Privacy Policy for Aliquot

Effective Date: April 27, 2026
Last Updated: July 28, 2026

Aliquot is provided by 1569047 B.C. Ltd. ("we," "our," or "us") as a personal logbook for people who want to track their own notes about substances, protocols, and measurements. This Privacy Policy explains what data Aliquot does and does not collect, and your rights.

The short version, if you only read one paragraph:

Aliquot does not store your health data on any server we control. There is no Aliquot backend. Body measurements stay on your device. Your doses, vials, protocols, symptoms, photos, and notes can sync through your private CloudKit database if you enable iCloud. Apple protects iCloud data in transit and at rest; when you enable Advanced Data Protection, CloudKit data is end-to-end encrypted. We do not have access to its contents. We do not require an account, ask for your email, or know your name.

1. Who we are

Aliquot is published by 1569047 B.C. Ltd., British Columbia, Canada. For any privacy question, you can reach us at [email protected].

For GDPR purposes, 1569047 B.C. Ltd. is the data controller for the limited categories of data described below.

2. What Aliquot stores on your device

When you use Aliquot, the app creates and stores the following information on your device only:

• Doses you log (compound, amount, timestamp, site, notes)
• Vials and batches you create (label, volume, concentration, expiry, photo)
• Protocols you configure (schedules, targets, start and end dates)
• Symptoms, side effects, and measurements you enter
• Optional photos you attach (stored as local files, referenced by Core Data)
• Your app preferences and settings

Body measurements, including values read from Apple Health, stay on the device where they were recorded. If you enable iCloud sync, the other eligible records listed above are synced to your own iCloud account via Apple's CloudKit. We do not have access to that iCloud account. Apple's CloudKit private database is end-to-end encrypted between your devices when Advanced Data Protection is enabled. See Apple's iCloud privacy statement.

We do not have a server. We cannot read this data.

2.1 What the website stores in your browser

The Compound Library stores one local browser preference after you acknowledge its educational notice. The preference records only that the notice was acknowledged. It contains no health, search, or calculator data; it is not a cookie and is not sent to Aliquot with web requests. Clearing your browser's site data removes it.

Library searches and calculator entries are not saved in browser storage, added to the URL, or submitted to Aliquot.

3. What Aliquot reads from your device (with your permission)

With your explicit permission, Aliquot may read the following from Apple HealthKit, solely to display it alongside your own notes:

• Body weight
• Body fat percentage

Aliquot reads these values on your device. Aliquot does not write to HealthKit in this version. If you deny HealthKit access, Aliquot still works — those fields will simply be empty.

4. What Aliquot does not collect

• We do not collect your name.
• We do not collect your email address.
• We do not collect your phone number.
• We do not collect your date of birth.
• We do not collect your location.
• We do not collect your contacts.
• We do not collect your photos other than the ones you explicitly attach to a vial or a dose, which stay on your device.
• We do not collect an advertising identifier (IDFA).
• We do not collect an account ID, because there is no account.
• We do not know what compound you are tracking. We do not know what dose you are taking. We do not know what protocol you are on. We do not know what you logged.

5. Third-party services

Aliquot uses the services described below. Analytics is off by default and requires your consent. Subscription management operates independently of analytics consent so the App can display products and verify Pro access.

5.1 Anonymous analytics (TelemetryDeck)

If you turn this on, Aliquot sends anonymous event names like "app opened" or "paywall shown" to TelemetryDeck. We do not send:

• Your name, email, Apple ID, or advertising identifier
• Any number or text you entered into Aliquot
• The name of any compound, protocol, or vial
• Any measurement, symptom, or photo

TelemetryDeck derives a pseudonymous device identifier from Apple's identifier for vendor and a random salt generated by Aliquot. This lets the service associate opted-in events from the same app installation across sessions. It is not connected to an Aliquot account or known identity and is not used to track you across other companies' apps or websites. TelemetryDeck is a privacy-focused, EU-based analytics service. TelemetryDeck Privacy Policy.

5.2 Crash reporting (Sentry)

The current version of Aliquot does not transmit crash reports to Sentry. If remote crash reporting is introduced in a future version, it will remain off by default, require your consent, and this policy will be updated before collection begins. The planned scrubbing filter removes:

• Anything that looks like a file path with a user folder name
• Anything that looks like an email address
• Any UUID
• Any number longer than two digits (to avoid accidentally shipping dose amounts or measurements)

Aliquot currently receives no data from Sentry. Sentry Privacy Policy.

