Privacy Policy

Medication names, doses, schedules, adherence history, routines, and optional feeling tags live on your iPhone (SwiftData). We do not run a pharmacy, EMR, or cloud med vault. We cannot read your dose log from a server.

Optional sign-in stores a small profile (not your med list). The website may keep waitlist email and standard analytics. Purchases go through Apple.

On-device data.Medications, supplements, dose times, escalation settings, dose events (taken / missed / skipped), routine blocks, refill supply counts, optional anxiety-tool preferences, and optional post-dose tags are stored locally with Apple's SwiftData. Delete the app to remove that data from the device (and from any device backups you control).

Alarms. Scheduling uses Apple AlarmKit (and related system permission surfaces). Apple processes those system APIs on the device. We do not receive a feed of your alarm times on our servers.

Optional account. You can use the core product without an account. If you choose Sign in with Apple or Google, we create a Firebase Authentication user and may store a profile document with: sign-in provider, Firebase user id, display name if provided, email if provided, app identifier, and timestamps for create / last sign-in. That profile is used to operate the account and link subscription identity. It does not include medication names or adherence rows.

Purchases.Subscriptions and lifetime unlocks are sold through Apple In-App Purchase. We use RevenueCat to read entitlement state (for example whether Pro is active). We never receive your full payment card details. Apple's and RevenueCat's privacy policies also apply to those processors.

Export. Adherence export (CSV / text) is user-initiated and stays under your control when you share it. We do not auto-upload exports.

No AI content pipeline. The app does not send your med list or dose history to a generative AI provider.

Waitlist. If you join the app waitlist, we store your email address, a short source label, and a timestamp. Storage is in our database (Neon) and/or private Vercel Blob objects, depending on environment. We use that only to contact you about TilTaken (launch, waitlist perks, product updates).

Analytics. The site loads Google Analytics (measurement id in page scripts). Google may receive technical data such as page views, approximate location, device and browser info, and a client identifier. We use this to understand which articles get read. We do not sell personal information.

Hosting. The site is hosted on Vercel. Standard request logs and edge infrastructure may process IP addresses and request metadata as part of delivery and security.

• Sell your personal information to data brokers.
• Run third-party advertising SDKs inside the iOS app for cross-app tracking.
• Use your medication adherence history for ads or resale. We do not have that history on our servers.
• Give medical advice. TilTaken is not a medical device and does not diagnose, treat, or manage disease on a clinician's behalf.

If you are in the EEA/UK, we process waitlist and account data to perform a contract you request (waitlist / account), and for legitimate interests in running a small product business and understanding site traffic, balanced against your rights. You may object or request deletion as below.

California residents may request know / delete rights for personal information we hold (waitlist email, account profile). We do not "sell" or "share" personal information as those terms are commonly used in the CCPA for ad networks. Contact hey@tiltaken.com.

On-device app data lasts until you delete it or uninstall the app. Waitlist emails are kept until you ask us to remove them or we shut down the waitlist. Account profile rows are kept while the account exists; we delete the server profile when you delete the account in the app (when available) or when you email us to delete it.

TilTaken is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have, email hey@tiltaken.com.

• Skip optional sign-in. Meds and alarms work on-device without an account.
• Uninstall the app to clear local data (and clear device backups if you want copies gone there too).
• Request waitlist or account deletion: email hey@tiltaken.com from the address you used, subject line "Delete my data".
• Limit site analytics with browser controls, OS tracking settings, or Google's tools for Analytics.

• Apple (App Store, Sign in with Apple, AlarmKit, device OS)
• Google (optional Google Sign-In; site Google Analytics)
• Firebase / Google Cloud (optional Auth + profile Firestore)
• RevenueCat (subscription entitlement plumbing)
• Vercel (website hosting; optional private Blob waitlist backup)
• Neon (waitlist database, when configured)

Each has its own privacy policy for processing they perform as controllers or processors.

We will update this page when the product changes. Material changes get a new effective date at the top. Continued use of the site or app after that date means you've seen the update.

Privacy questions and deletion requests: hey@tiltaken.com.

Product methodology (not legal): How we research. Terms: Terms of Use.