Your health record lives on your phone. Not on ours.
Effective 11 September 2026 · applies to the CWICare Ally mobile app
The rest of this page explains each of those in full. It is written to be read rather than to be survived, and it describes what the app actually does today — not what a template says an app might do.
Ally is made by CWICare Systems Inc. When this statement says "we", it means that company. When it says "the app" or "Ally", it means the CWICare Ally mobile app for iPhone and Android.
This statement covers Ally only. Acuitage and Progressor are separate products, used by paramedics and clinicians rather than by patients, and they handle information differently.
Everything you put into Ally is written to a database file on your phone. That includes:
None of it is uploaded. There is no CWICare server holding a copy, no cloud sync, and no backup we control. If your phone is backed up to iCloud or to Google, Ally's database may be included in that backup — that backup belongs to you and is governed by Apple's or Google's terms, not ours.
The practical consequence is worth being blunt about: if you lose the device and have no backup of your own, the information is gone. We cannot recover it for you, because we never had it.
Ally shows reference details about a medication — what it is, what class of drug it belongs to, and what the manufacturer's label says. It doesn't ship with a copy of every drug in existence, so the first time you add a medication Ally hasn't seen before, it asks two public drug databases for that information:
The request contains the name of that one medication and nothing else. It does not include your name, your other medications, your age, or anything else from your record, and it carries no account or identifier of any kind. Neither service has any way to know who asked.
Like any request over the internet, it does reveal your device's IP address to the service receiving it, and those services may log it under their own policies. Once the information comes back, Ally stores it on your device, so the same medication is never looked up twice.
These are reference lookups, not checks on you. Ally is not asking permission, validating a prescription, or reporting anything about your treatment to anyone. It is looking up a drug the way you might look one up yourself.
Ally can put together a report — a diary export, a symptom summary, a questionnaire result, a handoff to a clinician using Progressor — and send it to someone.
When you do that, Ally hands the message to your phone's own email or messaging app and stops there. You see the message before it goes. Nothing routes through a CWICare server, and we never see what you sent or who you sent it to. Once it has left your phone it is governed by whatever email provider you use.
The same is true of the emergency QR code and of care shared with a practitioner: the information exists on your device and on the device of whoever you deliberately gave it to. There is no third copy, and nothing is shared unless you choose to share it.
Your phone will ask you to approve these. Ally asks for each one at the moment it is needed, and the app keeps working without them — you'll just lose that particular feature.
It is easier to state these plainly than to have you infer them from silence:
This is a privacy point as much as a safety one, because it defines what the app is for. Ally documents what you and your care team have recorded. It does not diagnose, score, triage, or tell you what to do about a symptom, and it never makes a decision on your behalf or reports one to anyone else.
Where Ally suggests you might want to seek care, it is surfacing what you yourself have entered over time — not an assessment of you.
Ally is bought once from this website. The payment itself is handled entirely by Stripe on Stripe's own pages — we never see or receive your card number. Stripe holds the customer record for that purchase under its own privacy policy.
Our side of the purchase keeps no customer database: the site confirms with Stripe that a payment succeeded and then serves your download. Buying the app creates no account and is not connected to anything you later enter into it.
Ally is intended for adults. It is built for someone managing their own health or the health of people in their care, and a parent may of course keep a child's information in it — that record lives on the parent's device like everything else. The app is not directed at children, is not marketed to them, and collects nothing from anyone directly.
Because everything is on your device, you are not dependent on us to exercise any of this:
There is no "request my data" form to fill in, and no deletion request to make, because we hold nothing to return or erase. If you bought Ally and want the purchase record removed, that is a Stripe record — write to us and we will ask them on your behalf.
CWICare Systems Inc. is based in British Columbia, Canada. We handle personal information in line with British Columbia's Personal Information Protection Act and Canada's Personal Information Protection and Electronic Documents Act.
The medication lookups described in section 3 are answered by servers in the United States. That is the only circumstance in which anything connected to your use of Ally crosses a border, and what crosses is a drug name with nothing attached to it.
If Ally's behaviour changes in a way that affects this statement, we will update the page and change the effective date at the top. We will not quietly start collecting something this page says we don't.
Where a change is significant — anything that would move information off your device that previously stayed on it — the app itself will tell you before it happens.
Questions about this statement, or about anything Ally does with your information:
CWICare Systems Inc., British Columbia, Canada.