FlosForge Meds — privacy policy

FlosForge Meds has no internet permission and no network code, so your medications, doses and history cannot leave the phone through the app. They are kept in an encrypted database, excluded from cloud backups and device transfers. There is no account, no analytics and no advertising.

What FlosForge Meds collects about you

Nothing. There is no account, no telemetry, no analytics, no crash reporting and no identifier of any kind. The app has no server of its own to send anything to, and it does not phone home to check for updates — Google Play delivers new versions.

What it stores, and where

An encrypted database on the phone: Your medications, schedules, dose history, stock counts and day notes, in a database encrypted with SQLCipher. Its random key is protected by a key held in the Android Keystore.
Your settings: Snooze length, lateness threshold, appearance and lock options. An app-lock PIN is stored only as a salted hash.
A report you chose to share: When you share a PDF, it is written to the app’s private cache so the share sheet can hand it over, and the previous one is deleted first.
Left out of backups: Every part of the app’s storage is excluded from Google’s cloud backup and from device-to-device transfer.

Everything it can connect to

The app has no internet permission. These are the only things outside it that it ever reaches, and each one is something you do.

Reports you share or save: A PDF or CSV goes only where you send it — the app you pick in the share sheet, or the folder you pick in the save dialog.
Links you tap: The developer link opens flosforge.eu in your browser. The app itself opens no connection.

What never leaves your phone

No medication name, dose or history is transmitted by the app.
No analytics, no crash reporting, no advertising, no account.
No third-party SDKs. The internet permission is stripped from the build even if a library asks for it.
Lock-screen notifications say only that a dose is due, never which medication.

Safeguards

Encrypted at rest: The database is encrypted with a key that never leaves the Android Keystore.
App lock: A 4 to 8 digit PIN with fingerprint or face unlock, a lockout that grows with repeated wrong guesses, and screenshots and the recent-apps preview blocked while it is on.
No silent deletion: Deleting a medication warns that its whole history goes with it, and a forgotten PIN can only be reset by erasing the app’s data — there is no hidden copy to recover.

Your rights, and who to ask

Because the app holds nothing about you, there is nothing for the controller to access, correct or erase on your behalf: everything it knows is in files on your own phone, under your own control. Uninstalling the app deletes its database and settings from the phone, and because they are excluded from backups there is no other copy. Reports you saved or shared are yours to delete. For anything else, write to hello@flosforge.eu. The site-wide privacy policy covers this website, your rights under the GDPR, and the supervisory authority you can complain to.

Changes

This statement is checked against each release. If a version changes what the app stores or what it can connect to, the version and date at the top change with it.