Privacy Policy
Last updated: July 12, 2026
1. Controller
POLAR ("we", "our") is a personal tracking application for people with bipolar disorder. Site owner: Miguel Amillategui, Spanish tax ID (NIE) 19409933A, address Calle Cruz de la Atalaya, 7, 28223 Pozuelo de Alarcón, Madrid, España.
The domain polardisorder.com and hosting servers are located in the United States. This policy is governed by applicable U.S. federal law and, on a supplementary basis, the laws of the State of Delaware, chosen as the legal venue for any dispute. Where relevant, we will also apply the privacy laws of the user's state of residence (CCPA/CPRA in California, VCDPA in Virginia, CPA in Colorado, CTDPA in Connecticut, and UCPA in Utah, among others).
Controller contact: email m@amillategui.com or phone/WhatsApp +34 647 039 107.
2. Data we collect
- Account data: first and last name, email address, and optionally a phone number.
- Self-reported health data: mood, sleep hours and quality, medication intake, activity, nutrition, socialization, energy/irritability, heart rate, and free text notes you enter.
- Technical data: browser, operating system, truncated IP addresses, and access logs, for security and diagnostic purposes.
- Web analytics data: we use Google Analytics 4 (Google LLC, USA) to measure aggregate site usage (page views, device, country, referrer). Google may set its own identifiers and act as an independent controller; see policies.google.com/privacy. IP anonymization is enabled and we do not share this data for advertising purposes.
POLAR is a personal tracking tool, not a medical device, and does not replace the diagnosis or treatment of bipolar disorder. Information entered is not covered by HIPAA unless a specific agreement is signed with a healthcare provider.
3. Purposes and legal bases
- Provide the daily logging, calendar, statistics, and reporting service.
- Allow sharing with family/clinicians via links that you generate.
- Send essential service communications (account verification, security).
- Measure aggregate site usage (analytics) to improve the product.
- Comply with applicable U.S. legal obligations.
4. How we share data
We do not sell your personal data. We only share data with: (i) infrastructure and authentication providers in the U.S. under confidentiality agreements, (ii) Google LLC as analytics provider, (iii) recipients you choose via family sharing links, and (iv) authorities when required by law.
5. Retention
We retain data while your account is active. If you request account closure or deletion, personal data is removed from our production systems within a maximum of 90 days, unless retention is legally required (e.g., tax or security). Encrypted backups are overwritten within the same cycle.
6. Your rights
Depending on your state of residence (e.g., California, Virginia, Colorado, Connecticut, Utah, Texas, or Oregon) you may have the right to access, correct, port, or delete your data, and to opt out of the sale or sharing of personal data. You can exercise these rights using the form below, by emailing m@amillategui.com, or by calling +34 647 039 107. We will respond within 45 days.
Do Not Sell or Share Notice: POLAR does not sell or share personal data for cross-context behavioral advertising.
7. Minors
POLAR is intended solely for users 18 years of age or older. We do not knowingly collect data from anyone under that age. If you believe a minor has provided data, contact us and we will delete it.
8. Security
We use encryption in transit (HTTPS), per-user access control, and Row Level Security in the database. No security measure is absolute.
9. International transfers
Servers are located in the U.S. If you access POLAR from outside the U.S., your data will be transferred to and processed in the U.S. under U.S. law.
10. Changes
We may update this policy. The updated version will be posted on this page with the revision date.