Home

Privacy Policy

Last updated: November 6, 2026

The short version

Your medication logs, check-ins, and notes are stored on your own device — in your browser's local storage. If you sign in, a copy also syncs to your own account on our servers so your other devices match. We don't sell them.

Your health data lives on your device

Titrate is a local-first app. Everything you log — doses, timed check-ins, side-effects, sleep, mood, and notes — is saved in your browser's local storage on the device you're using. No account is required. Signing in is optional, and it adds a server-side copy of your entries in your own account.

  • No upload by default: your entries never leave your device unless you share a report or ask for an AI rewrite of your review prep.
  • Works offline: the app is a progressive web app; logging works without a network connection.
  • You hold the delete key:clearing your browser's site data for titrate.day erases everything, instantly and completely.

Reports you choose to share

When you generate a prescriber report, you decide how it travels:

  • Default (offline) link:the report data is encoded in the link's URL fragment (the part after #). Fragments are never sent to our servers — the data goes only to whoever you send the link to. These links can't be revoked, so share them only with people you trust.
  • Signed-in share links: if you create an optional account, you can generate server-backed share links (stored in Supabase) so you can manage or revoke them later. Only the report summary you chose to share is stored — never your full log.

Anyone holding a report link can view that report. Treat links like the document itself.

The optional AI rewrite

The report screen has a “Before your review” card with a short summary and a few questions to bring to your prescriber. Your device writes it from your logs, and nothing is sent to make it.

If you tap “Rewrite with AI”, we first show you the exact data that would be sent, and nothing goes anywhere until you confirm. What's sent is a small set of numbers: which medication from our list, your current dose, how many days and check-ins you logged, average focus and mood ratings by time of day, how often you noted each side effect, and the before and after averages around a dose change. Your notes, brand or pharmacy names, dates and account details are never part of it.

Those numbers go through our server to Vercel AI Gateway, which passes them to an OpenAI model to reword the text. We don't store the request or the answer. Vercel and OpenAI handle it under their own terms as our processors. If the rewrite fails or says anything about changing a dose, you keep the version your device wrote.

What we do receive

  • Anonymous product analytics (PostHog, and Google Analytics 4 with IP anonymization when enabled): pages visited and feature usage, so we know what to improve. These events contain no log contents — no doses, no check-in answers, no notes.
  • Your email address, only if you type it into a waitlist or contact form. Used solely to reply or send the product updates you asked for. Unsubscribe anytime by replying “stop”.
  • Feedback you send through the on-page feedback widget: the message you write, the page you were on, and basic device metadata.
  • Optional account details (email via Supabase Auth) if you choose to sign in for revocable share links.

What we never do

  • Sell or rent your personal data to anyone.
  • Build advertising profiles or run third-party ad trackers.
  • Store your medication log on our servers.
  • Share your information with data brokers.

Your controls

  • Export: your data is yours — generate a report or copy your entries at any time from within the app.
  • Delete on-device data:use your browser's “clear site data” for titrate.day. That removes your entire log permanently.
  • Delete server-side data (waitlist email, feedback messages, account, share tokens): contact us via the contact pageand we'll remove it.

Storage, retention & security

On-device data is protected by your device's own security (OS sandbox, device lock). Server-side data is limited to the items above, held by our processors (Supabase, PostHog, Google Analytics, Vercel, and OpenAI for the optional AI rewrite) under their respective security programs, and retained only while it serves the purpose you gave it for.

Children

Titrate is designed for adults managing their own ADHD medication titration with a prescriber. It is not directed at children under 16, and we do not knowingly collect personal information from children.

Changes to this policy

If we change how data is handled, we'll update this page and revise the date above. Significant changes will be called out on the site.

Contact

Questions, corrections, or deletion requests: use the contact page. For anything medical, talk to your prescriber — we can't give medical advice.