Legal / Lulu EMR Privacy Statement

Lulu EMR Privacy Statement

Version 1.0 · Effective October 12, 2026

This statement explains how Lulu EMR handles information. It covers the desktop app for macOS and Windows, the browser version, Lulu EMR for iPhone, Lulu Sync and the portable viewer (together, "the Software"). Lulu EMR is developed and licensed by Stefan Filipovski ("we", "us").

In one sentence: Lulu EMR keeps your records on your own devices, encrypted, and never sends them to us or to anyone else unless you choose to share something.

1. Who is responsible for the records

The school, team, clinic or other organization that uses Lulu EMR decides what is recorded, who may use the Software and how long records are kept. That organization is responsible for the records. We do not receive, host, store or process them, and we have no access to them.

2. What stays on your devices

Athlete records, visits, injuries, notes, home programs, documents, the activity history and settings:

are stored on the computer where Lulu EMR is installed, encrypted with AES-256-GCM;
include documents you attach (PDFs and photos), which are encrypted too, each with its own key;
if you pair an iPhone, are kept there as a smaller working copy, also encrypted, which opens only with Face ID or the phone's passcode;
in the browser version, are kept in that browser on that computer, encrypted with your passphrase.

3. What we receive

Nothing. Lulu EMR contains:

no analytics, telemetry, advertising or tracking;
no crash reporting to us;
no accounts or sign-in with us;
no network connections to us.

The desktop app's page is technically blocked from making any network connection.

Activating a computer. License keys are made for one computer. If you activate a computer on our website, PayPal tells the website about your purchase (the email address you paid with, the product and the amount), and the website receives only what you enter there: the computer's code, that email address and your name or organization's name. It keeps these details with the keys issued, to count the computers on each license. The computer code is a one-way code derived from the computer's hardware or Windows ID and reveals nothing else about it. No records, athlete information or files are involved.

4. When information leaves a device

Only when you do it:

You choose to…	What goes where
Pair an iPhone	Records sync between your computer and your phone over your local network, end-to-end encrypted. Nothing passes through us or the internet.
Turn on OneDrive Backup	Encrypted backup files are written to a folder you choose. Microsoft's OneDrive app (not Lulu EMR) uploads them to your OneDrive. They can't be opened without your passphrase or recovery key.
Email a home program	A message is drafted in Outlook or Mail with only the exercise handout attached. You review it and press Send.
Share a home program from the iPhone	A PDF of the exercise handout only: password-protected, or with a blank name line instead of the athlete's name. It goes wherever you send it from the share sheet, and each share is logged on the computer.
Share or print a summary	A password-protected PDF, or a printout, that you hand on. Each share is logged in the activity history.
Export	An encrypted .emrx file, or a de-identified spreadsheet.
Open a OneDrive backup on the iPhone	Only if the computer allows it: the newest backup is read from your OneDrive folder, read-only, after Face ID and your backup passphrase or recovery key. Nothing decrypted is kept on the phone.

Services you choose to use for these steps, such as Microsoft OneDrive, Outlook or Apple Mail, handle information under their own terms and privacy policies.

5. The athlete kiosk

At the kiosk, athletes see only the first names and last initials of athletes whose names match what they type, and no records. Leaving the kiosk needs a staff PIN, Touch ID or Windows Hello.

6. Diagnostics

If something goes wrong, Lulu EMR keeps a short diagnostics log on your computer (version, time, which screen and what failed). It never holds names or record contents. It stays on your device unless you export it yourself to send to your administrator.

7. Security

Records are encrypted at rest on every device and in every backup, the app locks itself after a period of inactivity, and changes are recorded in an activity history. No method of storage or transmission is completely secure. Keeping devices, passphrases and recovery keys safe is the responsibility of the organization and its users. We cannot recover records if the passphrase and recovery key are both lost.

8. Children's and health information

The records an organization keeps may describe minors and their health. The organization decides who may use Lulu EMR, what is recorded and how long it is kept, and is responsible for any notices and consents required for them. Because we never receive these records, we do not collect personal information from children or anyone else through the Software.

9. Your choices and requests

Because the records stay with your organization, requests to see, correct, export or delete them should go to your organization, which can act on them directly in Lulu EMR. Uninstalling the Software does not delete records automatically. Your organization controls when and how they are deleted.

10. Changes to this statement

If a later version of Lulu EMR handles information differently, it will come with an updated statement and a new effective date. The statement included with a copy of the Software applies to that copy.

11. Contact

Licensing, permissions and legal notices: Stefan Filipovski, sfilipovski10@gmail.com. For help using Lulu EMR, contact the person who set it up for your organization.