← Back to MUIY

Privacy policy

Effective 19 July 2026 · last updated 19 July 2026

The short version

1. Who we are

MUIY is a free thalassaemia self-care app made and maintained by Shaneez, within ThalFrndz — the thalassaemia community of the Maldives. It is built by people living with thalassaemia, for people living with thalassaemia. Shaneez is responsible for the data described in this policy, and "we" throughout means Shaneez and the small ThalFrndz team who help run the app.

MUIY helps you organise your own care. It is not a medical device and does not replace your care team.

2. Information we collect

2.1 Account and profile

The Google account or email address you sign in with, and what you enter to set up your profile: your name and preferred name, date of birth, sex, an optional country, and an optional profile photo. If you set MUIY up as a caregiver, your own name is kept alongside the profile of the person you care for.

2.2 Health information

Everything you choose to log, which may include:

2.3 What we do not collect

There is no advertising, no identity tracking, and no background collection of any kind. What you read in the Learn library is not tracked. We do not collect your location, contacts, or anything from other apps on your phone.

3. How your information is used

Your information is used only to run MUIY for you: showing your records, working out transfusion eligibility and dose estimates, sending the reminders you turn on, and syncing between your own devices. It is not used to profile you, and it is never used to train anything.

Eligibility windows, dose figures and lab interpretations are estimates to discuss with your clinician — they always have the final word.

4. Where your data is stored

Two places, and only two:

If you clear your browser's data or lose your device before a sync or export has finished — for example while offline — anything not yet synced is gone.

5. Access and disclosure

Access to your records is restricted to your own signed-in session by row-level security in the database. The MUIY team has no dashboard and no query access to any patient's health records, donor details or lab results.

What our team can see is limited to: feedback you deliberately submit through the app (including any reply email or phone number you choose to add), and anonymous aggregate counts such as how many people use a given feature or theme, which contain no records and identify no one.

We do not sell, rent or share your personal information. Two service providers support MUIY and process data on our behalf under the same restrictions:

We may disclose information if required by law, but we have no ability to hand over health records we cannot read.

6. Security

In transit: all syncing happens over an encrypted HTTPS connection.

At rest, in your account: encrypted at rest by our hosting provider, and protected by row-level security so only your account can read it.

At rest, on your device: your local copy sits in browser storage, which this build does not encrypt on disk. Please keep your device protected with its own screen lock.

App lock: under Me → Preferences you can require your fingerprint, face, or a 4-digit PIN each time MUIY opens. The PIN never leaves your device.

Sign-in is passwordless — continue with Google, or have a 6-digit code sent to your email. MUIY never sees or stores a password, and Google sign-in shares only your name and email address with us.

7. Notifications

If you turn reminders on, your device registers for push notifications and your upcoming reminder times are queued in MUIY's database so they can reach you while the app is closed.

Reminder wording is deliberately generic: no medicine names or values ever appear on your lock screen. Occasionally we may send a short announcement to everyone — the same message for all users, never based on your records. You can turn notifications off at any time under Me → Preferences.

8. Data retention

We keep your records for as long as your account exists. We do not automatically delete them after a period of not using MUIY, because a health history is worth keeping — someone returning after years away should still find their transfusion record intact.

When you delete your data it is removed from your device and from your synced account. Deletion is permanent and we cannot recover it for you, so export a backup first if you may want it later.

9. Your rights and choices

10. Children's privacy

Many people living with thalassaemia are children. MUIY accounts are held by adults aged 13 or over. Where the patient is a younger child, the account is held by a parent or caregiver, who sets MUIY up as a caregiver and records the child as the person they care for.

We do not knowingly allow a child under 13 to create their own account. If you believe one has, contact us and we will remove it.

11. Your responsibilities

Please keep your details accurate, and only add a donor's contact information with their agreement — those are another person's details that you are holding. Remove them if that person asks.

12. Changes to this policy

If we change how MUIY handles your data we will update this page and move the "last updated" date at the top. Material changes will also be announced in the app.

13. Contact us

Questions about privacy, or a request to delete your data:

shanyz.remove-this.@gmail.com

You can also reach us through the feedback form inside the app, under Me → Send feedback.

Made by Shaneez, in memory of Muiz and every thal friend who left us too soon. Forever part of our story.