Short answer: Your doses, vials, labs and notes are stored on your phone, not on Dose Track servers. A few things do leave it: what you post to the Hub, data sent while an AI feature runs, pseudonymous usage stats, your account email, and backups that are encrypted before upload.
| What | When | Who can read it |
|---|---|---|
| Hub posts, photos and videos | When you post them | Other Hub members, under your display name |
| Your question plus a slice of your tracked data | When you use Pulse or AI insights | Processed by Google Gemini to answer, not stored as a health record |
| Lab PDF or photo | When you upload one to read the values | Sent to Google Gemini for that request, not saved |
| CSV files from another app | When you use Import From Other App | Deleted within 24 hours |
| Usage stats | As you use the app | Tied to a random device ID, no health data or names |
| Email address | Only if you create an account | Dose Track, never shared or sold |
| Encrypted backup or transfer | Only if you turn it on or send one | Nobody without your password |
Backups and phone transfers are encrypted on your phone before upload, with a key locked by your password. Dose Track never receives your password, so it cannot read your backup, and it cannot reset your password either.
Your phone's own iCloud or Google backup can also include Dose Track. On Android, the app only allows this when Google can encrypt the backup with your screen lock.
The privacy policy lists every service involved and how long things are kept. Questions go to hello@dosetrack.app.