Privacy
Privacy Policy
Pancina is a diary for people living with Crohn's disease. It handles health information, which European law protects most strictly. This page says, in plain words, what we collect, why, where it lives, and how you stay in control.
1. Who is responsible
The data controller is:
DRENLAB S.R.L.Via Campiglio, 74
38025 Dimaro Folgarida (TN), Italy
VAT IT02553180221
Email: business@drenlab.com
Certified email (PEC): business@pec.drenlab.com
For anything about your data, write to business@drenlab.com. We have not appointed a Data Protection Officer because the law does not require one at our size; the address above reaches the people responsible directly.
2. In short
- Your health data is stored only with your explicit, separate consent, in the European Union, and never sold, shared with advertisers or used for advertising.
- The app contains no analytics or tracking software. The website sets no cookies.
- Apple Health data is read only if you switch it on, and you can switch it off at any time.
- You can export everything as a file and delete your account and all data yourself, from Settings, immediately and permanently.
- Documents the app produces, such as the visit report, are created on your phone and go only where you send them.
- We do not make automated decisions about you and we do not build profiles.
3. The website (pancina.app)
Waitlist
If you leave your email address in the founding waitlist, we store the address, the language of the page you used, the exact consent sentence shown to you with its version, and the time of the request. We use it for one purpose: to write to you once when Pancina is available on iPhone. Legal basis: your consent. You can withdraw it at any time by writing to business@drenlab.com and we will delete the address. Addresses are stored in Google Cloud Firestore in the European Union (multi-region eur3, Belgium and the Netherlands) and are deleted no later than twelve months after the launch email, or earlier on request.
Technical data
Like every website, ours is served by a hosting provider, Aruba S.p.A. in Italy, whose servers keep standard access logs, such as IP address, time and requested page, for security and to keep the service running. Legal basis: our legitimate interest in a secure service. These logs are kept for the period set by the provider and are not combined with any other data.
The page loads its typefaces from Google Fonts. When it does, your browser sends a request, including your IP address, to Google's servers. Google Ireland Limited processes it under Google's own privacy terms and standard contractual clauses for transfers outside the EU. No other third-party resource is loaded.
The site sets no cookies and uses no analytics. It keeps at most one value in your browser's session storage, to remember the state of the page while the tab is open; it disappears when you close the tab and is never sent to us.
4. The app
Your account
To use Pancina you create an account with an email address and a password. Authentication is provided by Firebase Authentication (Google). We never see your password; Firebase stores it in protected form.
Your consent record
Before anything is recorded, the app asks for your explicit consent, separately for the diary and for Apple Health data. We store which choices you made, when, and under which version of the consent text, and we keep a history of changes. This is how we can prove we asked, and how you can see what you agreed to.
What you enter in the diary
- Daily check-ins: general wellbeing, abdominal pain, number of liquid stools, urgency episodes, stress level, complications you tick, and any notes you write.
- Bowel movement log: time, Bristol type, and whether you marked urgency, blood or mucus.
- Food entries: what you ate, the tags you chose, portion size.
- Treatments: medicines you list, doses you log, doses you plan, and notes.
- Lab results: calprotectin values and dates you enter.
- Your disease profile, if you fill it in: Montreal classification and year of diagnosis.
- The date of your next visit, your reminder preferences, and Pina's wardrobe choices.
Apple Health data (optional)
Only if you switch it on, the app reads from Apple Health: resting heart rate, heart rate, heart rate variability, steps, sleep stages, blood oxygen, sleeping wrist temperature, breathing rate during sleep, and any menstrual-cycle days you have logged in Apple Health. The app stores daily summaries and time-stamped samples next to your diary, so you can see them together. It never writes to Apple Health, and it never reads anything outside this list. You can revoke access in the app or in iOS Settings at any time; the app then stops reading.
What stays on your phone
- The visit report, the before/after summary, the Passaporto IBD and the FHIR and JSON exports are generated on your phone. They leave it only when you share them, to whoever you choose.
- When you scan a lab report, the photo is analysed on your device to suggest a value. The photo is never stored and never uploaded; you confirm or correct the value yourself.
