Privacy, without the fine print.Your records stay on your phone.

Who we are

Checkup is operated by Ng Qi Heng, an individual developer based in Malaysia (“we”, “us”). Questions about this policy or your data: hello@get-checkup.app.

Checkup keeps track of health checkups, vaccines and screenings for you and your family. That is health information, which Malaysia’s Personal Data Protection Act treats as sensitive. So we built Checkup so that we never receive it.

What stays on your phone

Everything you enter stays on your device: the people you set up and their profiles (name, relationship, birth date, sex, pregnancy due date, and conditions you choose to add), their checkups and intervals, what you remember about past visits, and every visit you log (date, clinic, doctor, what was done, cost, who paid, notes).

We have no server that stores it and no copy of it. If you delete the app, it’s deleted from your phone.

Encryption and app lock

Your records are kept in an encrypted database (SQLCipher). The key is a random 256-bit key made on your phone and kept in its secure storage (the iPhone Keychain or the Android Keystore). It is never sent anywhere. If encryption isn’t available, Checkup refuses to store records rather than store them unencrypted.

You can turn on app lock in Settings. Checkup then asks for Face ID, fingerprint or your phone’s passcode, and hides your records in the app switcher.

No account

Apart from the update check described below, Checkup doesn’t send anything. We never receive:

• your name, email address or phone number (there are no accounts);
• any health information, or anything else you enter;
• your location, contacts or photos;
• advertising identifiers or any identifier that tracks you across apps.

Reminders

Reminders are scheduled on your phone by its own notification system, not sent from a server. By default a reminder says only that a checkup is due, and for whom; it never names the checkup or a condition, because a lock screen is public. Naming them is your choice in Settings.

Backups and moving phones

When you choose Back up, Checkup makes one file holding your records, encrypted with a passphrase you choose. The passphrase is never stored. You decide where the file goes (Files, a cloud drive, a computer); whoever runs that place stores the encrypted file under their own terms, but can’t read it without your passphrase. We never receive it.

On Android, automatic phone backups are turned off for Checkup, because they couldn’t be decrypted on another phone. On iPhone, an encrypted iPhone backup carries your records and their key to a new iPhone.

When you write to us

If you email us, we receive your email address and what you write. We use it only to answer you and fix problems, keep it in our mailbox (Proton Mail) for as long as that takes, and delete it when you ask. Please don’t send your records or screenshots of them: we don’t need them to help.

No tracking, no analytics

The app contains no analytics, advertising or crash-reporting tools. If you allow it in your phone’s settings, Apple or Google may share anonymous crash reports with us; they contain no records. Apart from update checks (above), the app sends nothing. This website uses no cookies and no analytics.

App updates

To get fixes without a full store update, Checkup checks Expo’s update service (Expo is the company whose tools Checkup is built with). That check sends a random installation ID that the app makes for itself, the app’s version and platform, and, only if the app once failed to start, a short error note. It never includes your records. Expo keeps the installation ID and your IP address to count installs of each update, acting for us as our service provider, and doesn’t use them for advertising.

When other companies are involved

• Apple and Google deliver the app through their stores and handle any purchase under their own privacy policies. We don’t receive your name or payment details.
• Guideline links. Each recommendation links to its source. Opening one takes you to that organisation’s website, under its own policy.
• This website is served by Cloudflare. Like any web host, it handles your browser’s request (including your IP address) to deliver the page; we don’t log or keep it.

Where this data is handled

The little we do handle is processed outside Malaysia by the companies above, under their own safeguards: update checks by Expo in the United States, this website by Cloudflare’s global network, and email by Proton in Switzerland. Your records are not part of any of it: they stay on your phone.

If a data breach affected anything we handle, we would tell you, and the Personal Data Protection Commissioner, as Malaysian law requires.

Future features

If we add a feature that sends anything off your phone, such as asking a question of an AI assistant, it will be optional, it will ask you first, it will send only what you type, never your records, and we will update this policy before it ships.

Children

Parents can keep their children’s checkups in Checkup. Those records stay on the parent’s phone, like everything else. We collect nothing from or about children.

Your rights

Your records never reach us, so there is nothing of them for us to show, correct or delete. The only thing kept about the app is the update check’s random installation ID, which isn’t linked to you; reinstalling Checkup makes a new one. You hold everything else: you can view and change it in the app, export it as a backup, and delete it in Settings, Backup, Delete all data. To ask about, correct or delete anything we hold (such as your emails to us), write to us and we will answer within 21 days.

Bahasa Malaysia

This notice is also available in Bahasa Malaysia. If the two differ, the English version applies.

Changes to this policy

If this policy changes, we will update the date at the top. If a change affects what leaves your phone, the app will tell you before it applies.