Privacy Policy
Last updated September 25, 2026
The short version. No ads. No data games. Labels are read on your iPhone and never uploaded. Only the care circle you invite can see a person's medications. Delete your account and everything is hidden immediately and permanently deleted within 30 days.
This policy explains what the peaflow iPhone app and peaflow.com (together, "peaflow", "we", "us") collect, why, and what control you have. If you live in Washington, Nevada, Connecticut or another state with a consumer health data law, also read our Consumer Health Data Privacy Policy.
What we collect
- Account details: your name and email address, or the private relay address Apple provides if you use Sign in with Apple.
- Care information you enter: the people you care for (first name), their medications, strengths, schedules, dose confirmations, refill details and notes.
- Care circle: who you invite, their role (member or dependent) and invite codes.
- Device details: a push notification token so reminders and alerts can reach your phone, your time zone, and basic app and device versions.
- Subscription status: whether you have Plus. Apple handles payment; we never see your card.
- Product analytics and crash reports: which screens and features are used and technical error details. These never contain medication names.
Medication labels and photos
When you scan a bottle, the label is read on your iPhone with on-device text recognition (OCR). The photo is never uploaded to us or anyone else. Only the text you review and save becomes part of the medication record.
If you choose to keep a photo of a label with a medication, that photo is stored privately in your account's storage and is visible only to your care circle. You can remove it at any time.
How your records are stored and who can see them
- Medication records sync over encrypted connections (TLS) to our database provider, Supabase, hosted in the United States (AWS us-east-1).
- Every table is protected by row-level security: the database itself only returns a person's records to members of that person's care circle.
- Only the people in a person's care circle — the ones invited to it — can see that person's medications and dose history. peaflow staff do not browse your records; access for support happens only when you ask us to help and only as needed.
How we use information
- To run the app: build schedules, send reminders, record confirmations and notify your circle when a dose isn't confirmed.
- To make the doctor PDF you request.
- To manage your subscription.
- To fix bugs and understand which features help, using analytics that never contain medication names.
- To answer you when you contact support.
What we never do
- No ads, in the app or on this site.
- We do not sell or rent your data, and we do not share it for advertising.
- No tracking across other companies' apps or websites. peaflow does not use the advertising identifier.
- We never put medication names in analytics.
Service providers (subprocessors)
We use a small set of providers to run peaflow. Each is bound by a contract to use data only to provide their service to us.
| Provider | What they do | Data involved |
|---|---|---|
| Supabase | Database, sign-in and private file storage (US, us-east-1) | Account, care and circle records; optional label photos you keep |
| RevenueCat | Subscription status from the App Store | An anonymous app user ID and purchase status |
| Expo | Delivering push notifications and app updates | Push token and notification text |
| PostHog | Product analytics | Feature usage events, with no medication names |
| Sentry | Crash and error reports | Technical error details, with personal data scrubbed |
| Cloudflare | Hosting peaflow.com, bot protection on forms (Turnstile) and cookieless web analytics | IP address and request details; what you type into our web forms |
Apple processes payments and delivers the app under its own privacy policy.
Keeping and deleting data
You can delete your account from the app's settings at any time. Everything is hidden immediately and permanently deleted from our systems within 30 days. Removing a person you care for, or a medication, works the same way.
Your choices and rights
- See and edit your records in the app at any time.
- Export a copy (the doctor PDF), or email us for a full copy of your data.
- Delete your account in the app, or ask us to do it.
- Turn off notifications in iOS Settings, and leave a care circle whenever you like.
Depending on where you live (for example California, the EU or the UK), you may have additional rights to access, correct, delete or port your data and to object to processing. Email us and we'll respond within the time the law requires. We won't treat you differently for using these rights.
Children
peaflow is for adults. It is not directed to children under 13 and we do not knowingly collect their information.
This website
peaflow.com sets no advertising or tracking cookies. When the waitlist or contact form is used, we receive what you type. Cloudflare Web Analytics, if enabled, counts visits without cookies.
Changes
If we make a material change, we'll tell you in the app or by email before it takes effect, and update the date above.
Contact
Questions or requests: support@peaflow.com.