Privacy policy

Last updated 21 October 2026

WhenDose is a free Android app for New Zealand parents to record the medicines they give their children. It's made by Fraser Adams, in New Zealand. If you have a question about your information, email support@whendose.app.

The short version

WhenDose has no accounts, no ads and no analytics. Your records stay on your phone. If you link a second phone, your records are locked on your phone before they leave it, and only your linked phones can unlock them.

What stays on your phone

Everything you enter stays on your phone: your children's names, dates of birth and weights, the medicines and doses you record, temperatures and symptoms, label photos and reminders. WhenDose doesn't send any of it anywhere unless you link a second phone.

Android's own backup is turned off for WhenDose, so your records aren't copied to Google Drive. A backup file is made only when you choose to save one, and it goes where you choose.

If you link a second phone

Before your records leave your phone, they are encrypted with a family key (AES-256-GCM). The key is made on your phone and passed to the other phone in the QR code. It is never sent to us or to anyone else.

Our sync server, which runs on Cloudflare, stores the encrypted records and passes them to your other phone. It can't read them. To do its job, it keeps:

• a random ID for your family, and a random ID for each linked phone
• each linked phone's Firebase messaging token (see below)
• the times records were sent, and their size.

Like any web server, it sees your phone's internet (IP) address with each request. WhenDose doesn't keep it or use it for anything.

Google Firebase

When phones are linked, WhenDose uses Google's Firebase Cloud Messaging to let the other phone know that something has changed, so its reminders stay right even when the app is closed. The message itself is encrypted with your family key. Firebase gives each phone an ID and a messaging token, and collects the app's version number. WhenDose turns Firebase on only when you link a phone.

Overseas

Cloudflare and Google are overseas companies, and the information above may be stored outside New Zealand. Your records themselves are encrypted, and neither company can read them.

How long the server keeps it

At the moment, the sync server keeps a family's encrypted records until they are removed. Before WhenDose is released to the public, we're adding two things: when you unlink a phone, its data will be deleted from the server, and if no phone in a family has been active for 90 days, the family's data will be deleted. We'll update this policy when that's done.

Report a problem

"Report a problem" opens your own email app, with your phone's make and model, its Android version and WhenDose's version filled in. If WhenDose has stopped unexpectedly, it also adds what kind of error it was and where in the app it happened, but never its details. You see everything before you send it. No health information is included unless you add it yourself.

Children

WhenDose is for parents and caregivers aged 18 and over. It holds information about children because their parents enter it.

Your rights

You can see, change or delete everything in the app. Settings → Delete all data removes everything from your phone and unlinks it. Under the Privacy Act 2020, you can also ask us about any information we hold about you, or ask us to correct it, by emailing support@whendose.app. If you're not happy with our answer, you can complain to the Privacy Commissioner.

Security

Records are encrypted on your phone before they're sent, and they travel over HTTPS. If a privacy breach affects your information, we'll tell you, and the Privacy Commissioner, as the law requires.

This website

whendose.app has no cookies, no analytics and no tracking. It's hosted on Cloudflare, which keeps short-lived logs of requests to keep the site running and secure. The video on the home page comes from YouTube, but only once you press play: until then nothing is loaded from YouTube. After that, YouTube's own privacy policy applies to the video. If you email us, we use your email address only to reply to you.

Changes

If this policy changes, we'll update this page and the date at the top.