Privacy notice

1. Scope and operator

This draft addresses the public website at myhelp.dev and the reviewed app source. The website is hosted with OpenAI Sites on Cloudflare infrastructure. The local HTML prototype is a separate demonstration and is not the live website.

The legal operator, privacy contact, mailing address, intended markets, and effective date are unresolved. The review verified the website hosting and local app behavior, but did not verify production account-service operations, every provider’s logs, or their retention. A completed notice is required before relying on it for real account and workspace data.

Use fictional data only in the local app preview. It has no real sign-in or privacy boundary. Anyone with access to the computer or browser profile may be able to read or change its saved information.

2. Website visits and app information

Opening myhelp.dev sends a request to the website hosting infrastructure. That request includes a network IP address, requested URL, and browser or device request headers needed to deliver the page. Hosting and security services may keep technical records; their exact categories, retention, access, and locations must still be confirmed by the operator.

The reviewed website pages do not ask for account credentials, workspace entries, or form submissions. The app’s Legal links open fixed public page addresses without adding your account, workspace, or invitation information. Visiting the website is different from signing in to the app.

The app saves local workspace state to remember demo stores, manager display names and roles, supply catalog entries and Favorites, quantities and order activity, vendor names, contact numbers and optional email addresses, task titles and notes, dates, assignees, status changes, and reference history. The Outdate Tracker separately saves category names, pull rules, entered coverage dates, and who recorded a pull.

The app uses local SQLite-backed storage. Workspace data is plaintext at the application storage layer. Reset recovery copies and records held after an unreadable save can remain locally. This is not a confidential data vault.

The separate local HTML prototype uses browser localStorage for fictional accounts, phone numbers, workspaces, tasks, supplies, and history, and sessionStorage for a simulated account. Its browser storage is not the live myhelp.dev website database and does not synchronize phones.

The app has a separate device-protected store for a pending invitation if an invitation is captured. Do not use real invitation links in the local preview. Erasing local demo data in the app first attempts to remove the saved invitation.

3. Network requests and third parties

The verified local app preview does not send workspace entries to a My Help cloud service. The public website is delivered through OpenAI Sites and Cloudflare. Its fonts and images are delivered with the website assets. The reviewed website source does not include advertising or analytics integrations.

Browser extensions, device backups, operating-system diagnostics, and services you independently use can have their own practices outside this preview. Opening an external reference or license link contacts that destination under its own notice.

The app contains prepared account and shared-workspace code, including email and social sign-in interfaces. This review did not exercise those services or confirm their live processors, email delivery, countries, access, retention, or security practices. Those facts and each recipient’s role must be documented in a completed account-service notice; they cannot be inferred from a local demo or a provider’s name in source code.

4. Cookies, advertising, and choices

The reviewed myhelp.dev application source does not set cookies, use browser storage, or include advertising, analytics, or cross-site tracking. This does not certify the behavior of every hosting/security layer, browser extension, or operating-system service. The separate local prototype uses browser storage as described above.

The reviewed website source has no behavior that changes in response to Do Not Track or Global Privacy Control, and no implemented sale, targeted-advertising sharing, or profiling flow. The operator must confirm all actual hosting and service practices and any required opt-out handling before treating this as a final disclosure.

If optional technologies or new data uses are added, applicable notice and consent choices must work before those technologies run. Clicking a Legal category or reading this notice does not provide consent. No nonfunctional consent banner has been added.

5. Retention, review, and deletion

Local app data normally remains until changed or erased. There is no general time-based deletion policy. Showing only four completed orders does not mean every other category of information has been deleted. Retention for website request logs and any production account-service records remains to be confirmed.

In the app, review and edit demo entries on their screens. Settings → Reset fictional demo data resets the selected store and can retain a recovery copy; it is not a privacy erase. Settings → Erase all local demo data is the broader deletion control: it removes saved app state, including recovery copies, and recreates fictional seed data. If the operation reports an error, do not assume deletion completed.

In the website prototype, Guide → Reset prototype data removes the saved demo database and that tab’s simulated session, then reloads fictional data. Close other prototype tabs and clear this site’s browser data if you need to remove remaining tab sessions. Signing out alone does not erase the demo database.

These local controls do not delete website hosting logs, an online account, screenshots, exported copies, operating-system backups, browser backups, or information stored elsewhere. Storage deletion is not a promise of forensic erasure. Account deletion needs its own verified request and retention process; signing out does not delete an account.

6. Children and sensitive information

This is a fictional manager-workflow preview, not a service intended for children. Do not enter children’s information or real patient, customer, employee, financial, or confidential business information. If sensitive information was entered by mistake, stop entering it and use the applicable local erase controls; do not send a copy with a bug report.

7. Privacy rights, contact, and updates

Privacy rights depend on the law and the operator’s actual activities. This draft does not deny any rights, promise that a law applies, or establish a working rights-request service. A verified privacy contact and a process to receive, verify, answer, and where required appeal requests must be established before processing real personal information.

The owner must publish a completed notice with an effective date, explain material-change notices, and obtain required permission before new uses begin. Editing this draft is not consent. The previous website listed a contact email; its monitoring and authority to receive privacy requests remain to be confirmed. Ask the person who supplied the preview about local testing questions without sending personal data.