Privacy Policy

Last updated: July 12, 2026

The short version: Dose Pop is private by default. Your medicines are stored on your device and, if you use iCloud, in your own Apple iCloud account, which we cannot see. We do not run our own servers for your medicine data unless you turn on Caregiver Alerts and choose one person to share with. There are no ads and no tracking.

What we collect

By default, we do not collect your personal data, and we do not use advertising or tracking. There are two exceptions. When you search for a medicine name, the app makes an anonymous lookup to public drug databases (see Medication search below). And if you turn on Caregiver Alerts, the app sends a limited amount of information, and we collect the caregiver name and email you enter so we can send them the invitation and any missed dose alerts (see Caregiver Alerts below). We collect nothing else.

Data stored on your device

Dose Pop stores your medication list, dosages, dose history, notification preferences, and app settings locally on your device using Apple frameworks.

iCloud sync

If iCloud sync is enabled in your Apple system settings, app data may sync through your own iCloud account. The developer does not have access to your iCloud data.

Caregiver Alerts (only if you turn it on)

Caregiver Alerts is off unless you choose to turn it on. When you do, you name one caregiver and give your express agreement on a consent screen before anything is shared. You can stop sharing at any time from within the app.

What is shared: the caregiver name and email you enter, plus the names of your medicines, their colors and scheduled times, and whether each dose was taken, skipped, or missed. Your dosages, instructions, and notes are never shared. The app removes them before anything is sent, and there is no place to store them on our side.

How your caregiver sees it: your caregiver receives an email with a private link to a simple web page that shows the shared information. They receive a further email only if a dose looks missed, after the grace period you set. They cannot see the app, cannot change anything, and never receive your dosages.

Who processes it: to make the link and the alerts work, the shared information is stored by Cloudflare (Cloudflare Workers and the D1 database), and the invitation and alert emails are sent through Resend, which receives the caregiver email address and the message. These companies process this data only to provide the feature, under their own terms. We do not sell or rent your information, we do not use it for advertising, and no one other than your named caregiver and these service providers receives it.

Turning it off and deletion: when you remove your caregiver in the app, the private link stops working right away. Sharing also pauses on its own if you do not open the app for about 14 days. Shared medicine data is deleted after about 180 days of inactivity. We keep a small record that you consented and when you revoked, together with the caregiver name and email you entered, as evidence that the sharing was authorized by you. That record contains no medicine data. To have that record and any shared data deleted at any time, remove your caregiver in the app or ask us through the Support page and we will delete it.

Security: the private link uses a long random token that is stored only in hashed form and expires, an unknown or revoked link shows a neutral page with no information, and we keep a breach notification procedure ready. No online service can promise perfect security, but if we suspected that shared information was exposed, we would act on it and notify affected people as required.

For California residents

Where the California Confidentiality of Medical Information Act (CMIA) applies, Dose Pop treats your medication and adherence information as confidential medical information. We disclose it only at your direction, to the caregiver you name, after your express agreement, and we honor your revocation. The service providers named above (Cloudflare and Resend) process this information only to deliver the feature you turned on, not for their own purposes. We do not disclose your medical information for advertising, sale, or any purpose other than providing Caregiver Alerts.

Medication search

When you search for a medication name, Dose Pop may make anonymous, read only requests to public medication databases such as RxNorm and OpenFDA. These requests contain the search text you type and do not include an account, advertising identifier, or tracking identifier.

Notifications

Dose Pop uses Apple local notifications to remind you when it is time to take a medication. Your reminders are scheduled and shown by your own device and do not pass through a Dose Pop server. Caregiver alert emails are separate and are covered above.

Children

Dose Pop is not directed at children under 13, and we do not knowingly collect personal information from a child under 13.

Medical disclaimer

Dose Pop is a reminder tool. It does not diagnose, treat, prescribe, or provide medical advice. Always follow instructions from your doctor, pharmacist, or other qualified healthcare professional.

Changes to this policy

If we change how Caregiver Alerts or any other feature handles your information, we will update this policy and the App Store privacy answers before the change takes effect.

Contact

Questions? See the Support page for contact details.