- Widgets read a small summary, such as whether today's check-in is done, from a protected area on your phone shared between the app and its widgets.
- Reminders are local notifications scheduled on your phone; no reminder data leaves it.
What we do not do
No advertising, no sale of data, no analytics or crash-reporting software that sees your health data, no profiling, no automated decisions, no prediction, no medical advice. Your data is not used for research. If we ever want to ask you to contribute to research, we will ask for a separate, explicit consent first, with its own explanation, and nothing will happen without it.
5. Why we may process your data
| Processing | Purpose | Legal basis (GDPR) |
|---|---|---|
| Account and login | Give you access to your own diary | Art. 6(1)(b), performance of a contract |
| Diary and Apple Health data | Record what you enter and show you your own history | Art. 9(2)(a) and 6(1)(a), your explicit consent |
| Consent records | Prove and honour your choices | Art. 6(1)(c), legal obligation (Art. 7 GDPR) |
| Waitlist email | Tell you once when the app is available | Art. 6(1)(a), consent |
| Server logs | Security and availability | Art. 6(1)(f), legitimate interest |
Consent can be withdrawn at any time from Settings in the app, or by email. Withdrawal does not affect what was done before.
6. Where your data lives
Diary and health data are stored in Google Cloud Firestore in the European Union, multi-region eur3 (Belgium and the Netherlands). Firebase Authentication, which handles login, is a Google service that may process account data, meaning your email address and login events, on servers outside the EU; Google Ireland Limited acts as our processor under a data processing agreement, with standard contractual clauses and the EU–US Data Privacy Framework as transfer safeguards.
Our processors are Google Ireland Limited (Firebase: database, authentication, website test hosting) and Aruba S.p.A. (website hosting and email). Apple is not our processor: Apple Health runs on your device under Apple's terms, and the app reads from it only with your permission. We do not share your data with anyone else, unless the law requires it.
7. How long we keep it
- Diary, health data and account: for as long as your account exists. Deleting the account in Settings, confirmed with your password, erases the account and every record immediately and permanently. Residual copies in the provider's backup systems are removed within its standard timeframe.
- Consent records: as long as the account exists, then deleted with it.
- Waitlist address: until twelve months after the launch email, or earlier on request.
- Server logs: for the period set by the hosting provider, then discarded.
8. Your rights
Under the GDPR you can ask for access to your data, correction, erasure, restriction of processing, portability, and you can object to processing based on legitimate interest. Most of these you can do yourself, without writing to anyone:
- Portability and access: Settings → Your data → Export all data gives you a complete file with every check-in, food entry, health day and your consent record. The Passaporto IBD and the FHIR export are also yours to take anywhere.
- Correction: every entry can be edited in the app.
- Erasure: Settings → Delete account and all data.
- Withdrawal of consent: Settings → Consent, separately for the diary and for Apple Health.
For anything else, or if you prefer that we do it, write to business@drenlab.com. We may ask you to confirm your identity, and we answer within one month. You also have the right to lodge a complaint with a supervisory authority, in Italy the Garante per la protezione dei dati personali, or the authority of the country where you live.
9. Security
Data travels encrypted and is stored encrypted. Every record is isolated to your account by database rules that no other user can cross; there are no shared collections. Access on our side is limited to what is strictly needed to run the service. If a breach ever affected your data, we would tell you and the authority as the law requires.
10. Age
Pancina is intended for people aged 16 and over. If you are younger, please use it together with a parent or guardian, who should create the account. If we learn that we hold data of a younger child without such involvement, we will delete it.
11. Not a medical device
Pancina is a diary. It records what you enter and shows it back to you, including standard clinical scores calculated from your own entries. It does not diagnose, predict flares or give medical advice, and it is not a substitute for your gastroenterology team. In an emergency, contact emergency services.
12. Changes to this policy
When this policy changes we update the version and date at the top. If a change affects how your health data is used, the app will show you the new text and ask for your consent again before continuing; nothing changes silently.
Version 1.0, 7 September 2026. This policy is available in Italian at pancina.app/privacy; in case of doubt the Italian text prevails.