Privacy Policy and Consumer Health Data Policy

The short version

The tracker stores everything on your device. We do not receive your dose records, vial records, injection sites, weight or notes unless you turn on the optional sync feature and consent to it at that moment. Email and push reminders are also opt-in and store only a protocol name and its schedule. We do not sell data, we do not use health data for advertising, and we do not run ad or social-media tracking pixels on tracker pages.

What the tracker collects and where it lives

When you use the tracker, the following is written to your browser's local storage (IndexedDB) on your device: protocol details (compound name, vial amount, water volume, amount per draw, syringe size, schedule), vial records (mix date, remaining amount, discard date), draw logs (time, units, injection site, notes), and optional weight or notes. This is consumer health data under Washington and Nevada law. It stays on your device unless you turn on sync (below). Exports (CSV or JSON backup) are files you download yourself.

The calendar subscription link you can create contains the protocol name and schedule times, encoded in the link itself. It does not contain amounts. Our server turns that link into a calendar file on request and does not store it.

What our servers see

Standard web server logs (IP address, user agent, pages requested), handled by our hosting provider, Vercel. The AI Coach sends your typed question to the configured model provider to generate an answer; do not type personal or health details into it, and we say so in the interface. Newsletter sign-ups are stored with Brevo, our email provider, only if you submit the form.

Optional sync across devices

Sync is off by default. You turn it on in the tracker's Settings by entering an email address, ticking an unticked consent box, and typing a code we email you. From then on a copy of your tracker records (the protocol, vial, draw log and weight or note records listed above, each with its own random ID and last-changed time) is stored on our database provider, Supabase, in the United States, under an account tied to your email. We record the time you gave consent. Sync runs when you make a change, when you open the app, and every five minutes; a second device signed in with the same email downloads the same records. Deleted records are kept as empty "deleted" markers so other devices remove them too.

Before you add an email, a device that uses a server feature (sync or push) is given an anonymous account ID with no personal details. Anonymous accounts with no records are removed automatically after 30 days.

You can sign out on any device, delete all records (this device and the server copy) or delete the account and the server copy entirely, all from Settings. Deletion is immediate. Your records stay on the device you used unless you delete them there too.

Optional email and push reminders

Email reminders (per protocol, double opt-in) store your email address, the protocol name you typed, its schedule and time zone, and the consent time, so we can send an email at each draw time. Push reminders store a push address for your device (issued by Apple or Google, it identifies the device to their push service, not you to us) plus the name, schedule and time zone of each protocol you switch on. Reminders never contain amounts. Push messages travel through Apple Push Notification service on iPhone and Mac, and Google Firebase Cloud Messaging on Android and Chrome, encrypted so those services cannot read them. When you tap "Logged" or "Snooze" on a Chrome notification, that action is recorded against the same account. Turning reminders off removes the corresponding rows.

Sharing and selling

We do not sell consumer health data and we do not share it with advertisers or data brokers. Processors we use: Vercel (hosting and API routes), Supabase (database and sign-in for sync and reminders), Brevo (email), the AI model provider named in the AI Coach (question text only), and Apple and Google push services (push reminders only). We do not use geofencing.

Your rights

You can see, export and delete all tracker data yourself at any time from Settings, including the server copy and the account if you turned sync on; deletion is immediate. For anything else we hold (newsletter contact, reminder rows), you can ask us to confirm what we have, list who it was shared with, stop collecting it, or delete it. Write to the contact on the About page. We answer within 45 days.

Age

The tracker and the AI Coach are for adults 18 and over.

Changes

We will update the date at the top when this policy changes and describe the change in our changelog.