Privacy, in plain language.

Effective date: September 1, 2026

This Privacy Policy explains how NaviStack LLC ("Amidra," "we," "us," or "our") handles information when you use the Amidra app, website, and related services.

Information you provide

• Account details, such as your email address, name, profile image, and sign-in provider.
• Information you choose to record, such as protocols, schedules, dose logs, inventory, notes, symptoms, and weight entries.
• Preferences, support messages, and any marketing-email consent you choose to provide.

Information collected automatically

We collect limited app and device information needed to operate, secure, measure, and improve Amidra. This can include an app-generated identifier, app version, device and operating-system details, locale, time zone, authentication sessions, subscription status, purchase events, and coarse product actions such as onboarding completion or feature use.

The website uses Google Analytics, and certain quiz flows use PostHog, to collect limited page and feature interactions, browser and device information, and approximate region. We do not use an email address submitted to the quiz or newsletter as an analytics identifier or person property.

Amidra does not send medication or protocol names, dose amounts, symptoms, weight values, injection sites, free-form notes, or other health-entry contents to PostHog. Anonymous product analytics are off by default and can be enabled or disabled in Settings. When enabled, PostHog uses a random app-generated identifier that is not linked to your Amidra account; disabling the setting resets that identifier. We do not use AppsFlyer, collect advertising identifiers, or track you across other companies' apps and websites.

Protocol Match quiz

If you use the Protocol Match quiz on our website, we collect the answers you select (such as your goals, experience level, and tracking preferences), the educational profile generated from them, and — if you choose to submit it — the first name and email address you provide. We also record basic marketing-attribution information passed in the page link (for example, the campaign or ad source and coarse country), your browser type, and consent choices. We use this to build and email your educational profile through Loops, to send occasional product updates only where you separately check the optional marketing box, and to measure the quiz using anonymous analytics. Quiz answers are not a medical record and the quiz does not prescribe a compound, dose, or schedule. You can unsubscribe from emails at any time, and you can contact us to access or delete your quiz submission.

The Draw newsletter

If you request The Draw, we record the email address, the signup page and campaign attribution, coarse country, browser type, and the server time of the request. Loops sends a confirmation message, and we do not treat the address as subscribed until the confirmation link is used. Newsletter preference is independent from creating or deleting an Amidra account. You can use the unsubscribe link or preference center in any marketing email at any time.

How we use information

• Provide accounts, secure sign-in, cloud sync, backup, and multi-device access.
• Operate subscriptions, restore purchases, and provide paid features.
• Maintain security, prevent abuse, diagnose problems, and improve product reliability.
• Understand aggregate product usage and improve onboarding and subscription flows.
• Send service communications and, only with separate consent, marketing communications.

Storage and service providers

Amidra is local-first: your records remain available on your device. Cloud sync is optional and starts only after you choose to enable it; when enabled, your records are synchronized to your private cloud account. We use Clerk for authentication, Supabase for database and optional cloud services, Loops for transactional and consented marketing email, Cloudflare for website delivery and abuse prevention, RevenueCat for subscription management, Google Analytics for website measurement, PostHog for limited website and optional in-app product analytics, and Apple or Google when you choose their sign-in or store services. We require these providers to protect information consistently with this policy and applicable data-protection requirements.

Sharing

We do not sell your personal information. We disclose information to service providers only as needed to operate Amidra, to comply with law, protect rights and safety, or complete a business transaction subject to appropriate safeguards. Authentication does not automatically enroll you in marketing emails.

Retention, export, and deletion

We retain account and app data while your account is active and as reasonably necessary for the purposes above, legal obligations, dispute resolution, and security. The app lets you export your records and delete your account. Account deletion removes your synced account data and linked quiz submissions, subject to limited backups, security records, and transaction records that Apple, RevenueCat, or we must retain for legal, fraud-prevention, or accounting purposes. It does not erase a separate newsletter preference or provider suppression record; those are retained so that a prior unsubscribe is respected. Deleting an Amidra account does not cancel an Apple subscription. You can unsubscribe separately, manage the subscription through Apple, or contact us for assistance.

Security and international processing

We use access controls, encrypted transport, account-scoped database rules, and other reasonable safeguards. No system is completely secure. Our providers may process information in countries other than your own, subject to applicable legal safeguards.

Children

Amidra is not directed to children under 13, or the minimum age required in their jurisdiction, and we do not knowingly collect their personal information.

Your choices and rights

Depending on where you live, you may have rights to access, correct, export, delete, restrict, or object to processing of your personal information. You may disable optional in-app product analytics in Settings and withdraw optional marketing consent at any time. Contact us to exercise a right; we may need to verify your identity.

Not medical advice

Amidra is a tracking and education tool. It never recommends a dose, compound, or schedule — always consult a qualified healthcare professional. Educational only, not medical advice.

Changes and contact

We may update this policy as Amidra evolves. We will post the revised policy here and update the effective date. Questions or privacy requests can be sent to support@amidra.app.