Privacy and your data
DoseAlert keeps nearly everything on your device. This page explains what that means in practical terms.
The short version
- Your medication list, doses, and settings stay on your device.
- There is no DoseAlert account. There is no user database.
- If you pair a caregiver, alert details, paired dose tracker status, and end-to-end encrypted proof photos go through Google's Firebase.
- Crash reports are sent anonymously via Firebase Crashlytics so we can fix bugs. They don't include medication data.
The full, formal version is in the Privacy Policy. This page summarises it in plain language.
What stays on your device
- Every medication, group, profile, and setting
- Every dose log (Taken, Skipped, Not sure)
- Reminder configurations and history
- Inventory counts
- Prescription scanner photos (deleted immediately after text extraction)
- Backup files (where you choose to save them)
Backups only leave your device when you send them to iCloud, email, or a messaging app. Optional caregiver sharing is described below.
What leaves your device (only if you opt in)
Caregiver alerts
When you pair with a caregiver and a dose is missed, a push notification travels from your phone to theirs via Firebase. The payload contains:
- Medication name
- Scheduled time
- Your name (the one you entered during pairing)
If you enable caregiver pairing, DoseAlert can also mirror paired dose tracker history so the caregiver dashboard can show recent dose status. When proof is required, the app automatically sends an end-to-end encrypted photo package to the paired caregiver. Firebase never receives the photo key, and the encrypted package is deleted after import or within 24 hours. Inventory is not included.
Pairing handshake
When you generate a pairing code, DoseAlert stores a temporary record in Firestore (a Firebase database) so the caregiver's phone can find it. The record expires after 10 minutes and is deleted as soon as pairing completes. It contains notification routing data, the display name, and anonymous Firebase user ids, but no medication list, pill photos, or proof-photo key.
Crash reports
DoseAlert uses Firebase Crashlytics to collect anonymous crash reports. These include the stack trace (where the crash happened in the code), device model, and OS version. They do not include your medication list or dose history. You can turn this off in your phone's OS settings for DoseAlert.
What we do not do
- We do not track your location.
- We do not analyse what medications you take.
- We do not sell data to advertisers — there is no data to sell.
- We do not share anything with your insurance, pharmacy, or healthcare provider.
- We do not upload your prescription scanner photos.
What Apple and Google see
When you download or purchase the app, Apple or Google sees that transaction (they have to, to charge you). They don't see what you do inside the app. Your purchase status (trial vs. unlocked) is something DoseAlert checks with the store when you open the app.
Legal
Read the full Privacy Policy and Terms of Service for the formal details, including our GDPR and CCPA positions.