MedTracker Privacy Policy

Last updated: 1 November 2026

MedTracker is a personal medication and wellbeing tracker. You can use its logging, charts, comparisons and computed reports without AI, an account or an Apple Watch.

Your records

MedTracker stores the doses, check-ins, factors, sleep, habits, notes, medications, regimens and schedules you record on your iPhone. If you add them, your name and date of birth are kept on your iPhone only to print on the prescriber summaries you choose to share; they are never sent to AI. With your permission, it reads information from Apple Health to fill in your logs and charts. This can include heart rate, HRV, blood pressure, sleep, workouts, steps and active energy; habit-related activity, distance, exercise and mindful minutes, time in daylight, water, nutrition and State of Mind; weight if you track it; and menstrual, contraception, pregnancy and ovulation-test data if you enable cycle tracking.

Cycle tracking is optional and off by default. It describes recorded history only, never forecasts a future period or phase, never advises medication changes, and makes no claims about causes or conditions.

The private TestFlight app does not include a Watch app. A separate development app has a Watch companion that exchanges records directly with its paired iPhone using Apple's connection.

Apple Health and Calendar

MedTracker writes to Apple Health only the entries you log: mood check-ins, blood pressure, caffeine, water, mindful minutes, State of Mind, weight and, when cycle tracking is on, period days. You control Health permissions in Apple's settings.

If you choose to add a review date to Calendar, MedTracker adds that event. It cannot read your calendar.

Optional AI

You choose No AI or Claude during setup or after restoring a backup. You can change that choice in Settings › Privacy & External Data › AI analysis. Restoring a saved engine preference does not grant permission to send data. Changing your choice cancels current AI requests; information already sent cannot be recalled.

No AI makes no AI requests. AI features need iOS 26 or later; on iOS 18 MedTracker has no AI and never asks you to choose.

AI is used for conversational Quick log, Ask your data, reading a titration plan you paste in, and summarising or choosing notes from a regimen or review period. Claude can also write an overview for a prescriber PDF. Prescriber PDFs made with No AI contain recorded information and computed figures, without an AI overview. Charts, comparisons, statistics and other computed reports come from app code, not AI arithmetic. AI is not used to recommend a dose or medication change.

If you choose Claude

With your explicit permission, the relevant question, pasted text or logged data goes through MedTracker's service hosted on Cloudflare, then to Anthropic's Claude API. This can include medication doses, check-in ratings, notes, sleep, heart rate, HRV, blood pressure, factors and supplements with their names and recorded amounts, information imported from Apple Health, and comparisons or counts computed by the app. Optional tracking data is included only when you choose to include it. The service uses Claude Haiku 5.5 for written answers in Ask your data, notes summaries, selecting notes to quote, and reading a pasted titration plan. Claude Sonnet 5.5 handles Quick log, the prescriber PDF overview, and matching a question in Ask your data to a ready-made answer. For that matching step it receives only your question, the date, your regimen names and what the previous answer was about. Older app versions use Sonnet 5.5 throughout.

MedTracker's service does not store request or response text and does not log those bodies. To limit beta usage it stores daily spending totals: one for the whole service and one for each invite code, identified by a one-way fingerprint of the code rather than the code itself. A beta invite code controls access; the app keeps it in the iPhone Keychain.

Cloudflare processes the connection and may process technical connection information under its own terms. Anthropic processes the submitted information under its API terms, including any applicable retention. This is external processing of health information, even though MedTracker does not keep a copy on its service. The service operator controls the code and infrastructure that handle these requests.

Read Cloudflare's privacy policy and Anthropic's privacy policy.

Siri and Shortcuts

Apple processes Siri requests under its privacy policy. Structured logging does not need AI. Conversational Quick log uses only the AI option you have permitted, and is unavailable when AI is off.

Backups and exports

You choose when to create and share complete backup files, CSV exports and prescriber PDFs, and where they go. These files can contain sensitive health information.

An optional prescriber's email address is stored on your iPhone and included in complete backups. It fills in the recipient in Apple's Mail composer when you choose to email a prescriber PDF. You can review or change the recipient and attachment before tapping Send; MedTracker does not send the email itself.

Ask your data chats are saved on this iPhone only, including ready-made answer cards when AI is off. They are not included in complete backups or device backups. You can delete individual chats or all chats from Saved chats. Continuing a recent chat uses your current AI choice and its existing permissions.

Automatic backups are on by default and are saved inside the app on your iPhone. Manage them in Settings › Backup, Restore & Export › Automatic backups. They are not an off-device backup. Like the app's other local files, they can be included in your device's own iCloud or computer backup. MedTracker does not run its own cloud record-sync service.

Tracking and feedback

MedTracker has no advertising, tracking or product-analytics service. It does not sell your data or use Health data for advertising.

If you send beta feedback, screenshots or email, the developer receives what you choose to send. Apple also processes TestFlight diagnostics and feedback under its terms. Please leave private health details out of feedback unless they are needed to explain the problem.

Deleting your data

Deleting an app removes its local records and automatic backups from that device. Exported files and device backups remain wherever you saved them. Entries MedTracker wrote to Apple Health remain there until you remove them in Health; Calendar events remain until you delete them there. A separate development app has its own local storage.

Changing the AI choice prevents new requests but does not delete information already handled by an AI provider; that provider's retention and deletion terms apply.

Contact

Questions or privacy requests: hello@medtracker.me.