Privacy Policy

DoseBeacon exists to help coordinate medication care, not to monetize it. We show no ads, we never sell your data, and we never use health information for advertising. Your medication data lives on your device. If you create or join a Care Circle, it is shared only with the devices the circle's owner or managers approve.

Care information you enter. Patient first name, allergies, conditions, emergency, prescriber and pharmacy contacts, medication names, strengths, instructions, schedules, optional photos of medication labels, dose reports and their history, refill information and helper names. This is stored on your device.

Care Circle sharing (optional). If you create or join a circle, the care information above and dose-event history (including which device made each report and when) are sent over encrypted connections (HTTPS) to our sharing service on Cloudflare so other approved devices in your circle can display it. Each approved device receives its own access key, which is stored in the iPhone Keychain; our server keeps only a one-way hash of it. A circle code on its own does not grant access: joining requires approval by the circle's owner or a manager. Pending join requests expire after 24 hours. Shared dose records are removed from the server after roughly 400 days.

Camera photos. Label scanning uses Apple's on-device text recognition; images are not sent to us for processing. Photos you attach to medications stay with your care data and are shared only with your own approved circle.

Purchases. Subscriptions are processed by Apple. We use RevenueCat to check subscription status; RevenueCat receives an anonymous app user identifier and transaction details, never your care information.

Website tools. The free tools on this website save what you type only in your browser's local storage on your device. It is not sent to us. You can erase it with “Clear all”.

What we don't collect. No advertising identifiers, no location data, no contact-list upload, no tracking across other companies' apps or websites, and no third-party analytics or advertising SDKs.

Reminders are scheduled on your device. By default they don't show medication names on the lock screen; you can choose to show them in Settings.

Only to operate DoseBeacon: showing reminders, sharing with your approved circle, checking subscriptions and answering support requests. We don't use your information for anything else.

Care information is visible to the approved members of your Care Circle according to their role. Service providers that process data for us: Apple (notifications, purchases), Cloudflare (sharing infrastructure) and RevenueCat (subscription status). We disclose data to authorities only when legally required.

Export. Create a medication report (PDF) or emergency card at any time in Caregiver Mode.

Revoke or leave. Owners and managers can revoke any device. Any device can leave a circle; its local data stays on that device.

Delete. In the app, open Settings and tap Delete my data. It removes every medication, dose record, reminder and emergency-card detail from that device. If you created a family circle, it also erases the circle and all of its shared records from our servers for every member; if you joined someone else's circle, it removes your device and name from it. Deleting the app also removes on-device data. You can also email ran.gray.james@gmail.com with your circle code and we'll remove it promptly. Depending on where you live (for example under Canadian or U.S. state privacy laws), you may have rights to access or correct your information; contact us and we'll help.

If we learn of a breach affecting your information, we will notify affected users and authorities as required by applicable law, which may include the U.S. FTC Health Breach Notification Rule.

DoseBeacon is intended for adults. A parent or guardian may use it to coordinate a child's medication schedule; we do not knowingly collect information directly from children.

Data in transit is encrypted with TLS. Circle data is stored separately per circle, and every change is checked against the device's role on the server. Device keys are stored in the iOS Keychain. No system is perfectly secure. Please share your circle code only with people you trust and revoke devices you no longer recognize.

We'll post material changes here and update the date above. Questions or requests: ran.gray.james@gmail.com.