purchase and subscription management
• Back4App - Backend host (Parse Server) for the optional Cross-Device Sync and Community Sharing features, and for delivering reference-data updates

Open-Source Libraries: The app uses several open-source libraries for UI and utility functions:

• iCarousel - Carousel UI component library
• MBProgressHUD - Progress display library
• MSColorPicker - Color selection UI library
• Toast - Toast notification library
• UIImage+ImageWithColor - Image utility library

These libraries are open-source and do not collect personal data. They are used solely for UI rendering and do not transmit any information to external servers.

Note: Firebase Analytics is active in this app. Firebase Crashlytics crash reporting is active only after you grant consent on first launch; you can decline it at any time. This app does not use Firebase Performance Monitoring.

Each active service has its own privacy policy, and we recommend reviewing them to understand how your data may be processed by these third parties.

In-App Purchases and Payments

TCM Clinic Aid offers optional in-app purchases including premium content and features. Payment processing and subscription management is handled through:

• Apple App Store In-App Purchase: Processes all in-app purchases through your Apple ID
• Qonversion: Manages subscription information, purchase history, and entitlements to premium features

We do not directly access or store your payment information. All payment data is processed securely by Apple according to their privacy policy. Your subscription status, purchase history, and entitlements may be stored locally on your device, in iCloud (if enabled), and on Qonversion's servers for access control and license verification purposes. Qonversion operates independently and has its own privacy policy that you should review.

iCloud Backup and Synchronization

TCM Clinic Aid offers optional iCloud backup and synchronization features:

• iCloud Sync: Syncs your favorites, notes, and preferences to Apple's iCloud servers
• iCloud Backup: Your app data can be included in your device's iCloud backup

These features are optional and can be enabled or disabled at any time through the app settings. You maintain full control over what data is synced and can delete backup data through your device's iCloud settings. Apple's iCloud is encrypted in transit and at rest.

Community Sharing and Cross-Device Sync

In addition to Apple iCloud, TCM Clinic Aid offers optional features that store certain data on our backend service, hosted by Back4App (a Parse Server provider). These features are off by default and only transmit data when you actively choose to use them:

• Cross-Device Sync: Lets you save a copy of your user data to our backend and import it onto another installation of TCM Clinic Aid, protected by a User Key and password that you set. The data transferred includes your favorites, customized TCM reference content (such as formulas, herbs, and points), and search history. It does not include your patient records, clinical (SOAP) notes, quiz history, comparison history, or app settings — these are deliberately excluded and never leave your device.
• Shared Favorites: Lets you upload a favorites list, protected by a User Key and password, so it can be retrieved on another device or shared with another user who has the key.
• Community Herb Garden: Lets you publish your own herb and formula entries to a shared community library. Entries you publish (including their name and a generated identifier) are readable by other users of the feature. Do not include personal or confidential information in entries you publish.

To support these features, the app creates an anonymous identifier for your device through the Parse SDK; this identifier is not linked to your name or Apple ID. We do not use it for advertising or tracking. If you never use these features, no related data is sent to our backend (the app does still contact the backend to check for reference-data updates, which does not transmit your personal data).

Log Data

When you use our Service, if an error occurs in the app, we collect data and information (through Firebase) on your device called Log Data. This Log Data may include:

• Device Internet Protocol (IP) address
• Device name and model
• Operating system version
• App configuration and settings when the error occurred
• Time and date of the error
• Other diagnostic statistics

This log data is used to diagnose problems, improve the app, and fix bugs. Log data collected through Firebase Crashlytics is typically retained for 90 days.

