Privacy policy

Effective September 26, 2026

Who we are

This privacy policy is for VetCareLog: VA Pension Tracker, an Android app published on Google Play by Harris Apps Studio (package com.vetcarelog.app), and for the website vetcarelog.com. In this policy, "we" and "us" mean Harris Apps Studio.

The short version: your family's records are yours. Only you and the people you invite can see them. We do not sell your information, show ads, or use tracking cookies.

What we collect

• Your account: your email address and a scrambled (hashed) version of your password. We never see or store your actual password.
• What you record: the names you enter for the person you care for and their household, medical expenses (dates, amounts, who was paid, what was paid back), drives to appointments, caregiver agreements and hours, and notes.
• Files you add: photos and PDFs of receipts, statements, signed care agreements, and family documents you choose to keep here (such as discharge papers or VA letters). Only people with access to that record can open them.
• Pension estimate details: if you use Your number, whether the veteran is married, the level of care, and household income. Used only to show the estimate; never put on any form or shared.
• Plan details: whether you have a plan and when it renews. Card details are entered on Stripe's page and held by Stripe. We never see your full card number.
• Security records: failed sign-in attempts and the network (IP) address they came from, kept for a short time to stop password guessing. A history of changes to each record ("who entered what"), shown to everyone with access to that record.
• Help messages: anything you send us through the Help page, with your email.

We do not ask for Social Security numbers or VA file numbers, and we ask you not to enter them.

Reading receipts: when you take a photo of a receipt, the app reads the amount, date and store on your own phone or computer. The photo is not sent anywhere to be read. The reading tool itself is downloaded once from jsDelivr, a public code library. The answers to the homepage "Is this for me?" check stay in your browser and are not saved.

How we use it

• To run VetCareLog: keep your record, total it, and build your worksheet, receipts binder, and spreadsheet. The worksheet and binder are made on your own device.
• To manage your plan and free trial.
• To send the emails you ask for: password reset links and, if you leave them on, a monthly reminder. Reminders never include medical details, and every one has a one-click way to stop them.
• To keep accounts safe and to answer your questions.

We do not sell or rent your information, use it for advertising, or share it with the VA or anyone else on your behalf.

Who can see your records

You, and the people you invite to that record, with the access you choose (add and edit, or view only). We can reach stored information only when it's needed to run the service, keep it secure, answer a request from you, or meet a legal obligation.

Companies that help us run VetCareLog

These providers process information only to provide their part of the service:

• Cloudflare hosts the website and stores receipt files.
• Turso hosts the database.
• Stripe handles payments.
• Brevo sends email, such as password resets and the monthly reminder you can turn off.
• Microsoft Clarity measures how people use our public pages (the homepage, guides, and help), including anonymous recordings of clicks and scrolling, so we can make the site easier to use. It is not loaded inside the app, so it never sees your family's records.
• Google Fonts provides the lettering on our pages, which means your browser asks Google's servers for font files.

Share and install counts

In the Android app, when you send an invite, or install the app from a link someone shared, we count it, with no name attached (for example, "share opened"). To credit the person whose link was used, the app keeps a random code on your phone and sends it with that count to our own counter at growth.grademyhabits.com. We never send your family's records, and none of this is used for advertising.

On the website, when you use a Share button, we count it the same way, with no name attached. Browsers that send Do Not Track or Global Privacy Control are not counted.

If you send us feedback or a testimonial, we keep what you typed. A testimonial is published only if you tick the box, and only with your first name and city.

Cookies and storage on your device

We use one cookie to keep you signed in and, only if you arrive from a link someone shared, a second one that keeps that link's random code for 30 days so the person who shared can be credited. Your browser also remembers a few preferences, such as which person you last viewed, whether you paused motion, and whether you hid the getting-started list. On our public pages, Microsoft Clarity sets its own cookies to count visits. It is not used inside the app. We use no advertising cookies and never sell your information.

Keeping it safe

Connections are encrypted (HTTPS). Passwords are stored only as a hash. Every request checks that you have access to the record. Sign-in pauses after repeated wrong passwords. Invite links work once, only for the invited email.

Your choices

• Download your data: Plan and settings, then Download my data.
• Delete your account: Plan and settings, then Delete my account. This erases the records you own and their files, and cancels any plan. Entries you added to someone else's record stay part of their record, shown as added by a former member. Deleted information may remain in encrypted backups for a limited time before it is overwritten. Full steps, including how to ask by email if you cannot sign in, are on the delete account page.
• Stop reminder emails: the link in any reminder, or the switch in Plan and settings.

Health information

VetCareLog is a record-keeping tool you choose to use. It is not a health care provider, health plan, or part of the VA. We protect what you record as private and use it only as this policy describes.

Children

VetCareLog is for adults. Accounts are not for anyone under 18.

Changes

If we change this policy in a way that matters, we'll update the date above and tell account holders before the change applies.

Questions

Send us a message on the Help page.