Legal
Privacy Policy
SiteCycle: Injection Tracker · Effective August 1, 2026
The short version. SiteCycle: Injection Tracker does not collect your information. There is no account, no server, and no analytics or advertising software in the app.
Everything you enter stays in storage on your own device unless you deliberately export or share it yourself.
01Who this policy covers
This policy applies to the SiteCycle: Injection Tracker mobile application published by Sage River Strategies LLC ("we", "us"). It does not cover any other app, website, or service.
02Information we collect
None. We do not operate a server that receives your data, and the app contains no analytics, advertising, crash-reporting, or tracking software. We cannot see your records, we do not receive them, and we have no ability to retrieve them.
We also do not collect an email address, a name, or any account identifier, because the app has no sign-up or sign-in of any kind.
03Information the app stores on your device
The app stores the following in a database inside its own private storage area on your device:
- Profile details you enter: name or label, date of birth, sex, and an optional profile photo
- Medication details you enter: the medication type you select, the dose you enter, unit, route, and schedule
- Injection records: site, date, time, dose, notes, and skipped days
- Growth measurements you enter: height and weight, and values calculated from them
- App settings: units, theme, reminder time, and which injection sites you have enabled
This information is yours. It stays on the device. It is not transmitted to us or to anyone else by the app.
04Profile photos, camera, and photo library
If you add a profile photo, the app asks your device for permission to open the camera or your photo library. The image you pick is copied into the app's own storage on the device. The app does not read, index, or upload any other photo, and it does not access your photo library for any other purpose.
05PIN and biometric app lock
If you turn on the app lock, your PIN is not stored. It is combined with a random value and kept only as a cryptographic hash in your platform's secure credential store, the iOS Keychain or the Android Keystore. Biometric checks are performed by the operating system; the app is told only whether the check passed. We never receive your PIN or any biometric data, and neither does the app itself in any recoverable form.
06Notifications
If you turn on reminders, the app schedules a local notification on your device at the time you choose. Local notifications are generated on the device by the app itself. No push server is involved and no notification content leaves your device.
Notification text is kept general and does not name your medication, so that a notification appearing on a locked screen does not disclose your treatment to anyone nearby.
07Backups, exports, and PDF summaries
The app can create two kinds of files, and only when you ask it to: a backup file containing your records, and a PDF summary of a date range intended for an appointment.
When you create one, your device's standard share sheet opens and you choose where the file goes: email, a messaging app, a cloud drive, a printer, or local storage. Once you send a file somewhere, this policy no longer governs it. The privacy policy and security practices of whatever service you chose apply instead.
Please consider this carefully with health information. Email and consumer cloud storage are convenient but are generally not designed for sensitive medical records.
08We do not share or sell anything
We do not sell, rent, share, or disclose your information, because we never receive it. There are no third-party SDKs in the app that could receive it either. No advertising networks, no analytics providers, no data brokers.
If we were ever compelled by law to produce user data, we would have nothing to produce.
09Security, stated honestly
Because the app transmits nothing, there is no network traffic to intercept and no server of ours that could be breached.
On the device, your records live in the app's private storage area, which the operating system keeps separate from other apps. If your device has a passcode or screen lock enabled, that storage is also covered by the device's own encryption while the device is locked.
The app's database is not separately encrypted with its own key. Anyone who can unlock your device and open the app, or who can extract an unencrypted backup of your device, may be able to read your records.
To protect them: use a device passcode or screen lock, turn on the app's PIN or biometric lock, and be deliberate about where you send exported files.
10Children
SiteCycle: Injection Tracker is intended for adults, including parents and caregivers who manage injections for someone else. It is not directed to children and we do not knowingly collect information from anyone, of any age.
A profile in the app may describe a child, because a caregiver may be tracking a child's treatment. Those details are entered by the adult using the app, stay on that adult's device, and are never transmitted to us. The app has no social features, no content directed at children, and no advertising.
11Your rights and choices
Privacy laws such as the GDPR, the UK GDPR, and the CCPA give people rights to access, correct, delete, and port their personal information, and to know whether it is sold or shared.
Because we hold none of your information, you already have complete and direct control of all of it:
- Access and correct: open the app and edit any record
- Delete: delete individual entries, delete or archive a profile, or uninstall the app, which removes its database from your device
- Port: use the backup export to produce a file of your records
- Sale or sharing: we do not sell or share your information, and we never have
There is no request to submit to us, because there is nothing for us to look up. If you want to confirm any of this, write to us at the address in section 14.
12A note about HIPAA
HIPAA applies to healthcare providers, health plans, healthcare clearinghouses, and their business associates. SiteCycle: Injection Tracker is a consumer record-keeping tool. We are not a covered entity or a business associate, we have no relationship with your provider, and we receive no information from you. Records you keep in this app are personal records, not protected health information held by a covered entity.
13Changes to this policy
If this policy changes, we will update the effective date at the top and post the new version at this URL. If a change is significant, such as the app beginning to transmit information off the device, we will say so clearly in the app's release notes as well as here. Changes never apply retroactively to data already on your device.
14Contact
Questions about this policy or about privacy in the app:
Sage River Strategies LLC
sageriverstrategies@gmail.com
15Governing law
This policy is governed by the laws of the state of Texas, USA, without regard to conflict-of-law provisions.
SiteCycle: Injection Tracker is a personal record-keeping tool. It is not a medical device and does not provide medical advice, diagnosis, or treatment. It does not verify doses and cannot detect an error or a health problem. Always follow the instructions given by your prescriber and pharmacist.