Privacy Policy
Protocol for iOS · Last updated 12 August 2026
Protocol does not collect your data. There is no account, no login, no analytics and no server that holds anything you enter. Everything you record stays in storage on your own iPhone.
What stays on your device
All of it. Your compounds, doses, schedules, dose history, injection sites, notes, lab panels, stacks and settings are written to your iPhone's local app storage and never transmitted to us or to anyone else. We cannot read any of it. If you delete the app, that data is deleted with it — we hold no copy and cannot restore it.
The one network call
To verify a purchase or free trial, the app contacts RevenueCat, our payments infrastructure provider. RevenueCat receives an anonymous identifier and your subscription status. It never receives your health data, your protocol, your lab results, your name or your email address. Apple processes the payment itself; we never see your payment details. See RevenueCat's privacy policy.
What we do not do
- No analytics or telemetry of any kind
- No advertising, ad identifiers or third-party trackers
- No cross-app or cross-site tracking; the App Tracking Transparency prompt is never shown because there is nothing to ask for
- No selling or sharing of data — there is nothing to sell
- No cloud sync or backup operated by us
Notifications
Dose reminders are scheduled locally by iOS on your device. No push notifications are sent from any server, and no reminder content leaves your iPhone.
Things you choose to send
Exporting a PDF, sharing a stack code or exporting JSON hands the file to iOS and you decide where it goes. Once you share it, it is subject to the privacy policy of whatever app or service you sent it to. We are not involved in that transfer and never receive a copy.
Your rights
Because we hold no personal data, there is nothing for us to disclose, correct, export or delete on your behalf. You control your data directly: Settings → Export as JSON to take it with you, Settings → Erase all data to destroy it, or delete the app.
Children
Protocol is rated 16+ and is not intended for children. We do not knowingly collect information from children — or, in fact, from anyone.
Changes
If this policy changes materially, the updated date above changes and the new version is published here before the change takes effect.