Last updated: August 17, 2026

MedVault ("the app", "we", "us") is a privacy‑first medication tracker. This policy explains what data the app handles and how.

The short version: Your health record lives on your device. We don't run analytics or ads, and we don't sell or share your data. MedVault does now have a server, but it is used only by features you switch on yourself — an optional account, caregiver sharing, the AI assistant, encrypted cloud backup and the push alerts that caregiver sharing needs. Sections 3 to 8 say exactly what each one sends, and Section 12 explains the two different ways to delete.

If you have any questions, email [email protected].

1. Who we are

MedVault is published by Anther Systems. Contact: [email protected].

2. What data the app stores

MedVault lets you record information such as:

• Profile: name, age, weight, biological sex (all optional).
• Medications: names, dosages, forms, schedules, what they treat, and supply/refill counts.
• Dose history: which doses you took, skipped, or missed, and when.
• Journal entries: mood, energy, sleep, weight, side effects, symptom ratings, and notes.
• Settings: reminder, appearance and feature preferences.

All of this is stored locally on your device in Apple's on‑device database. MedVault has no required account, and apart from the optional features described in Sections 3 to 9, your information is never transmitted off your device.

3. Your MedVault account (optional)

You can use MedVault entirely without an account, and every core feature works signed out — medications, reminders, dose logging, the journal, trends, Apple Health, and export.

If you choose Sign in with Apple, two separate things happen:

• On your device: the Apple‑provided user identifier is stored in the device Keychain, and the name and email Apple shares with us (which may be Apple's private relay address) are stored in the app's local database to personalize the app and your doctor report.
• On our server: an account is created that holds an account identifier and the date it was created — and nothing else. Your name, your email, your Apple identifier and your health record are not sent to our server by signing in. Our server never learns who you are; it only knows that an account exists, so that the features below have something to attach to.