Effective 11 August 2026
My Medication: Tracker & Alarms is a medication organiser made by CJ Designs. It records medication, reminders, doses taken, stock and repeat prescriptions — and it does all of that on your own phone. There is no account, no sign-in, and no server belonging to us that holds any of it.
The short version: nothing leaves your device unless you deliberately send it.
The app makes no network requests of any kind. On Android this is stronger than a promise — the released app does not declare internet permission, so it could not make a request even if a future version tried to.
The only ways information leaves are ones you perform by hand: sharing a report, saving a backup file, or your phone's own device backup (see Device and cloud backups below).
What you put into this app — the medications you take, when you take them, what you have been prescribed — is health information, and it is treated as the most sensitive thing the app holds. We never receive it. It is not transmitted, not analysed, not shared, and not sold, because there is nowhere for it to go: the app has no means of sending it anywhere.
The app does not connect to any pharmacy, surgery, health service or health record system, and does not read from or write to Apple Health or Google Health Connect.
| Information | Where it is kept |
|---|---|
| Your medications, schedules, doses, stock, prescriptions and settings | A database in the app's private storage on your device |
| Photographs of medication and packets, and their thumbnails | Files in the app's private storage on your device |
| The doctor and pharmacy details you choose to record | The same database. Never transmitted, and never written to a log |
| A record of actions you took in the app | The same database |
| PDF and CSV reports you generate | Temporary storage, deleted once sharing finishes or is cancelled |
| Backup files you create | Wherever you chose to save them |
The database relies on your phone's own protection — iOS Data Protection and Android file-based encryption, both on by default on modern devices — together with the app sandbox that stops other apps reading it. Encryption is applied by the app where data actually leaves that sandbox, which is the backup file.
A PDF or CSV report of your history is an ordinary, unprotected file. That is what makes it useful — you can hand it to a pharmacist or a doctor — and it is also what makes it sensitive, so treat it like any other document containing your medical information.
Nothing is exported without showing you the whole contents first and asking you to confirm. The temporary file the share sheet reads from is deleted when sharing finishes, is cancelled, or fails, and again at the next app start if something was left behind. A copy you deliberately saved is yours, and the app never touches it.
A backup is a single encrypted file: AES-256-GCM, with the key derived from your passphrase using PBKDF2-HMAC-SHA256 at 600,000 iterations.
Nobody holds a copy of your passphrase — not the app, not CJ Designs, not Apple or Google. There is no escrow, no recovery code and no reset. A backup whose passphrase has been forgotten cannot be opened by anyone, permanently. The app tells you this before your first backup.
Where the file goes is your choice, and the destination's privacy is then the destination's: a backup saved to iCloud Drive or Google Drive sits on that service, still encrypted, until you remove it.
This is separate from the backups you make yourself, and it is the one place where your medication information can leave your phone without you doing anything.
On Android: automatic cloud backup is switched off, and every part of the app's data is excluded from cloud backup and from device-to-device transfer. Your medication database does not go to Google Drive.
On iPhone and iPad: the app's data is included in your iCloud Backup and in encrypted local backups, along with the rest of your phone. If you have iCloud Backup switched on, your medication information is part of it, protected by Apple under Apple's terms rather than by anything this app does.
We would rather state that plainly than describe one platform's behaviour as though it applied to both. If you would prefer your medication information not to be in your iCloud Backup, you can turn iCloud Backup off for My Medication in your iPhone's Settings, under your name → iCloud.
A reminder can appear on a locked screen, where people nearby may see it. You choose how much it says, in Settings → App lock → Reminder notifications:
| Setting | What appears on the lock screen |
|---|---|
| Show the medication name | The name of the medication, and the full set of buttons |
| Say a medication is due, but not which (default) | That a medication is due, and nothing identifying it |
| Say as little as possible | Neither the name nor that it concerns medication at all |
At no setting does a notification include a medical condition, a note you wrote, a doctor or pharmacy, a stock quantity, or prescription history.
No setting can hide the app's own name, which both iOS and Android print beside every notification an app sends. Someone glancing at your lock screen can therefore tell that you use a medication app, whichever level you choose.
Three, all optional. Refusing any of them leaves the rest of the app working.
| Permission | Asked when | If you refuse |
|---|---|---|
| Camera | You press "Take a photograph" | Photographs come from your library instead |
| Notifications | You set up your first reminder | The app works; nothing reminds you |
| Biometrics | You turn on the app lock | No lock, or your device passcode instead |
Choosing a photograph from your library needs no permission at all on either platform: the app uses your operating system's own picker, which hands over the one image you chose and gives the app no access to the rest of your library.
You can require Face ID, Touch ID or a fingerprint — with your device passcode as a fallback — before the app will open, and you can block screenshots and screen recording of the app. Both are in Settings → App lock. Turning the app lock on or off does not affect backups you have already made; those are protected by their own passphrase.
Your information is kept for as long as you keep the app. Nothing expires, and nothing is deleted on our behalf, because we have no copy to delete.
Corrections work by adding to the record rather than overwriting it, so that "did I take it?" always has an answer that cannot be silently rewritten. That history lives on your device only, and goes when the app does.
Data protection law gives you rights to see, correct, export and delete the personal information an organisation holds about you. In this app all four are things you already do directly: the information is on your device, you can edit any of it, you can export it as a PDF or CSV report or as a backup file, and you can delete it. We hold nothing about you, so there is nothing for us to send you or erase on request.
My Medication is not directed at children under 13, and we do not knowingly collect data from them. A parent or carer managing a child's medication is using the app themselves, on their own device, and nothing they record is sent to us.
If this policy changes, the updated version will be posted at this address with a new effective date.
CJ Designs — support@cjdesigns.app