Privacy Policy
Last updated: 16 August 2026
Medtracker is a personal medication tracker. It exists to help you record the medications you take and to tell you when to refill them. This policy describes exactly what it stores, why, who else ever sees it, and how to get rid of it.
What we collect and how
Everything below is either typed in by you or produced by using the app. We do not buy data about you, and we do not gather it from anywhere other than you and your device.
Your account
Your email address, which is also how you sign in; your password, stored only as a bcrypt hash that cannot be reversed back into your password; your name and date of birth; your time zone, which is what all dose scheduling is calculated in; and, if you choose to give one, a phone number for text alerts.
Your health information
The people you track medications for, their prescriptions, the fills of those prescriptions, every dose you record as taken, skipped or missed, and the prescribers and pharmacies you enter. This is the sensitive part, and it is the whole purpose of the app.
We do not read from Apple Health or HealthKit, and we do not write anything into them. Everything here is what you entered.
Your device
If you use the mobile app: an identifier the app generates on your device to tell your phones apart, a push notification token if you turn on notifications, and a sign-in token so you do not have to re-enter your password. The sign-in token is stored only as a hash on our side.
Security records
When anyone signs in, signs out, or fails to sign in, we record the email address that was used, the time, the network address the request came from, and the browser or app that made it. Failed attempts record the address that was tried, even if no such account exists.
What we use it for
Running the app, and nothing else: showing you your medications, working out when a prescription runs out and when it can be refilled, sending the reminders you asked for, and keeping the account secure.
We do not use your information for advertising or marketing, we do not profile you, and we do not sell or rent it to anyone.
Who else sees it
Two services, both only to deliver something you asked for:
- Push notifications go through Expo's push service and on to Apple's notification service. What travels is the alert text and your device's push token.
- Account emails - activation, password reset and invitations - are sent through an email provider. What travels is your email address and the message.
Both are bound to protect your information to the same standard set out in this policy, and neither is permitted to use it for any purpose other than delivering the message.
There is nothing else. Medtracker contains no analytics, no crash reporting, no advertising and no third-party tracking of any kind. No data about you is shared with data brokers, and none is combined with data from other companies.
How long we keep it, and how to delete it
You can delete your account yourself, at any time, from Delete Account in the app or on the web. We will ask for your password and ask you to type your email address to confirm.
Deleting is not instant, on purpose. Your account stops working immediately and you are signed out everywhere, but the data is not destroyed for 14 days. Signing in again during that time cancels the deletion and restores everything. After 14 days it is destroyed permanently and cannot be recovered by you or by us.
What is destroyed: your account, the people you track, their prescriptions, every fill, your entire dose history, the prescribers and pharmacies you added, your notification settings and your registered devices.
Your email address stays reserved to the account until it is destroyed, so you cannot register again with the same address for 14 days.
What is not destroyed straight away: the security records described above. Your email address, the network addresses you signed in from and your browser or app identification are kept for 12 months, so that we can investigate account compromise and abuse, and are then deleted automatically. They are not linked to your health information and are never used for any other purpose.
Sign-in links and password reset links are deleted 30 days after they expire or are used, and immediately if the account is deleted before then.
To withdraw consent, delete your account. Turning off notifications in your settings stops the alerts without deleting anything.
Children
Medtracker is for adults. It is not directed to children under 13, and we do not knowingly collect information from them - registration asks for your date of birth and refuses to create an account for anyone under 13. If you believe a child under 13 has an account, contact us and we will delete it.
Not medical advice
Medtracker records what you tell it and does arithmetic on it. It does not decide what medication you should take, or how much, or when - those come from your prescription. It is not a substitute for professional advice. Talk to your doctor or pharmacist before making any decision about your medication, and do not rely on this app in an emergency.
Changes to this policy
If this policy changes in a way that affects what we collect or who sees it, we will update the date at the top and tell you in the app before the change takes effect.
Contact
Questions about this policy, or about your information, can be sent to the address in the app listing.