Data Retention

We retain different types of data for different periods:

• Local Device Data: Remains on your device until you uninstall the app or manually delete it
• iCloud Data: Retained as long as your iCloud backup is active; can be deleted through device settings
• Firebase Crash Logs & Diagnostics: Retained for up to 90 days by Firebase
• Firebase Analytics Data: Retained according to Google Firebase analytics retention policies (typically 14 months)
• Qonversion Subscription Data: Retained as long as your subscription or account is active
• Back4App Sync & Community Data: Data you upload via Cross-Device Sync or Shared Favorites is retained on our backend until you overwrite or delete it; Community Herb Garden entries you publish remain until removed. Contact us to request deletion.
• User Account Data: Retained as long as your account is active

Your Data Rights and Choices

Depending on your location, you may have the following rights regarding your personal data:

• Right to Access: You can request a copy of the personal data we hold about you
• Right to Deletion: You can request that we delete your personal data (right to be forgotten)
• Right to Data Portability: You can export your data through app settings
• Right to Opt-Out: You can disable iCloud synchronization at any time through app settings

To exercise any of these rights, please contact us at support@cyberandsons.com with your request. We will respond within 30 days.

Analytics

TCM Clinic Aid uses Firebase Analytics to:

• Understand how users interact with the app
• Improve app functionality and user experience

Firebase Analytics may collect information about your app usage including device type, operating system, and app version. The app does not send custom analytics events, does not collect advertising identifiers (IDFA), and does not use this data for advertising or cross-app tracking. Analytics collection is enabled by default and the app does not currently provide an in-app toggle to disable it. If you wish to have your analytics data deleted, contact us at support@cyberandsons.com.

Security

We value your trust in providing us your personal information, and we are striving to use commercially acceptable means of protecting it. However, please remember that no method of transmission over the internet or method of electronic storage is 100% secure and reliable. We cannot guarantee absolute security, but we implement industry-standard security practices to protect your data.

Security measures include:

• Local data storage on your device with iOS security features
• Encryption of data in transit using HTTPS/TLS when syncing with iCloud, Firebase, Qonversion, and Back4App
• Apple's end-to-end encryption for iCloud data
• Secure authentication for account-based features
• Firebase's enterprise-grade security infrastructure

Links to Other Sites

This Service may contain links to other sites and services operated by third parties. If you click on a third-party link, you will be directed to that site. Note that these external sites are not operated by us. Therefore, we strongly advise you to review the Privacy Policy of these websites before using them. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

Children's Privacy

These Services do not address anyone under the age of 13, and we do not knowingly collect personally identifiable information from children under 13. In the case we discover that a child under 13 has provided us with personal information, we immediately delete this information from our servers. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us immediately so we can take the necessary action.

Users aged 13-18 should note that some features (such as iCloud synchronization or account creation) may require parental consent. Please review this policy with your parents or guardians.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. Thus, you are advised to review this page periodically for any changes. We will notify you of any material changes by posting the new Privacy Policy on this page with an updated "Last Updated" date. These changes are effective immediately after they are posted on this page. Continued use of the Service after any such changes constitutes your acceptance of the new Privacy Policy.

Data Processing and International Transfers

Your information may be transferred to, stored in, and processed in countries other than your country of residence, including the United States (via Apple's iCloud servers, Google Firebase, Qonversion, and, if you use the optional sync and community features, Back4App). These countries may have data protection laws that differ from your home country. By using the Service, you consent to the transfer of your information to countries outside your country of residence, which may have different data protection rules.

GDPR and Privacy Rights (EU Users)

If you are located in the European Union, United Kingdom, Switzerland, or other jurisdictions with similar data protection laws, you have additional rights including:

• The right to request a copy of your personal data
• The right to request correction or deletion of your personal data
• The right to restrict processing of your personal data
• The right to object to processing
• The right to withdraw consent at any time

To exercise these rights, please contact us at support@cyberandsons.com. We will comply with all applicable data protection regulations.

Contact Us

If you have any questions, concerns, or suggestions about our Privacy Policy or our privacy practices, please contact us:

• Email: support@cyberandsons.com
• In-App Support: Through the app's support feature
• Mailing Address: Cyber and Sons

We will respond to your inquiry within 30 days. If you are not satisfied with our response, you may have the right to lodge a complaint with your local data protection authority.

Firebase Authentication

While Firebase Authentication is available as a framework in this app, we currently do not use it for user authentication. User data is stored locally on your device and optionally synced through iCloud.

This privacy policy was last updated on June 5, 2026 and is applicable to TCM Clinic Aid (iOS) version 2.3.1 and later.