Cholangiocarcinoma Foundation logo
DONATE

CholangioPath Privacy Policy

Last updated: June 16, 2026

The Cholangiocarcinoma Foundation (“CCF,” “we,” “us,” or “our”) built CholangioPath as a free application. This Privacy Policy explains how we handle information in connection with your use of the app.

Information We Collect

CholangioPath does not require an account, login, or registration of any kind, and we do not ask you for personal information such as your name, email address, or location. We do not use analytics, advertising identifiers, or behavioral tracking of any kind.

To deliver the features described below, the app transmits a small amount of technical information to our servers:

  • App version and a per-install device identifier. Every request the app makes to our servers includes the app version and a stable identifier issued by your device’s operating system for this install of the app. We use these to keep the app compatible with our content and to tie your notification preferences to the correct device. The identifier may reset if you uninstall and reinstall the app.
  • Push notification token (only if you enable notifications). If you opt in to any push notification — event reminders, motivational quotes, or news updates — your device’s push notification token, issued by Firebase Cloud Messaging (and, on iOS, the Apple Push Notification service), is sent to our servers so that we can deliver those notifications.
  • Notification preferences. The events you subscribe to, and whether you have opted in to quote or news notifications, are stored on our servers alongside your push token so that the right notification is delivered to the right device at the right time.

How the App Works

CholangioPath retrieves educational content — including pages, events, specialist listings, videos, abbreviations, anatomy slides, and resources — from the CCF website (cholangiocarcinoma.org) and stores it locally on your device for offline access. This content is informational material published by the CCF and does not include any user-specific information.

Notifications

Push notifications in CholangioPath are sent by our servers, not scheduled on your device.

When you tap “Subscribe” on an event, or enable quote or news notifications in the app, the app sends your push notification token and the relevant preference to our servers. When it’s time for a reminder or update, our servers send a push notification through Firebase Cloud Messaging (on Android) or the Apple Push Notification service (on iOS), which delivers it to your device.

You can unsubscribe from any individual event from within the app, turn quote or news notifications off at any time, or clear all notification data for your device from the Settings screen. Clearing your data removes your subscriptions and push token from our servers as well as from your device.

Third-Party Services

We use the following third-party services strictly to deliver app functionality. We do not share any information with them for advertising or analytics purposes:

  • Firebase Cloud Messaging (Google LLC) and Apple Push Notification service (Apple Inc.) — to deliver push notifications. These services receive your device’s push token and the contents of each notification we send.
  • Apple App Store and Google Play Store — to distribute the app. We do not receive personally identifying information from these stores.

How We Store and Protect Your Data

All communication between the app and our servers is encrypted in transit using HTTPS (TLS). Data stored on our servers — your push notification token and notification preferences — is held in our hosting provider’s database with access restricted to CCF staff who need it to operate the app.

We retain your push token and notification preferences only for as long as you have notifications enabled. If you uninstall the app, turn off all notifications, or use “Clear My Data” in Settings, your token and preferences are removed from our servers. Push tokens that become invalid (for example, after a long period of app inactivity or device reset) are also pruned automatically.

We do not sell or rent your data, and we do not share it with any third party for advertising or analytics. The only third parties that receive any data are Google’s Firebase Cloud Messaging and Apple’s Push Notification service, acting solely as message-delivery processors on our behalf.

Third-Party Links

The app may contain links to third-party websites, including video platforms and external resources. These links open in your device’s browser. We are not responsible for the privacy practices of those websites, and we encourage you to review their privacy policies.

Children’s Privacy

CholangioPath is not directed at children under the age of 13. We do not knowingly collect any information from children.

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be reflected by updating the “Last updated” date above.

Contact Us

If you have any questions about this Privacy Policy, please contact us at:

Cholangiocarcinoma Foundation
https://www.cholangiocarcinoma.org/contact-us