Privacy Policy
Dose & Pulse ("the app") is a personal health tracking application developed by NimrodLabs ("we"). This policy explains what data the app handles, where it goes, and your choices.
1. Data the app handles
- Health entries you create: blood pressure, heart rate, medication names/dosages/adherence, lab results, notes, and optional file attachments (PDF/images) you upload.
- Account data (optional): email address and Firebase Auth UID if you choose to sign in. Google sign-in shares your Google account email and basic profile with the app.
- Voice input (optional): speech-to-text is processed on-device by the operating system; we never receive or store audio.
- App Check / diagnostics: Firebase App Check attestation data, used solely to prevent abuse.
2. Where your data is stored
- On your device: all entries are stored locally first (offline-first design). You can use the app entirely without an account.
- Cloud (only if you sign in): your entries sync to Google Firebase (Cloud Firestore) under your account, so they are available across your devices. Firebase processes data as our processor under Google Cloud's data processing terms; servers may be located in the United States (nam5 region).
3. AI features
If you request an AI summary, aggregated, non-identifying statistics (e.g., average blood pressure values) are sent to Google's Gemini model via Firebase AI Logic to generate a plain-language summary. We do not send your name, email, or full record history. AI output is informational only and is not medical advice.
4. Caregiver sharing
Sharing happens only when you generate an invite code and give it to someone. Codes are single-use, expire after 7 days, and can be revoked by removing the caregiver in the app. We never share your data otherwise.
5. What we never do
- We do not sell, rent, or share your data with advertisers or data brokers.
- We do not use your health data for advertising.
- We do not track you across other apps or websites.
6. Your rights and controls
- Access/export: export your data anytime as PDF or CSV (Care tab).
- Delete cloud data + account: Settings → Danger zone → Delete Account. This permanently removes your cloud data and authentication account. Local on-device data remains under your control and can be removed by clearing app data or uninstalling.
- Withdraw sharing: remove a caregiver anytime in the Care tab.
7. Data retention
Cloud data is kept until you delete entries or delete your account. Invite codes auto-expire after 7 days.
8. Security
Data in transit is encrypted (TLS). Cloud access is restricted by Firebase security rules (per-user isolation), Firebase App Check attestation, and per-account AI usage limits.
9. Children
The app is not directed at children under 13 and does not knowingly collect their data.
10. Medical disclaimer
Dose & Pulse is a record-keeping and wellness tool. It is not a medical device and does not provide diagnosis, treatment, or medical advice. Always consult a qualified healthcare professional.
11. Changes
We will update this policy as the app evolves; material changes will be announced in-app.
12. Contact
[EMAIL] — for any privacy question or data request.