Privacy Policy
- DoseMate keeps the medicines, dose records, appointments and family profiles you enter, so it can remind you and show your history.
- We don’t show ads, sell your information, or use analytics, crash reporting or AI.
- Your data is stored with Google Firebase. Google also handles sign-in with Google, push alerts and clinic address search.
- You can delete your account and all its data at any time in Settings → Delete Account.
1. Who we are
DoseMate is a medicine reminder and care-planning app developed and operated by Gul Faraz Ahmed, an individual developer based in Pakistan (“we”, “us”). We are responsible for the information described in this policy. You can reach us at gulfarazahmed08@gmail.com.
2. What we collect
We collect only what you enter or what the app needs to work. Everything below is linked to your account.
Account
Your email address and name. If you sign up with email, Firebase Authentication handles your password; we never see or store it. If you sign in with Google, we receive your Google account’s name, email address and profile photo link. We also store whether you finished setup and which profile you last had open.
Profiles you manage
For you and each family member you add (for example a parent or spouse): their name, relationship, date of birth if you give it, an emergency contact name and phone number if you give them, and a profile photo if you add one.
Medicines and dose records
Each medicine’s name, dosage, your notes, schedule (times, days, start and end dates, pauses), how many doses you have left, low-supply settings, and a reference photo if you add one. For each scheduled dose: whether you marked it taken or skipped, when you did, an optional note, your time-zone offset, and snoozes made from a reminder. These are records of what you tapped in the app. They don’t prove that a medicine was taken.
Appointments and address search
Each visit’s title, type, date and time, doctor, clinic, address, phone number, notes and reminder choices. When you search for a clinic address, the text you type is sent to the Google Places API to get suggestions. If you pick one, we store that place’s Google place ID, name and map coordinates with the visit, so “Directions” can open the right place. DoseMate never reads your device’s location.
Devices and alerts
When you allow notifications, we store this device’s push messaging token, its platform (Android or iOS) and its time zone. We use them to send your own “dose not logged yet”, low-supply and sync alerts. We also keep a small record of which alerts were sent, so each one is only sent once.
Care sharing (when available)
Some versions of DoseMate let you invite someone to help with a profile. If you do, we store the invitee’s email address, the permissions you chose and the invitation’s status, and we email them an invitation link on your behalf. If you accept an invitation, the person who invited you can see your name and email address, and you can see the parts of their profile they chose to share. The shared view never includes dosages, notes or photos.
Messages from you
If you email us, we keep your message and email address so we can reply.
Technical information
Our servers (Google Cloud) automatically keep request logs, which can include your IP address, app version, device type and error codes. We use them only to keep the service running and to fix problems.
3. What we don’t collect
- No advertising, and no advertising identifiers.
- No analytics, usage tracking or crash-reporting tools.
- No AI features: your information is not used to train or run AI models.
- No GPS or device location, contacts, microphone or health-platform data (such as Health Connect or Apple Health).
- We don’t sell, rent or trade your information.
4. How we use your information
- To run the app: show your schedules, history, calendar and appointments, and keep them in sync across your devices.
- To remind you: schedule alarms on your device and send push alerts to your devices.
- To keep supply counts up to date as you log doses, and warn you when you’re running low.
- To let you find a clinic’s address and open directions.
- To share a profile with people you invite, if you choose to.
- To send account emails (email verification, password reset) and to answer your messages.
- To keep the service secure and working, for example rate limits that stop invitation spam.
We process this information because you asked us to provide the app’s features (to perform our agreement with you). For health-related details such as your medicines, we rely on your choice to enter them, and you can remove them at any time.
5. Service providers and where data is stored
| Provider | What it does | What it receives |
|---|---|---|
| Google Firebase (Authentication, Cloud Firestore, Cloud Storage, Cloud Functions, Hosting) | Sign-in, database, photo storage, server tasks, this web page | Your account and everything you save in the app. Stored in the United States. |
| Firebase Cloud Messaging (Google) | Delivers push alerts | Your device token and the alert’s text |
| Google Sign-In | Signs you in with Google, if you choose to | Handled by Google under your Google account |
| Google Places API | Clinic address suggestions | The text you type in the address field, and the app’s identifier |
| Google (Gmail) | Sends care-sharing invitation emails | The invitee’s email address, and the inviter’s and profile’s names |
These providers process data for us under their own terms and security practices (see Firebase privacy and security and Google’s Privacy Policy). Because these servers are in the United States, your information is transferred outside Pakistan and your own country.
