Privacy

Afterdose keeps a medication journal on your device. Three things can leave the device, each only when you ask for it: a photo of a plate you want read, which goes to Google Gemini; one meal sentence you choose to send, which goes to Cloudflare Workers AI; and a barcode number you scan — a medication box or a packaged food. The two that reach an AI service leave only after you allow it on a screen that names who reads them. A barcode is a product number, not anything about you, and it travels without your device identifier: nothing links a scan back to this device.

This page is generated from the app's own privacy screen, so the two can never disagree.

The plate photo → Our server, then Google Gemini (Google LLC)

the photo you chose, resized, with no location or other photo data — this alone goes to Google
a random identifier of this install, kept by our server to count free reads
your App Store receipt, if you subscribed, checked by our server

Only after you allow it on the screen that asks first, and then only when you tap to read a plate. Afterdose keeps no copy. Google does not use it to train or improve its products, and may keep it for a limited time only to detect misuse.

Apple Health → Your device only

your weight, written only, if you turn it on
your blood glucose, read only, if you turn it on
your steps, active energy and exercise minutes, read only, if you turn it on

Three separate switches, all off by default. Afterdose writes only the weights you log here and never reads them back, and it reads nothing you have not switched on. Nothing read from Health goes to us.

Your journal → Your own private iCloud

doses, schedule, supply, weight, side effects, measurements, photos, meals

Continuously, in your Apple account. We have no server for it and cannot read it.

The subscription → Apple, then our Worker

the transaction signed by Apple

At purchase and at launch, to check that Pro is active. It is verified, then forgotten. We never see your payment details.

A meal sentence you send yourself → Our server, then Cloudflare Workers AI (Cloudflare, Inc.), running Meta's Llama 3.2 model

the one sentence you typed, nothing else

Only after you allow it on the screen that asks first, and then only when you tap “Send this sentence” — never on its own. Afterdose keeps no copy, and Cloudflare does not train on it or store it. Meta receives nothing. Everything Afterdose understands by itself stays on this device.

Who reads for us

Google LLC (Gemini API, paid tier) reads plate photos. Its terms: prompts and answers are not used to improve its products, are processed under Google's data processing terms, and are logged for a limited time solely to detect misuse.
Cloudflare, Inc. (Workers AI) runs our server and reads a meal sentence you send. Its terms: your content is not used to train any model or to improve its services, and is not stored unless we ask — we don't.
Open Food Facts receives a scanned food barcode, a product number with nothing about you, through our server.
Each of them gets only the one item listed, and protects it at least as well as this page does. None may use it for advertising.

Never

No account, no email, no password.
No advertising, no tracking, no analytics SDK.
Your progress photos never leave the device.
Your dose history is never sent to us.
Your voice is never sent anywhere.
No meal sentence leaves this device unless you ask, one sentence at a time.
Nothing is sold, and nothing is shared for advertising.

Not medical advice

Afterdose records what you enter and never recommends a dose. Talk to your prescriber before changing anything.

Keeping, deleting, withdrawing

Withdraw either AI permission at any time: Settings → Health & privacy → AI services, or the two switches under “You decide” on the app's Privacy screen. Nothing more is sent after that.
Our server keeps no photo and no sentence. The random identifier of this install is kept only in a daily count of free reads, erased automatically after 48 hours.
The product details for a scanned barcode may be kept on our server for up to 30 days, filed under the barcode, with nothing about you.
Export everything at any time: Settings → Data & support → Export my data.
To delete everything, delete Afterdose, then remove its data from your iCloud: Settings → your name → iCloud → the storage used by apps → Afterdose. We hold no account and no copy.