عربي EN
Home

Privacy Policy — DosiDrop

Effective date: August 15, 2026

Note: This policy was drafted with AI assistance and reviewed against the app's actual behavior; it is not legal advice.

1. Introduction

DosiDrop ("we", "the app") is an informational paracetamol and ibuprofen dose calculator. We built it on a simple principle: your health data belongs to you, and it stays on your device. This policy explains what data exists in the app, where it is stored, and what (very little) ever leaves your device.

2. Data stored only on your device

The following data is stored locally on your device (via the app's local AsyncStorage) and is never transmitted to any server:

  • Patient profiles: the name (or label you choose, such as "Me" or "Ahmed"), age, weight, and the weight unit (kg or lb) you prefer.
  • Dose history: the medicine, brand, strength, amount, and time of each dose you log.
  • App preferences: language, theme, notification settings, and whether you chose guest mode.

This data never leaves your device. We hold no copy of it and cannot access it.

3. Optional account (Clerk)

The app works fully without an account ("guest mode") — every feature is available to guests, because all of your data is local either way. If you choose to create an optional account:

  • We use Clerk for authentication, and the only data we collect is your email address, used solely for sign-in.
  • Sign-in is email only. The app offers no Google, Facebook, or Apple sign-in, and no social-network account is ever linked to DosiDrop.
  • Clerk processes this data on its cloud infrastructure (US / EU) under its own privacy policy.
  • Creating an account does not change where your profiles and dose history are stored — they remain local on your device.

4. Anonymous usage analytics (PostHog)

We use PostHog (EU hosting) to understand how the app is used and to improve it. Because this is a medical app, we describe exactly what is sent.

Screen views: the name of the in-app screen you open (for example the home, history, or settings screen). No screen contents are sent.

A fixed list of anonymous interaction events: onboarding_get_started_tapped, guest_continue_tapped, sign_in_submitted, sign_in_completed, sign_up_submitted, sign_up_completed, profile_setup_completed, brand_selected, formulation_selected, warning_expanded, dose_calculated, dose_logged, and past_dose_logged.

The details attached to those events are identifiers and flags only: which medicine (medicine_id), which brand and its market (brand_id, country), which product form and strength (formulation_kind, formulation_id), whether the product is a liquid (is_liquid), whether a calculation succeeded or was blocked and the category of the block (outcome, block_reason), which kind of medicine warning you expanded (warning_kind), the sign-in method (method — always "email"), and whether a profile was created or edited and whether it was your first one (mode, is_first_profile). Three context values are attached to every event: the app version, the release channel (production or preview), and your chosen language.

To be precise about one point: formulation_id identifies the product you were looking at, so it does indicate which medicine and which strength was on screen. It does not say who it was for, their weight or age, or what dose was calculated.

We never send via analytics: patient names, ages, weights, dose amounts in mg or ml, the times of your doses, your email address, or any other health information. The app never calls PostHog's identify function and no person profile is created, so these events are anonymous and are not linked to you or to your account. Analytics are switched off entirely in development builds.

5. Crash reporting (Sentry)

We use Sentry (EU endpoint, de.sentry.io) so that a crash gets diagnosed and fixed instead of silently repeating. A crash report contains technical data only: the error and its stack trace, the app version and release channel, and basic device information such as model and operating system version.

It is deliberately configured to keep health data out:

  • Personally identifying data is disabled at the source (sendDefaultPii: false) — no IP address, user record, or cookie data is attached.
  • A send-time filter strips any user and request payload from every report before it leaves your device.
  • Console output is dropped from crash reports, because console messages can echo dose values or patient names.
  • Session Replay (screen recording), the in-app feedback widget, Sentry Logs, and performance tracing are all switched off. A recording of this app's screens would show exactly the health data we promise never to send.

Sentry never receives your profiles, your dose history, your calculated doses, or your email address.

6. Local notifications

Dose reminders are local notifications scheduled on your device itself; they do not pass through any server. They are off by default. The app may ask your operating system for notification permission after you finish setting up a profile, and asks when you switch reminders on in Settings; reminders turn on only if you grant that permission, and stay off if you decline. You can disable them at any time in the app or in your operating system settings. Settings also offers "Hide patient names in reminders", which makes reminder text generic so no name or medicine appears on your lock screen. This is on by default for new installations — you can turn it off in Settings if you would rather see the patient's name. If you installed the app earlier, your existing choice is kept.

7. PDF report export

You can export your dose history as a PDF report. This action:

  • Is initiated only by you.
  • Is generated on your device.
  • Is shared through your operating system's share sheet — you choose where it goes (print, email, WhatsApp, etc.).

We do not send the report anywhere and we never see it.

8. What we do not do

  • No advertising.
  • No selling or renting of any data.
  • No sharing of data with third parties for marketing purposes.
  • No cloud sync or cloud backup of your medical data.
  • No tracking cookies inside the app.

9. Children's data

DosiDrop is designed for adults (parents and caregivers) who use it on behalf of their children — it is not directed at children for their own use. Any children's data entered (name, age, weight, doses) is stored on the caregiver's device only and never reaches us.

10. Deleting your data

Because your data lives on your device, deleting it is entirely in your hands:

  • Settings → Clear all history removes every logged dose.
  • Settings → Clear all app data erases every profile, all dose history, the selected medicine, and the safety memory behind minimum-interval and 24-hour-limit tracking. To be accurate about its scope: it does not reset your language, theme, notification preferences, or guest-mode choice — those stay until you uninstall.
  • Signing out (if you created an account) also clears profiles, dose history, the selected medicine, any scheduled reminders, and notification preferences from the device.
  • Uninstalling the app permanently erases all local data, including the preferences listed above.
  • To delete an optional Clerk account (your email address), contact us at the address below and we will help.

11. Data security

Local data is protected by your device's operating system (device lock and default iOS/Android encryption). We recommend enabling a screen lock to protect your family's dose history from anyone holding your phone.

12. Changes to this policy

If we update this policy, we will revise the effective date above and publish the new version on this page. Material changes will be announced inside the app.

13. Contact us

For any privacy question or account deletion request: support@dosidrop.com

14. Reminder

DosiDrop is an informational tool and is not a substitute for medical advice. Always consult a pharmacist or doctor when in doubt.