MedTrack Privacy Policy

Effective October 10, 2026

MedTrack is a medication tracking app. This page explains what data the app collects, how it's used, and how you can control or delete it.

Local-first by default

You can use MedTrack fully without creating an account. In that mode, your profiles, medications, and dose history are stored only on your device and are never sent to us.

If you create an account

Creating an account is optional and only adds cross-device sync and cloud backup. If you sign up, we collect and store:

• Your email address and name, used for authentication.
• The medication data you or a caregiver enters — profile names, medication names/dosages/schedules, and dose logs — so it can sync across your devices.

This data is stored with Supabase, our database and authentication provider, and is protected by row-level security so only your account can access it.

Health data (Health Connect and Apple Health)

The Reports tab can show your health readings next to your medications. It only does so if you allow it, using Health Connect on Android or Apple Health on iOS.

• What we read: blood pressure, blood glucose, heart rate, blood oxygen (SpO₂), weight and sleep. MedTrack only reads these; it never writes to Health Connect or Apple Health.
• How we use it: only to draw your charts and summaries in Reports, and to build a PDF report when you choose to create one.
• Where it stays: on your device. Readings are held in memory while Reports is open and are not saved by MedTrack, not synced to your account, not sent to our server and not sent to the AI features. They leave your device only when you share a PDF report yourself, to whoever you choose.
• What we never do: sell health data, use it for advertising, or share it with anyone else. Its use complies with the Health Connect permissions policy, including its Limited Use requirements.
• Your control: you can turn access off at any time in Health Connect (Android) or in the Health app (iOS). Since MedTrack keeps no copy, turning access off leaves nothing behind.

AI features

The AI features send the minimum they need to our server, which forwards it to Google's Gemini API to generate a reply:

• AI info: the medication's name and dosage.
• Interaction check: the names of your active medications.
• Ask AI chat: your messages in that conversation and the names and doses of your active medications.
• Label scan: the photo of the medication label you take, to read its details.

These requests are not linked to your account and are not stored by us beyond what's needed to serve the reply. Health readings from Health Connect or Apple Health are never included. AI replies are general information, not medical advice.

Crash and diagnostic reports

We use a crash-reporting service to catch and fix bugs. Crash reports may include device information and app state at the time of the crash, but are not linked to your medication data.

What we don't do

• We don't sell your data.
• We don't use your medication data for advertising.
• We don't share your data with third parties except the service providers above, solely to operate the app.

Your data, your control

From Settings, you can export your data (as a JSON file, via the share sheet) or permanently delete your account and all synced data at any time. Deleting your account does not remove data already stored locally on your device.

Children

MedTrack isn't directed at children, but a parent or caregiver may create a profile to track a child's medications on the child's behalf as part of managing their family's care.

Changes to this policy

If this policy changes materially, we'll update the effective date above.

Contact

Questions about this policy or your data: sallyazulay@gmail.com