Taxonys privacy policy

1. Scope and contact

This policy describes Taxonys for iOS and Android, formerly Auxi Flow. Taxonys is a nursing reference and care planning tool.

Controller: NALVETH, México. For privacy questions and personal data requests, contact support@nalveth.dev. The NALVETH website and other apps are described in the general privacy policy.

2. Clinical data and local storage

Names, beds, plans, patient-associated diagnoses, notes, vital signs, scores and other clinical content you enter are processed and stored on your device. Taxonys does not send them to NALVETH servers, AI providers, Analytics or advertising networks.

When you choose to export, copy or share a report or PDF, you choose its destination. Apps or people receiving the file handle it under their own terms. PDFs are created in a temporary app folder.

On iOS, device backups may include local data according to your Apple settings and the services you use. On Android, plans and PDFs are excluded from backups and from transfers to a new phone; only app settings (profile, shifts, units and theme) are backed up.

The optional app lock uses system mechanisms: Face ID or passcode on iOS; fingerprint, face or screen lock on Android. Taxonys does not receive your biometric data.

3. Optional usage statistics

You can turn on “Share usage statistics” during onboarding or in Settings. It is off by default. We use Google Analytics for Firebase to understand which screens and features are used, care plan creation steps, sessions, continued use and, where applicable, advertising impressions and revenue.

Measurement may include installation identifiers, app version, technical device information and approximate location derived from the connection. These data are pseudonymous and may be associated with an installation; we do not describe them as anonymous. We do not assign an account identifier to Analytics. On iOS, the Analytics variant included in Taxonys cannot access the IDFA advertising identifier; on Android, Analytics is configured not to collect the advertising ID.

Taxonys events do not include text you type or search for, patient identities, plan identifiers, diagnosis or concept codes, the name of a scale applied, scores, clinical values or document contents. For example, we can measure that a scale was saved without receiving which scale it was, its result or who it was applied to. We do not enable these usage data for advertising personalization in Analytics.

Where regional consent is required, Analytics also respects the statistics choice in Google’s privacy form. You can turn the feature off in Settings. This stops Analytics collection and resets its local data; it does not retroactively delete information Google has already received.

4. Advertising and providers

Taxonys uses Google AdMob and may use mediation with Meta Audience Network, AppLovin, Unity Ads, Liftoff Monetize, InMobi, Mintegral and Pangle. Ad delivery depends on active networks, the platform, availability and your privacy choices.

Advertising services may process IP addresses, inferred approximate location, device or service identifiers, the advertising identifier where permitted, ads shown, interactions and diagnostic or performance data to display and measure ads, provide their services, prevent fraud and improve performance. They may associate these data with an installation or device and, where permitted, use them for advertising tracking across apps and websites. Analytics permission does not replace advertising consent or iOS tracking permission. Clinical data from your plans is not sent to these providers.

See each provider’s practices and controls:

• Google AdMob and Google Analytics for Firebase
• Meta Audience Network
• AppLovin
• Unity Ads
• Liftoff Monetize
• InMobi
• Mintegral
• Pangle

5. Your choices and permissions

Statistics are optional, and declining them does not prevent use of clinical features. You can change “Share usage statistics” in Settings. Where the regional form requires it, the app provides “Ad privacy” in Settings to review or withdraw consent.

On iOS, tracking permission is managed in iOS Settings → Privacy & Security → Tracking. On Android, you can reset or delete your advertising ID in Settings → Privacy → Ads (names may vary by device). Networks must respect applicable permission and consent choices. Declining tracking or deleting the advertising ID does not remove ads; ads with limited processing or non-personalized ads may be shown.

Android permissions: internet access (ads and optional statistics; plans and the taxonomy work offline), notifications and alarms for the intervention reminders you schedule, and rescheduling those reminders after the phone restarts. Notification permission is requested when you schedule your first reminder. Reminders show the bed, not the patient’s name, and on the lock screen they only show that there is a Taxonys reminder.

6. Support

The app links to NALVETH support. The website form prepares an email in your email app and does not send it directly. If you choose to send it, we receive your address, message and attachments to answer and follow up on your inquiry. Cloudflare Email Routing forwards that email to a Google Gmail inbox. We retain correspondence for as long as needed to resolve and follow up on the request and meet applicable obligations.

Do not send medical records, patient data, passwords or identifiable clinical documents. You can request deletion of correspondence by contacting support@nalveth.dev. See also the privacy policies of Cloudflare and Google.

7. Retention and deletion

Local clinical data remains until you delete it or remove the app and its data, depending on the operating system. NALVETH does not hold a server copy to recover or delete. Backups are managed separately. See how to delete local data.

The Taxonys Analytics property is configured for two months of event data and fourteen months of user data; the user identifier retention period resets with new consented activity. These controls do not set the retention of most standard aggregated Google Analytics reports. Advertising and provider data are retained according to their practices and applicable controls. Uninstalling the app or withdrawing consent does not automatically delete history they have already received.

8. Requests and rights

Contact support@nalveth.dev to exercise rights of access, correction, cancellation, deletion or objection, withdraw consent, request information or exercise other rights available under applicable law. Specify the app and describe your request without including patient data. We may ask for information needed to verify and handle your request securely.

Clinical data that stays only on your device is managed through the app and operating system. We do not connect your support email address with an Analytics identifier. Where a provider processes data independently, you can also use the privacy controls and channels in its policies. Where applicable, you can lodge a complaint with the competent data protection authority.

9. Providers and international processing

Advertising, measurement, hosting and email providers may process data in countries other than yours, including the United States and other countries where they operate. Their policies explain international processing, protection mechanisms and available options. We use support data to handle requests and optional statistics to improve Taxonys; consent is requested where applicable for advertising, tracking and measurement.

10. Security

Use device locking, the app’s optional lock and appropriate controls for files you share. SDK and provider communications use their security mechanisms. No system offers absolute security. Do not share patient information through support channels.

11. Changes

We will update this policy when features, providers or data practices change. The update date appears at the top. If a new purpose requires consent, it will be requested through the relevant controls before that purpose is enabled.