Short version: CodeMate has no accounts, no sign-in, no advertising identifiers and no analytics SDK. The code library, your saved codes, your pins, your notes and your search history live on this iPhone. Three things can leave it, and each one happens only because you chose it: iCloud sync of your own lists, which goes to your own iCloud and not to us and stays off until you switch it on; the single chart sentence you submit to Ask when on-device AI is unavailable; and a feedback message you type in Me. Nothing else is transmitted.
Everything you create is stored locally in this device's app sandbox, protected by iOS data protection:
The device token is a credential for the AI relay, not an account identifier: it carries no name, no email address and no device serial. Deleting the app removes all of the above. Ordinary iOS backup of the app sandbox follows your own device settings, which you control.
iCloud sync is off until you turn it on. Subscribing to Pro does not enable it, and the app will never enable it on your behalf. Once you turn it on, it keeps three lists — your saved codes, your pinned shortcuts and your personal notes — in step across the devices signed in to your own iCloud account. That data goes into your iCloud private database via CloudKit; it never passes through a server we operate, and we have no way to read your CloudKit database.
Ask has two engines, chosen by the app — you don't configure anything:
If you don't want text to leave the device, use a device where on-device AI is available, or use keyword search — which is fully offline and needs none of the above.
Me → Feedback & Suggestions sends a message to a relay operated by the developer, which forwards it by email to the support mailbox. What leaves the device when you press Submit:
iPhone17,2) — not your device's custom name, and not a device identifierThe relay stores nothing: it has no database, no queue and no log of message bodies. The only place a submitted message persists is the support mailbox. Because the mailbox is a personal inbox and not a configured PHI environment, the app warns you in the form not to include patient names, record numbers or chart text.
codepacks.17healthy.cn — the static CDN hosting the optional reference packs (ICD-10-PCS, GEM crosswalk, NDC directory). Packs are fetched as plain files over HTTPS and carry no account or device identifier in the request.api2.17healthy.cn — the AI relay described in section 4.feedback.17healthy.cn — the feedback relay described in section 5.Every request above reaches a hosting platform that produces its own standard access logs, which record the IP address, user agent and timestamp of the request. Those logs belong to the platform, not to this app; we do not build user profiles from them and do not review them in the ordinary course.
The current release reports nothing to us. The telemetry layer is a no-op implementation compiled with zero network calls, so there is no analytics payload to switch off. Event names exist in code only, to keep a future opt-in integration honest.
If a diagnostics-based integration is added in a future version, it will be off by default and event fields will stay limited to numbers and enum values. You can always review and change Apple's own sharing settings in iPhone Settings > Privacy & Security > Analytics & Improvements; you can also block all network access for this app in Settings > CodeMate > Mobile Data.
Purchases are processed by Apple under Apple's privacy policy. We receive only the entitlement result needed to unlock Pro features — no Apple Account identity, no payment details and no transaction history.
You can ask us for access, correction or deletion, and you can ask what we hold about you, at the contact address in section 12. Use the subject line "Privacy" so the request is routed and answered in writing. We aim to answer within 30 days and will not charge for a reasonable request. Because we hold no user database, the practical answer is usually that there is nothing for us to delete on your behalf:
California. We do not sell or share personal information, we do not use it for cross-context behavioral advertising, and we do not retain sensitive personal information for any purpose beyond the one described in this policy. We are currently below the thresholds at which California's CCPA/CPRA consumer-rights regime applies to a business, and we will honor access and deletion requests anyway; if we ever cross those thresholds, this section will be replaced with a full notice at collection.
State health-privacy laws. We build no database of consumer health data and sell nothing. If you send a chart sentence to Ask, it passes through the relay in memory only and is not stored by us. Washington's My Health My Data Act and Nevada's health-privacy statute are addressed on that basis; we are not a HIPAA covered entity, we are not a business associate of any covered entity, and we do not sign business associate agreements for this app.
Please do not send patient records, payer account numbers or any protected health information to the support mailbox — it is not configured for PHI.
CodeMate is a professional reference tool for US medical coding, built for adults who assign codes in a clinical or billing setting. It is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has submitted information through this app, contact us at the address in section 12 and we will delete it.
This policy ships inside the app, so the version you read is always the version that applied to the build you are running. When we change it, the change ships with an app release and the effective date at the top of this document is updated. A change that would start collecting data this policy says we do not collect will be described in the release notes before it takes effect.
Privacy questions, and access, correction or deletion requests: feedback@17healthy.cn, subject line "Privacy".
For general questions and bug reports use the same address, or Me → Feedback & Suggestions inside the app. Please include the app version (Me → About), your iOS version, and the code pack version shown on the Home banner. Do not include patient records, payer account numbers or any protected health information.