Privacy and your data

DoseAlert keeps nearly everything on your device. This page explains what that means in practical terms.

The short version

• Your medication list, doses, and settings stay on your device.
• There is no visible DoseAlert account or email sign-up for local use.
• If you pair a caregiver, alert details, paired dose tracker status, and end-to-end encrypted proof photos go through Google's Firebase.
• Technical crash reports are sent through Firebase Crashlytics so we can fix bugs. They are not intended to include medication data.

The full, formal version is in the Privacy Policy. This page summarises it in plain language.

What stays on your device

• Every medication, group, profile, and setting
• Every dose log (Taken, Skipped, Not sure)
• Reminder configurations and history
• Inventory counts
• Prescription scanner photos (deleted immediately after text extraction)
• Backup files (where you choose to save them)

Backups only leave your device when you send them to iCloud, email, or a messaging app. Optional caregiver sharing is described below.

What leaves your device (only if you opt in)

Caregiver alerts

When you pair a caregiver and enable a missed-dose alert, DoseAlert uploads that medication's schedule metadata to Firebase so a server monitor can send alerts while the patient app is closed. The shared information contains:

• Medication name
• Schedule times, timezone, recurrence, alert delay, and trial cutoff
• Recent dose confirmation times needed to cancel an alert
• Your name (the one you entered during pairing)

If you enable caregiver pairing, DoseAlert can also mirror paired dose tracker history so the caregiver dashboard can show recent dose status. When proof is required, the app automatically sends an end-to-end encrypted photo package to the paired caregiver. Firebase never receives the photo key, and the encrypted package is deleted after import or within 24 hours. Inventory is not included.

Turning the alert off or deleting the medication removes its monitoring configuration after sync. Unpairing stops delivery to that caregiver immediately on the server. Technical delivery receipts expire after about 30 days. The monitor does not receive proof-photo keys, photos, inventory, or dose notes.

Pairing handshake

When you generate a pairing code, DoseAlert stores a temporary record in Firestore (a Firebase database) so the caregiver's phone can find it. The record expires after 10 minutes and is deleted as soon as pairing completes. It contains notification routing data, the display name, and anonymous Firebase user ids, but no medication list, pill photos, or proof-photo key.

Crash reports

DoseAlert uses Firebase Crashlytics to collect technical crash reports. These can include the stack trace (where the crash happened in the code), app version, device model, and OS version. They are not used for behavioural analytics and are not intended to include your medication list or dose history.

What we do not do

• We do not track your location.
• We do not analyse what medications you take.
• We do not sell data to advertisers — there is no data to sell.
• We do not share anything with your insurance, pharmacy, or healthcare provider.
• We do not upload your prescription scanner photos.

What Apple and Google see

When you download or purchase the app, Apple or Google sees that transaction (they have to, to charge you). They don't see what you do inside the app. Your purchase status (trial vs. unlocked) is something DoseAlert checks with the store when you open the app.

Legal

Read the full Privacy Policy and Terms of Service for the formal details, including our GDPR and CCPA positions.