6. When information is shared
- With people you choose: people you invite to help with a profile, and anyone you send a PDF or CSV history export to. Exports are created on your device, and you decide where they go.
- With the service providers listed above, only to run the app.
- If the law requires it: to comply with a valid legal request, or to protect someone’s safety.
We don’t share your information with advertisers, data brokers, insurers or employers.
7. Device permissions
| Permission | Why |
|---|---|
| Notifications | Dose and appointment reminders, and alerts from our server |
| Alarms & reminders (Android exact alarms) | Ring reminders at the exact time you set |
| Run at startup, vibrate, keep awake (Android) | Restore reminders after a restart, and make the alarm ring and wake the screen |
| Camera and photos | Only when you choose to add a profile or medicine photo |
| Internet | Sync your data and search for addresses |
You can turn permissions off in your phone’s settings at any time. If you do, the features that need them stop working.
8. Data kept on your device
To work offline and ring on time, the app keeps the following on your phone: a copy of your recent records, the reminders scheduled for the next two days, your appearance setting, and which notifications you’ve read. Logging out removes this account’s reminders and alerts from the device. Deleting your account also clears the stored copy and this account’s settings.
9. How long we keep it
- Your account and app data: until you delete them, or delete your account. Deleting a medicine in the app removes it and its dose records from our database, and deleting a visit removes that visit. Family profiles are removed when you delete your account.
- Device tokens: until you log out on that device, delete your account, or the token stops working.
- Invitations: until they’re cancelled or the account that sent them is deleted. Links expire after 7 days.
- Server logs: up to 30 days.
- Backups: we don’t keep separate database backups, so deleted data can’t be restored.
10. Deleting your account
In the app, open Settings → Delete Account. You’ll be asked to confirm it’s you, with your password or your Google account. Deletion then permanently removes:
- your sign-in account;
- every profile you manage, with all their medicines, schedules, dose records, snoozes, alerts, appointments and photos;
- access you gave others to your profiles, and every invitation you sent;
- your access to profiles others shared with you (their own profiles and data aren’t affected);
- your devices’ push tokens, so no further alerts are sent, and the reminders and stored data on the device you delete from.
The app only says your account is deleted after our server confirms that all of the above is gone. If something fails partway, the app tells you and you can try again to finish.
What remains, and for how long
- A deletion record holding only your account ID and timestamps. We keep it for about 65 minutes after deletion, so that anything another of your signed-in devices saves in that time is deleted too. If a deletion can’t finish and your account still exists, the record stays until you try again, for up to 30 days.
- Server logs for up to 30 days (see section 9).
- Other people’s records: if someone else invited you to help with a profile, their own record of that invitation (with the email address they typed) stays in their account until they delete it.
- Copies you made: exports or emails you sent to others are outside our control.
- Other devices: another phone signed in to the account stops receiving alerts straight away. Reminders that phone had already scheduled (up to two days ahead) are removed the next time the app runs there and finds the account gone. To remove them sooner, log out or uninstall the app on that phone.
These steps are also on our account deletion page.
Can’t open the app? Email gulfarazahmed08@gmail.com from the address on your account and ask us to delete it. We may ask you to confirm the request, and we’ll complete it within 30 days.
11. Your choices
- See and correct: everything you entered is visible in the app and can be edited there.
- Get a copy: export your dose history as a PDF or CSV from History, or email us for a copy of your data.
- Delete: remove individual items, or your whole account (section 10).
- Limit: turn off notifications, camera or photo access in your phone’s settings, and skip optional fields such as date of birth or emergency contact.
Wherever you live, you can contact us about any of these. We’ll answer within 30 days. If you’re not satisfied, you can complain to your local data protection authority.
12. Security
Data is encrypted in transit (HTTPS) and at rest by Google. Database and storage rules let only your signed-in, verified account read or change your data, and let the people you invite see only what you share with them. Photos are private to your account. No system is perfectly secure, so keep your device locked and your password private.
13. Children
DoseMate is meant for adults managing their own or their family’s care, and isn’t directed at children under 13. A parent or guardian may add a profile for a child they look after. If you believe a child has created an account, contact us and we’ll delete it.
14. Health information
DoseMate is a reminder and record-keeping tool. It doesn’t give medical advice, diagnose conditions or check drug interactions. Reminders depend on your device and its settings, so always follow your doctor’s or pharmacist’s instructions.
15. Changes to this policy
If we change how we handle your information, we’ll update this page and its effective date, and we’ll tell you in the app before an important change takes effect.
16. Contact
Gul Faraz Ahmed, Pakistan
Email: gulfarazahmed08@gmail.com