Privacy Policy

Effective date: September 15, 2026

CareDose is operated by Pablo Gamero. This Privacy Policy explains how CareDose collects, uses, stores, shares and protects information when you use the CareDose iOS app and related services. Contact us at caredose@pablogamero.com.

Information we collect

We collect information you provide or generate while using CareDose:

Account details — your email address and display name. If you sign in with Apple or with Google, we receive the account identifier and the email address that provider releases to us. Sign in with Apple may pass a private relay address instead of your real one; we do not attempt to resolve it.
Health information you enter — medication names, schedules, dose amounts, dose logs, appointments, adherence history, stock counts and notes.
Caregiver sharing — invitations, invite codes and sharing status. Scanning an invite QR code uses the camera; frames are processed on the device and are never stored or transmitted.
Device and delivery settings — push notification tokens, the device’s IANA time zone, its language, and per-device reminder settings such as quiet-hours start and end.
Subscription status — plan and entitlement information, received from Apple through RevenueCat. We never see your card details.
Usage and diagnostics — described in its own section below.

Sensitive health information

Medication, appointment, dose and adherence data can be sensitive health information. CareDose uses this information only to provide the service, including reminders, logging, adherence history, sharing, alerts and support. We do not sell medication data and do not use it for advertising or cross-app tracking.

How we use information

We use information to create and manage your account, store your medication and appointment schedule, send push reminders, record dose history, calculate adherence summaries, deliver caregiver notifications, manage subscriptions and plan access, provide customer support, troubleshoot issues, detect abuse, maintain security and comply with legal obligations.

Analytics and diagnostics

CareDose collects a small amount of product-usage and crash information so we can see which parts of the app are used and what breaks. This is the only part of CareDose that exists to tell us something about you rather than to serve you, so it is described here in full.

Who processes it. PostHog, on its EU Cloud (eu.i.posthog.com). Analytics data does not leave the European Union.

Who you are to it. A randomly generated identifier created the first time the app runs and kept in the device’s own storage. It is not your Firebase account id, your email, your name or any Apple or Google identifier, and it is not shared with any other app. Deleting your account mints a new one.

What is collected. Which screens are viewed and which features are tapped; the platform, app version, language code, account mode and plan tier; and crash and error reports, covering Flutter framework errors, platform-dispatcher errors and isolate errors.

What is never collected. Medication names, doses, times, schedules, appointments, notes, titles, people’s names, email addresses, display names, account, patient, caregiver or invite identifiers, and raw exception messages. This is enforced in code, not only promised: every outbound event — crash reports included — passes through a deny list of property names that are dropped before sending, and any remaining text property is truncated to 40 characters. Native platform exceptions are not captured at all, precisely because their text would bypass that filter.

What is switched off. Session replay, surveys, feature flags, push-notification tracking and cross-app tracking are all disabled. CareDose does not ask for App Tracking Transparency permission and does not track you across other companies’ apps or websites.

How to turn it off. Settings → Privacy → “Share app usage”. It is on by default and switching it off takes effect immediately. Turning it off stops collection; events already sent remain linked to the random identifier described above until they age out or you ask us to delete them.

The Android waiting list

If you ask us to tell you when CareDose reaches Google Play, we store the email address you type, the language of the page you typed it on, and the date. Nothing else — no name, no IP address, no tracking pixel, and no advertising use. It is kept in a Cloudflare D1 database in our own account and is never sold, shared or used to email you about anything else.

We will write to you once, on the day CareDose is available on Google Play, and that email carries a one-click unsubscribe link. After that launch email we delete the list. You can leave earlier at any time by emailing caredose@pablogamero.com. The legal basis is your consent, which you may withdraw at any time.

Caregiver sharing is optional, user-initiated and revocable. When you invite a family member or caregiver, that invited person may be able to view your medication schedule, appointments, adherence history, and taken or missed dose activity, and may receive alerts about missed doses or other shared events. Remove access in the app when you no longer want a caregiver to see this information.

Processors and sub-processors

CareDose uses third-party service providers to operate the app. These providers may process or store information on our behalf:

Google Firebase — authentication for account sign-in, Firestore for schedule and app data storage, and Cloud Messaging for push notification delivery.
Apple — Sign in with Apple, App Store purchases and push notification delivery to your device.
Google Identity — Sign in with Google, where you choose that option.
RevenueCat — subscription management, entitlement status and paid plan access.
Cloudflare — the worker that schedules and sends notifications, processes account deletion and keeps entitlements in sync. The worker keeps no database of its own, but Cloudflare retains its execution logs, which can contain account identifiers.
PostHog (EU Cloud) — product analytics and crash reporting, as described above.

These providers process data under their own security and privacy programs and may process or store data in countries outside your country of residence.

Legal bases for processing

If you are in the European Economic Area, the United Kingdom or a similar jurisdiction, Pablo Gamero is the data controller for personal information processed by CareDose. We process information when necessary to perform our contract with you, with your consent where required, to comply with legal obligations, and for legitimate interests such as app security, support, diagnostics and service improvement. You may withdraw consent where processing depends on consent.

Your rights and choices

Depending on your location, including under the GDPR or CCPA/CPRA-style laws, you may have rights to access, correct, delete, export, restrict or object to the processing of your personal information. You may also have the right to withdraw consent or appeal a decision. Contact caredose@pablogamero.com. We do not sell personal information and do not share personal information for cross-context behavioural advertising.

Data retention and deletion

We keep information for as long as needed to provide CareDose, maintain your account, comply with legal obligations, resolve disputes and enforce agreements.

You can delete your account from inside the app: open Settings and tap Delete account at the bottom. That erases your medications, dose history, activity log, appointments, stock events, devices, alerts, care connections, plan membership, subscription entitlement records and the login itself, and asks RevenueCat to delete your subscriber record. The page on deleting your account sets out exactly what goes and what stays. If you cannot reach the app, email us and we will process the request.

Some records may be retained for a limited time where required by law, fraud prevention, security, backups or subscription accounting.

Security

We use reasonable administrative, technical and organisational safeguards designed to protect information. No method of transmission or storage is completely secure. You are responsible for keeping your device and account credentials secure, and for choosing trusted caregivers when sharing data.

International transfers

CareDose and its providers may process and store information in the United States, the European Union and other countries. Analytics data stays in the European Union. Where required, we rely on appropriate safeguards for international transfers, such as contractual protections or other lawful transfer mechanisms.

Children

CareDose is not directed to children under 13. In the EEA, CareDose is not directed to children under 16. Do not use CareDose for a child unless you are legally authorised to provide and manage that information. If you believe a child has provided information without appropriate permission, contact us.

Medical disclaimer

CareDose is not a medical device, does not diagnose, treat, cure or prevent disease, and does not provide medical advice. CareDose reminders, logs, adherence summaries and caregiver alerts may be delayed, incomplete, inaccurate or unavailable. Always consult qualified healthcare professionals about medications, dosing, side effects, missed doses and treatment decisions.

Changes to this policy

We may update this Privacy Policy from time to time. If changes are material, we will provide notice as required by law, such as through the app, the website or email. The effective date above shows when this policy was last updated.

Contact

For privacy questions, account requests or data rights requests, contact Pablo Gamero at caredose@pablogamero.com.