Privacy

What we store

Your account: email and, if you choose, a name to address you by. No ID documents and no card — we have nowhere to use them and do not ask.

Your treatment: medication, presentation, dose in milligrams, frequency, date of last application and how many doses you have at home.

Your tracking: weight, measurements, blood glucose, mood and symptoms, water and protein, and free-text diary entries.

Your prescription, when you attach the file.

Country and language preference, in a cookie in your browser.

Where it lives

All of it in a PostgreSQL database on a server under our control. No health data is stored on your device: the service worker that makes the app work offline carries an explicit exclusion list for the signed-in area, precisely because a device is shared with more people than an account is.

Free-text diary entries and the prescription file are encrypted with AES-256-GCM before being written. Numeric values — weight, glucose — are not, because the product needs to sum and average them; encrypting what you aggregate costs latency without adding real protection.

Who we share with

Nobody. We do not sell data, do not build advertising profiles and hand nothing to pharmacies, laboratories or insurers.

When you tap a partner pharmacy link you leave for their site. We send nothing about you in that hop — the chain only knows you came from Plenadose, and any commission does not change price ordering, which always runs from lowest monthly cost to highest.

If you sign in with Google, Google learns that you signed in to a service called Plenadose. That is inherent to social login, and it is why email and password remains available as an alternative.

Third parties acting for us

Resend, to send access codes and password reset links. It receives your email address and the message content.

Google, only if you use Google sign-in. From it we receive your email, name and profile picture.

The server the application runs on. None of them receives your health history.

Consent, and how to withdraw it

Health data is stored only with your specific consent, recorded with a date and the version of the text. You gave that consent when creating the account.

Withdrawing deletes everything, genuinely: deletion cascades from your account, and there is no list of tables to clear — a list goes stale, a cascade does not. Do it in Settings, under Withdraw consent and delete everything.

Before deleting, you can download everything as a JSON file, also in Settings.

What Plenadose does not do

It does not prescribe, does not adjust doses, does not diagnose and does not replace a consultation. Dose changes and adverse effects are a conversation with whoever treats you.

It does not use pharmacy commission as a price ordering criterion, on any screen.

Reaching us

To request access, correction, portability or deletion of your data, write to privacidade@plenadose.com.