5.3 Subscription management (RevenueCat)

Aliquot uses RevenueCat to load subscription products, determine entitlement status, manage purchases, and verify receipts with Apple. RevenueCat may receive:

• An anonymous RevenueCat app user ID generated on your device (no connection to your Apple ID or any identity)
• The Apple subscription receipt for verification
• The product ID you purchased
• The country of your App Store account

RevenueCat does not receive any health data, doses, vial information, protocols, symptoms, measurements, photos, or notes. Aliquot may contact RevenueCat before purchase to load products and determine entitlement status. RevenueCat Privacy Policy.

6. How long we keep data

• Data on your device: as long as you keep the app installed or until you delete it in Settings → Privacy → Delete All Data.
• Data in your iCloud: governed by Apple's iCloud retention. You can delete it at any time from any device signed in to your Apple ID.
• Anonymous analytics (if opted in): up to 12 months in aggregated form, then deleted.
• RevenueCat subscription records: retained per RevenueCat's policy for accounting and receipt validation purposes. You may request deletion via [email protected].

7. How to delete everything

At any time you can:

1. Open Aliquot → Settings → Privacy → Delete All Data. This removes local records and asks CloudKit to delete the app's private zone. If iCloud deletion cannot be confirmed, the app tells you so you can reconnect and retry.
2. Delete the app from your device to remove local data. This does not by itself guarantee deletion of a previously synced iCloud copy; use Delete All Data first, or manage Aliquot's iCloud data in Apple ID settings.
3. Email [email protected] and ask us to help delete any record RevenueCat or TelemetryDeck has associated with your device. We will do this within 30 days.

8. Your rights

Regardless of where you live, you can:

• Access: request a copy of any data we might have about you. The answer is almost always "nothing" — but if you subscribed and you opted in to analytics, we will gather whatever exists and send it to you.
• Delete: request we delete anything we have (see Section 7).
• Correct: request we correct anything that is wrong.
• Object or withdraw consent: turn off analytics at any time in Settings → Privacy.

Contact us at [email protected]. We respond within 30 days.

8.1 European Union residents (GDPR)

You have additional rights under the General Data Protection Regulation (GDPR):

• Data controller: 1569047 B.C. Ltd., [email protected]
• Lawful basis: We process subscription data on the basis of contract performance (delivering the Pro features you purchased). We process analytics on the basis of your explicit consent (opt-in in Settings). You may withdraw consent at any time.
• Right to lodge a complaint: You may lodge a complaint with your local Data Protection Authority. A list is available at edpb.europa.eu.
• Data transfers: Data shared with RevenueCat or TelemetryDeck may be processed in the United States or the European Union depending on the provider. We rely on each provider's Standard Contractual Clauses and privacy certifications.
• Automated decision-making: We do not engage in automated decision-making that has legal or similarly significant effects on you.

8.2 California residents (CCPA/CPRA)

You have additional rights under the California Consumer Privacy Act as amended by the California Privacy Rights Act:

• Right to know: the categories and specific pieces of personal information we have collected. For Aliquot, the complete answer is "none, unless you opted into analytics, and even then nothing that identifies you."
• Right to delete: see Section 7.
• Right to correct: see Section 8.
• Right to opt out of sale or sharing: We do not sell or share your personal information in any sense of those terms, and we have never done so. Because we do not sell or share, there is no "Do Not Sell or Share" mechanism to offer beyond the analytics toggle already in Settings → Privacy.
• Right to limit use of sensitive personal information: We do not use sensitive personal information for the purposes defined under CPRA.
• Non-discrimination: We will not discriminate against you for exercising any of these rights.

8.3 Indian residents (DPDP 2023)

• Data fiduciary: 1569047 B.C. Ltd., [email protected]
• Grievance officer: Contact [email protected] for any grievance. We respond within 30 days per the Digital Personal Data Protection Act, 2023.

9. Children

Aliquot is not intended for children under 16 and is not marketed to children. We do not knowingly collect information from children under 16. If you believe a child has used Aliquot and you have concerns, contact us at [email protected].

10. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date above and, for material changes, surface a notice in the app on next launch. Your continued use of Aliquot after the effective date constitutes acceptance of the updated Privacy Policy.

11. Contact

Email: [email protected]
Web: https://aliquot.app/privacy