Privacy notice

Effective 4 October 2026

Who we are

Ammel is made by Yaroslav Boiko, an independent developer, who is the controller of the little personal data described here. Write to [email protected] about anything in this notice.

Your health record stays on your phone

Everything you enter in Ammel is stored in the app's own storage on your phone: your medications and their schedules, the doses you take, skip or snooze, your symptoms and ratings, notes, your supply counts, your name and picture, and your settings. Ammel has no server and no account, so we cannot see, recover or delete any of it.

• Backups. Like other app data, your record may be included in the backups your phone makes: to iCloud or a computer on an iPhone, to your Google account on Android, and when you move to a new phone. Those backups are Apple's or Google's, under their terms and your settings.
• Reminders. Your phone's system schedules and shows reminders; no server sends them. By default, reminders and the Lock Screen widget don't name your medications: a reminder says “Time for your medication”. If you turn off Hide medication names in Settings, anyone who can see your lock screen can read them.
• Files you export. A report or CSV you make stays in Your files in the app until you delete it. Once you share a file, to your doctor, an email or a cloud drive, the app or person you share it with controls that copy.
• Delete all data in Settings erases every record, setting, reminder and file Ammel made, and returns the app to its first run. Deleting the app removes Ammel's data from the phone too. Neither reaches copies in backups your phone has already made, which stay until those backups are replaced, or analytics events already sent, which stay with PostHog until you ask us to delete them.

Product analytics, only if you allow it

Before you start, Ammel asks whether it may send usage events, which tell us whether people manage to add a medication and keep logging doses. Nothing is sent before you answer, and nothing at all if you choose Don't Allow.

If you choose Allow

• Ammel creates a random Analytics ID on your phone. It is not derived from your name, your Apple or Google account, your device or any advertising identifier. It moves to a new phone if you restore one from a backup.
• When you do one of these things, Ammel sends one event with that ID: open the app, start or finish onboarding, add a medication, log, skip, snooze or correct a dose, save a symptom entry, export, turn on reminders, turn on App lock.
• Each event carries only the event's name, the Analytics ID, the app version, the platform (iOS or Android), the kind of build, the app language, and a few fixed labels for the event, such as whether a dose was scheduled or as-needed.
• An event never contains a medication or symptom name or identifier, a dose amount or dose time, a note, a count, a rating, a report, your name or your picture.
• Events go to PostHog Cloud EU (PostHog Inc., processing in the European Union) as our processor. Like any server, PostHog sees the IP address each event comes from; we have switched off location lookup from it, and we keep no profile beyond the Analytics ID. PostHog keeps events for up to one year.
• Each event is attempted once. If you are offline, it is dropped, not saved for later.

Changing your mind

Turn analytics off in Settings › Product analytics, and Ammel stops sending at once. To have the events already sent deleted, use Request deletion on the same screen before you delete the app or its data: it opens an email to us containing only your Analytics ID, which is the only way we can find your events.

Because these events show that you use a medication tracker, we treat them as health-related and send them only with your consent. You can withdraw it at any time; withdrawing doesn't affect events already sent.

App updates from Expo

So that fixes reach you without waiting for a new App Store or Google Play version, Ammel checks for updates when it opens and downloads one when there is one. This happens whether or not you allow analytics. The service is Expo (650 Industries, Inc.), which may process these requests outside the European Union.

• A check sends ordinary network information, including your IP address, and technical details of the app: the platform, the version and channel, the update it runs, and a random installation identifier that Expo's update library keeps on your phone. That identifier is not the Analytics ID.
• If the app crashed while starting, the next check may include a short technical description of that error so the faulty update can be withdrawn.
• Ammel does not send Expo your medications, symptoms, notes or any other part of your record.

The legal basis is our legitimate interest in keeping the app working and secure.

Apple and Google

You download Ammel from the App Store or Google Play, and Apple or Google handles that under its own privacy policy. If you have chosen to share analytics with app developers in iOS Settings, Apple may give us crash reports and aggregated usage figures. On Android, Google Play may give us the same from phones set to share usage and diagnostics. These come from Apple or Google, not from Ammel.

Email

If you write to us, we receive your address and what you write, use it to answer, and keep it no longer than needed. If you ask to be told when Ammel is out, we use your address for that one email and then delete it. Please do not send us health information we did not ask for.

This website

ammel.app sets no cookies and runs no analytics. It is served by Cloudflare, which processes the ordinary information of each request, such as the IP address, to deliver and protect the site.

Your rights

Depending on where you live, including under the EU and UK GDPR, you may have the right to access, correct, delete or receive a copy of personal data about you, to object to or restrict its processing, and to withdraw consent. Most of your data is on your phone, where you can see, change and delete it yourself. For analytics events, send us your Analytics ID through Request deletion. You can also complain to your data protection authority.

Children

Ammel is not directed at children under 16, and we do not knowingly collect their data.

Changes

If what Ammel sends changes, we update this notice first and change the date at the top. A change that needs your consent is asked for in the app.