Privacy Policy

This policy explains what personal information we collect when you visit this website, contact us, buy a book or an app, or activate an app, and what we do with it. We have written it in plain English. If anything is unclear, email contact@sr.guide.

The short version. This website uses no tracking cookies, no advertising pixels and no analytics. The Health Record and the Carer Workbench keep your health information on your own device: nothing you type ever leaves your device unless you specifically send it. The apps contain no tracking or advertising code, and we never receive your health information. We collect only what we need to sell you a product, activate it, answer your emails and protect our licences, and we never sell your information.

Who we are

The controller of your personal information is PPM Insights Pty Ltd (ABN 89 001 803 112), PO Box 949, Buddina, QLD 4575, Australia. Email contact@sr.guide. See our Legal Notice for full details.

What we collect, and why

1. When you visit this website

Our website host, Cloudflare, receives the technical details every browser sends (your IP address, the page requested, the time, and your browser type) so it can deliver the page and protect the site from attacks. Cloudflare keeps these server records only briefly. We don't use them to identify you. Our fonts and images are served from our own site, so visiting a page doesn't send your details to Google or any other company.

Legal basis (GDPR): our legitimate interest in running a secure website (Article 6(1)(f)).

2. When you email us or use a form on this site

Our contact, review, refund and "notify me" forms don't send anything by themselves. They open your own email program with a message already filled in, and you decide whether to send it. When you email us we receive your email address, your name if you give it, and whatever you write. These emails are stored in our mailbox provider, Namecheap Private Email.

Legal basis: to answer you and to deal with your order (Article 6(1)(b)), or our legitimate interest in responding to messages (Article 6(1)(f)).

3. When you ask to hear about new books and apps

If you write to subscribe@sr.guide, or tick the box to hear from us at checkout (where offered), we use your email address to tell you when new books and apps are ready, and to send occasional series news. You can stop at any time: use the unsubscribe link in any email, or write to subscribe@sr.guide with "Unsubscribe" in the subject. We'll act on it within five business days.

Legal basis: your consent (Article 6(1)(a)), which you can withdraw at any time.

4. When you buy

Checkout and the member area run on Systeme.io (shop.sr.guide). At checkout you give your name, email address, country and, for some payment methods, a billing address. Systeme.io records your order and sends your receipt and access details. Your card or PayPal details go straight to Stripe or PayPal. We never see or store them.

Paperback books are printed and shipped by Books.by, which receives the details it needs to deliver your order.

Legal basis: to perform our contract with you (Article 6(1)(b)) and to keep the records tax law requires (Article 6(1)(c)).

5. When you activate an app

The Health Record and the Carer Workbench ask for the email address you bought with and your activation code. The app sends these to our activation service, which runs on Cloudflare. To check the code and protect our licences, the service records, for each activation attempt:

• your email address and activation code, the product, and the date and time;
• the result (activated, or the reason it wasn't);
• your IP address and the approximate location Cloudflare derives from it (country, region, city and time zone), and the name of your internet provider;
• your browser and device type, and the web address the app was opened from.

We use this record to issue and re-issue activations, to answer your support questions, and to spot codes that are being shared or misused. If a code is used far more often than one household would, we review it by hand. We may then block that code from activating again. No decision is made about you automatically.

We keep each activation record for two years, after which it is deleted automatically. A short list of blocked codes and email addresses is kept for as long as the block is needed.

Legal basis: to perform our contract with you (Article 6(1)(b)) and our legitimate interest in preventing licence misuse and fraud (Article 6(1)(f)).

6. Inside the apps: your health information stays with you

Medicines, doses, readings, notes, contacts and photos you enter in the Health Record or the Carer Workbench are saved in your own browser, on your own device. We don't receive them, and we can't see them. Backups are files saved on your device. Carer Reports and transfer files are sent only when you choose to send them, from your own email or sharing app, locked with a passkey phrase that we never see.

No tracking in the apps, ever. The apps contain no analytics, advertising or tracking code, and no third-party software that could report what you type. We never receive your health information, so we cannot lose it, sell it or share it, and no advertiser ever sees it. This is a promise we build every version to keep, and we will not change it.

One feature uses the internet: when your device is online, the letters you type into the Health Record's medication name box are matched against the U.S. National Library of Medicine's public drug-name list, to suggest spellings. Those letters are the only information sent, and nothing is sent while you are offline.

7. Free downloads

Our free checklists and planners at app.sr.guide work the same way as the apps: what you fill in stays in your browser and in the files you save. No sign-up is needed.

Who processes information for us

Each acts on our instructions, or, for payments, as an independent controller under its own privacy policy. We do not sell or rent your personal information, and we don't share it for advertising.

International transfers

We are based in Australia, and some of our providers are in the USA. When information from the EU or UK goes to a country without an "adequacy" decision, we rely on our providers' Standard Contractual Clauses approved by the European Commission (and the UK addendum), or on their certification under the EU–US Data Privacy Framework where that applies.

How long we keep it

• Orders, invoices and refund records: 7 years, for tax and accounting law.
• App activation records: 2 years, then deleted automatically.
• Emails with us: up to 3 years after our last exchange, unless they relate to an order.
• Newsletter and new-release list: until you unsubscribe.
• Website server records at Cloudflare: a short period set by Cloudflare for security.

Do Not Track and Global Privacy Control

Some browsers can send a "Do Not Track" or "Global Privacy Control" signal. We don't track visitors across websites or over time, on this site or in our apps, and we don't allow anyone else to. So there is nothing for the signal to switch off: we treat every visitor as if it were on. We don't sell or share personal information for advertising.

Your rights

Wherever you live, you can ask us to:

• tell you what personal information we hold about you, and give you a copy;
• correct it;
• delete it, unless we must keep it by law (for example tax records);
• limit how we use it, or object to our use of it based on legitimate interests;
• send it to you, or another company, in a common format;
• stop emailing you (withdrawing consent doesn't affect anything we did before).

Email contact@sr.guide. We'll reply within one month. We may ask you to confirm the request from the email address you bought with, so we don't give your information to someone else.

If you're unhappy with how we've handled your information, please tell us first. You can also complain to a data protection authority: in the EU, the authority where you live; in the UK, the Information Commissioner's Office (ico.org.uk); in Australia, the Office of the Australian Information Commissioner (oaic.gov.au).

Security

Our sites use HTTPS throughout. Activation records can only be viewed by us, using a private administrator key. The apps lock backups and shared files with your passkey phrase, which is never sent to us.

Children

Our products are for adults. We don't knowingly collect information from anyone under 16.

Changes to this policy

If we change how we use your information, we'll update this page and the date at the top. If a change is significant, we'll tell customers by email before it takes effect.