ADHDose is operated by ADHDOSE LTD, a company registered in England and Wales (company number 17146660). Our registered office is 128 City Road, London, EC1V 2NX, United Kingdom.
ADHDOSE LTD is the data controller for the personal data described in this policy. If you have any questions about this policy or how we handle your data, contact us at support@adhdose.com.
This policy covers both the ADHDose website (adhdose.com) and the ADHDose mobile app for Android and iOS. We have written it to comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Your records. The app is designed so that your records stay on your device by default. Your medication details, doses, journal entries, sleep and focus logs are stored locally on your phone. If you never sign in, your records never reach our servers and we cannot read them.
Cloud backup (optional). If you choose to sign in with Google, you can back up your history so that it survives changing or losing your phone. A copy of your records is then stored, encrypted in transit and at rest, in our database hosted in London (eu-west-2), under row-level security policies that allow only your own account to read it. Its sole purpose is restoring your data. This never happens unless you sign in and choose to back up, and you can restore the backup, sign out, or delete both the backup and your account from inside the app at any time. The lawful basis is the performance of our contract with you, and, for the health information the backup necessarily contains, your explicit consent, which creating a backup expresses and which you may withdraw by deleting it.
Usage analytics. The app collects usage analytics through Google Firebase so that we can understand how ADHDose is used and improve it. This includes which screens and features are used, and when actions such as logging a dose take place. It contains no names, no free text, no journal content, no email address, and no record of which medication or what dose you take, and it is not linked to any account you sign in with. It also includes a measure of how accurate the app's own timing predictions were for you, as a median error in minutes together with how many days it was based on, so we can tell whether the model is improving. That measure carries no medication, no dose and no dates. Analytics data is associated with a device level identifier, including the Android advertising identifier, which Google requires for this service. The lawful basis is our legitimate interest in understanding and improving the app, balanced by the safeguards above: we collect the minimum needed, in a form we do not use to identify you.
Crash reports. If the app crashes, technical information about the crash (device model, operating system version, and what the app was doing at the time) is sent to Google Firebase Crashlytics so we can find and fix the problem. Crash reports contain no health records.
Research (opt-in only). A separate research consent setting exists in the app and is off by default. Only if you turn it on do anonymised treatment patterns from your data join our research dataset. We do not use your data for research without this consent. Where research processing involves special category data, the lawful basis is your explicit consent.
You can turn the setting off at any time, and nothing further will be contributed from that point. Contributions already in the dataset remain there. They are held without your account, your name or anything you have written, and we have no way to trace them back to you or to pick them out again. If you want the data we hold about you removed, including your account and your backup, use the delete option in the app or email support@adhdose.com.
If you delete the app, that data is deleted with it, subject to any device backups you control (such as iCloud or Google backups, which are governed by Apple’s and Google’s own policies).
If you purchase ADHDose Pro, the payment is processed by Apple’s App Store or Google Play. We do not receive your payment card details. Our subscription partner, RevenueCat, processes a pseudonymous purchase identifier so that your purchase can be recognised and restored. This is necessary for the performance of our contract with you.
Launch list and email updates. If you enter your email address on the website, we use it to send you the updates the form describes, such as launch notifications. The lawful basis is your consent. You can withdraw consent at any time using the unsubscribe link in any email or by contacting us, and we will remove your address.
We are aware that signing up to an ADHD-related mailing list can feel sensitive. Your email address is stored securely, is not linked to any health information, and is never shared with third parties for their own purposes.
Analytics. The website can use Google Analytics and Microsoft Clarity to help us understand how the site is used, for example which pages are read and how visitors move around the site. These tools collect information such as pages visited, approximate location at city level, device and browser type, and interactions with the page. They only run if you accept analytics cookies on the banner shown when you first visit; until you accept, neither tool loads and neither sets a cookie. We rely on your consent as the basis for this, and you can withdraw it at any time using the Cookie settings link in the footer. We do not use this information to identify you, and we do not combine it with your email address.
Hosting. The website is served by Cloudflare, which processes IP addresses transiently as part of delivering the site securely (for example, to protect against attacks). This is a technical necessity for any website.
If you accept, the analytics tools above set cookies in your browser. You can withdraw consent at any time using the Cookie settings link in the footer, or block and delete cookies through your browser settings; the website continues to work without them.
Some of our service providers (Google, Microsoft, Cloudflare, RevenueCat) may process data outside the UK, including in the United States. Where this happens, transfers are protected by safeguards recognised under UK law, such as the UK Extension to the EU-US Data Privacy Framework or the International Data Transfer Agreement.
Under the UK GDPR you have the right to:
To exercise any of these rights, email support@adhdose.com. We will respond within one month.
If you are unhappy with how we have handled your data, you have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk or by calling 0303 123 1113. We would appreciate the chance to resolve your concern first, but you are not required to contact us before going to the ICO.
ADHDose is designed for adults managing their own prescribed ADHD medication. The app and website are not directed at children, and we do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, contact support@adhdose.com and we will delete it.
We take appropriate technical and organisational measures to protect the personal data we process, including encryption in transit and at rest, row-level access controls on backups, and minimising what we collect in the first place. The most important protection is architectural: your day-to-day records stay on your device unless you choose the encrypted backup, so the data we hold is the minimum needed to provide the services you have chosen.
If we make material changes to this policy, we will update the effective date at the top of this page and, where the change affects how we use your email address, we will tell you by email before the change takes effect. We will not treat your continued use of the website or app as consent to a new policy.
ADHDOSE LTD
128 City Road, London, EC1V 2NX, United Kingdom
Company number 17146660
support@adhdose.com