Effective date: 10 June 2026
This Privacy Policy describes how ScolioLife Pte. Ltd. (“ScolioLife”, “we”, “us”) collects, uses, stores, retains, deletes and protects your personal data when you use the ScolioTrack and ScolioTrack Pro mobile applications (the “App”) and the website scoliotrack.com (the “Site”). ScolioTrack was developed by Dr Kevin Lau and ScolioLife, headquartered in Singapore.
By using the App or the Site, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the App.
Account information. When you create a ScolioTrack account we collect your name, email address and an encrypted password. If you purchase a subscription, payment is processed by Google Play or the Apple App Store — we never receive or store your full payment card details. We receive only a transaction confirmation and subscription status.
Health and measurement data. The App’s core purpose is scoliosis monitoring, so with your consent it collects and stores: Angle of Trunk Rotation (ATR) readings taken with your device’s accelerometer, height and weight entries, and posture photographs you choose to take with your device camera. Posture photos are captured only when you actively use the camera feature — the App never accesses your camera in the background.
Device and usage data. We collect device model, operating system version, app version, crash logs and anonymised usage analytics to keep the App reliable and improve its features.
Advertising data (free plan only). The free version of ScolioTrack displays adverts served by Google AdMob, which may use your device’s advertising ID. Paid (Pro) plans contain no advertising. You can reset or limit your advertising ID at any time in your device settings.
We use your data solely to: (a) provide the App’s tracking features, including displaying your measurement history and progress charts; (b) sync your data securely to our cloud servers so you can access it across devices and so it is not lost if you change phones; (c) provide email technical support when you contact us; (d) process and manage subscriptions; (e) maintain security, prevent fraud and fix crashes; and (f) comply with legal obligations. We do not use your health data for advertising, and we do not sell your personal data to anyone.
We share data only with service providers who help us operate the App, and only to the extent necessary: cloud hosting providers that store your synced data in encrypted form; Google AdMob (free plan adverts only — advertising identifiers, never your health data); analytics and crash-reporting providers (anonymised usage data only); and Google Play / Apple App Store for subscription billing. If you are on a Clinical Plan administered by your healthcare provider, your measurement data is visible to that clinic as part of your care. We may also disclose data where required by law. We never share, sell or rent your health data to advertisers, insurers or data brokers.
All data is encrypted in transit using TLS and encrypted at rest on our servers. Passwords are stored as salted hashes and are never visible to our staff. Access to production data is restricted to authorised personnel on a need-to-know basis.
We retain your personal data only for as long as it is needed to provide the service:
You can delete your account and all associated data at any time, by either method below:
You may also request deletion of specific records (for example, individual posture photos) without deleting your whole account — delete them directly in the App, or contact us using the email above.
Depending on where you live, you have the right to access, correct, export, restrict the processing of, or delete your personal data, and to withdraw consent at any time. We honour rights under Singapore’s Personal Data Protection Act (PDPA), Malaysia’s Personal Data Protection Act 2010, Indonesia’s Personal Data Protection Law (UU No. 27/2022), the EU/UK General Data Protection Regulation (GDPR), and the California Consumer Privacy Act (CCPA). To exercise any right, email drkevinlau@scoliolife.com. We respond within 30 days. You may also lodge a complaint with your local data protection authority.
Scoliosis monitoring is often used by adolescents. ScolioTrack is intended to be set up and managed by a parent, guardian or healthcare professional for users under 18 (or the age of digital consent in your country). We do not knowingly collect personal data directly from children without verifiable parental consent. If you believe a child has created an account without consent, contact us at drkevinlau@scoliolife.com and we will delete the account and its data within 30 days.
Your data may be stored on secure cloud servers located outside your country of residence. Wherever your data is processed, we apply the same safeguards described in this policy and use legally recognised transfer mechanisms where required.
ScolioTrack is a monitoring and tracking tool. It does not provide a medical diagnosis and is not a substitute for professional medical advice. Always consult a qualified healthcare provider about your scoliosis condition.
We may update this Privacy Policy from time to time. Material changes will be announced in the App or by email before they take effect, and the “Effective date” above will be updated. Continued use of the App after changes take effect constitutes acceptance.
Data controller: ScolioLife Pte. Ltd., Singapore
Email: drkevinlau@scoliolife.com
Web: scoliotrack.com/contact-us