Privacy Policy — Steroid Tracker

Summary

• The medication schedule, doses, records, notes, appointments and reminder settings stay on the device. There is no account and no SRG Consulting server that receives them.
• The free version shows non-personalized ads from Google AdMob. Google receives technical device and network data to deliver and measure those ads. Health information is never sent to Google or used for advertising.
• Optional usage and diagnostics sharing is off by default.
• Purchases are processed by Apple or Google. SRG Consulting does not receive payment details.

1. Information that stays on the device

The app stores, only on the device: medication name, amounts and units, prescribed steps with their repeating patterns and dates, scheduled times, optional instructions copied from the prescription, taken and not-taken records, daily notes, appointments and tests, reminder preferences, app language, appearance and the Remove Ads status. This data is kept in app-private storage that is excluded from iCloud and Google backups and from device-to-device transfer. SRG Consulting cannot see, access or recover it.

Reminders are local notifications scheduled by the phone. By default they do not show medication details on the lock screen; this can be changed in Settings.

Deleting the app, or using Settings › Privacy & data › Delete local records, removes this data. Because it is not backed up, it cannot be restored afterwards.

2. Printed and shared files

The printable calendar and the summary for the doctor are created as PDF files on the device, in a private temporary folder excluded from backups. They are handed only to the system share or print sheet when the user chooses to share or print them, and the temporary copies are deleted afterwards. The app never uploads, emails or syncs these files. Notes appear in the summary only when the user chooses to include them.

Once a file is shared, it is handled by the app, service or person that receives it, under their own policies.

3. Advertising (Google AdMob)

If Remove Ads has not been purchased, the app shows banner ads and, occasionally, a full-screen ad. Before a PDF is shared or printed, the app offers a short rewarded ad that plays only if the user chooses to watch it. Ads are provided by Google LLC through the Google Mobile Ads SDK and are requested as non-personalized. The app does not request App Tracking Transparency permission on iOS and does not access the iOS advertising identifier (IDFA) or the Android advertising ID.

To deliver, limit, measure and protect ads against fraud, Google's SDK collects the IP address (which can indicate approximate location), device and app identifiers such as the Android app set ID, ad interactions (for example, ads shown and taps) and diagnostic and performance information about the app and the SDK. This data is encrypted in transit and processed by Google under its own policies.

No medication, dose, schedule, record, note, appointment, reminder or instruction is ever included in an ad request or shared with Google for advertising.

Consent: where the law requires it (for example in the UK, the EEA and Switzerland), the app asks for advertising choices through Google's consent tool before any ad is requested. These choices can be changed at any time in Settings › Privacy & data › Advertising privacy. If consent is declined, the app may show limited or no ads, and every feature keeps working.

• Google Privacy Policy
• How Google uses information from apps that use its services

4. App settings (Google Firebase Remote Config)

The app downloads technical settings that contain no personal data, such as how often ads may appear, from Google Firebase Remote Config. To deliver them, Firebase receives a Firebase installation identifier, the app version, the platform, the device language, country and time zone, and the IP address. No health information is ever sent, and these settings never read or change health data.

5. Optional usage and diagnostics

Settings includes an optional Usage & diagnostics choice. It is off by default and independent of advertising choices. When it is turned on, the app shares generic usage events (for example, "onboarding completed") through Google Analytics for Firebase, and technical error reports containing only an error code and the code locations where the error occurred through Firebase Crashlytics. These never include medication names, doses, schedules, records, notes, appointments or any text entered in the app. Advertising features, user IDs and remarketing are disabled in Analytics.

Turning it off stops sharing and clears unsent reports where supported.

6. Purchases and ratings

Remove Ads is a one-time purchase processed by Apple (App Store) or Google (Google Play), which handle payment information under their own privacy policies. The app keeps only whether Remove Ads is active, on the device, and checks it with the store to restore it.

After the app has been used on several days, it may ask the phone to show the App Store or Google Play rating window. Ratings and reviews go directly to Apple or Google; the app does not receive them. The app keeps on the device only how many days it was opened and when it last asked.

7. What SRG Consulting does not do

SRG Consulting does not create accounts or ask for a name, email address, date of birth, diagnosis or doctor. It does not sell personal information, does not build advertising profiles from health data and does not use health information for any purpose other than showing it on the device.

8. Legal bases and rights (UK, EEA and similar laws)

SRG Consulting does not hold users' health information. For advertising data, the legal basis is consent where the law requires it and, otherwise, the legitimate interest in funding a free app with non-personalized ads. For app settings, the legal basis is the legitimate interest in operating the app. For optional usage and diagnostics, the legal basis is consent, which can be withdrawn at any time in Settings.

Requests for access, deletion or objection can be sent to srgconsulting@proton.me and are answered within one month. A complaint can also be lodged with the local data protection authority. For data processed by Google, the tools described in Google's privacy policy are also available. Google may process data in the United States and other countries under appropriate safeguards.

9. United States residents

SRG Consulting does not sell or share personal information for cross-context behavioral advertising and does not collect consumer health data on its systems: health information stays on the device. Requests under state privacy laws can be sent to srgconsulting@proton.me.

10. Children

The app is designed for adults following a prescription and is not directed to children under 16.

11. Medical disclaimer

The app records a schedule entered from a prescription. It does not create, recommend or validate a treatment and is not a medical device. It is not for emergencies. Questions about a dose, a missed dose or a treatment should go to a doctor or pharmacist.

12. Changes to this policy

Changes are published on this page with a new date and, when they are significant, announced in the app. This policy is updated before any new service that processes data is added to the app.

Contact

srgconsulting@proton.me

Questions about this policy can be directed to SRG Consulting via the contact page.