Privacy Policy

Protocol is a local-only app. Everything you log — treatments, doses, schedules, reminders, workouts, nutrition, and weight — stays on your phone. There is no account, no sign-in, and no cloud. Your wellness data never leaves your device unless you choose to export or share it yourself.

We do not sell your data, use advertising trackers, or run any analytics SDK. This app makes no network calls with your wellness data.

Not subject to HIPAA. Protocol is a consumer wellness tracker, not a clinical tool. It isn't operated by a healthcare provider, and the information you enter is not Protected Health Information (PHI). Your data is still protected — by this policy and by applicable consumer-privacy laws.

What we collect: only what you type in (treatments, doses, schedules, reminders, workouts, nutrition, weight) plus basic app preferences like theme and units. We collect no account data, no IP address, no location, no biometrics, no contacts, and nothing from Apple Health or Google Fit.

How it's stored: on your device only, in an encrypted local store. A per-install key (held in your phone's secure keychain) encrypts your data, which protects it if someone copies the file off your phone — it does not protect data on an unlocked device, so use a passcode or biometric lock.

Your choices: export your data anytime as a PDF or interactive HTML file (shared through your phone's normal share sheet, e.g. to your own clinician or coach); edit or delete anything in-app; or uninstall the app to remove all local data.

Planned, not live yet: we may add optional cloud sync later, so you could use Protocol on more than one device. That would involve a sign-in and a secured cloud copy of your data. It is not part of the app today, and we'll update this policy and ask for your consent again before turning it on.

Questions or data requests: privacy@multifactorsolutions.net

MultiFactor Solutions, LLC · 7310 Menchaca Rd, #150091, Austin, TX 78715