Journey RX
Privacy Policy

Overview

Journey RX is a local-first Android tracking application intended for adults age 18 and older. It does not require an account. The current app has no developer-operated backend, advertising service, analytics service, crash-reporting uploader, or automatic data upload. Core records are stored in Android app-private storage on the user's device.

Data handled by Journey RX

Depending on the features the user chooses, Journey RX may process locally entered profile information, protocols and schedules, dose history, inventory, daily check-ins, measurements, lab entries, notes, progress photos, reminder preferences, calculator settings and history, and copies of selected Health Connect records.

Journey RX may also create user-requested ZIP backups, CSV or text exports, and provider-report PDFs. Provider reports exclude progress photos. Full Journey RX ZIP backups include progress photos and their original image bytes.

Health Connect

Health Connect access is optional, read-only, metric-specific, and user initiated. Journey RX requests access only for supported metrics the user selects: weight, body fat, resting heart rate, sleep, and blood pressure.

The app reads a selected metric only after the user opts in, grants the corresponding Android permission, and requests a preview. A preview covers at most the prior 90 days. Records are saved into Journey RX only after the user confirms the preview. Locally imported copies retain source-record and source-package information for deduplication and user exports.

Disconnecting Health Connect stops future reads by Journey RX. It does not revoke Android's Health Connect permission, delete source records from Health Connect, or automatically delete copies already imported into Journey RX. Users manage platform permissions in Android settings and can remove imported Journey RX data through the app's Clear local data control or Android's app-storage controls.

Journey RX does not sell Health Connect data, use it for advertising, or transmit it to a developer-operated server. Health Connect data is used only to provide the user-requested tracking and import features described here.

Progress photos and image metadata

Selected JPEG, PNG, or WebP images are validated and copied into app-private storage. Journey RX preserves the original image bytes and does not currently strip embedded EXIF, location, camera, or device metadata. That metadata can therefore remain in app-private storage and in a full Journey RX ZIP backup. Provider reports never include progress photos.

Notifications

Optional dose reminders can display compound and dose text. Cycle reminders can display a compound name. Lock-screen visibility is controlled by Android and device-manufacturer notification settings. Users can disable Journey RX notifications or adjust their visibility in Android settings.

Sharing, exports, and external copies

Journey RX sends nothing automatically. A user may deliberately open Android's document picker or share sheet to save or share a backup, report, export, photo capture, or feedback draft.

Journey RX-generated ZIP, CSV, text, and PDF files are not encrypted by the app. Once a user saves or shares a file outside Journey RX, the selected destination and its provider control that external copy. Clearing or uninstalling Journey RX cannot delete copies already exported or shared elsewhere.

The beta-feedback feature creates a text draft containing app/build, Android version, manufacturer, and model diagnostics. It attaches no files or health records and instructs the user not to add unnecessary health or identifying information. The user chooses whether and where to send it.

Android backup and device transfer

Android backup and device transfer are enabled. The primary Journey RX database is explicitly excluded. Other eligible app-private files and preferences may be retained or transferred by Android according to the user's device, account, and platform settings.

Android backup is not a complete Journey RX backup. The in-app ZIP workflow is the complete user-controlled transfer format.

Security

Journey RX relies on Android's application sandbox and device/platform encryption for active app-private data. The app does not add a separate database or file-encryption layer. User-generated ZIP, CSV, text, PDF, and image copies are plaintext after export unless the user protects them through the chosen destination or another tool.

No method of storage is risk-free. Users should secure their device, review lock-screen notification settings, and share sensitive exports only through destinations they trust.

Retention and deletion

Local records remain until the user edits or deletes them, uses Clear local data, clears app storage through Android, or uninstalls the app, subject to Android backup/device-transfer behavior and copies already exported elsewhere.

Clear local data deletes the Journey RX database, progress photos, app preferences, cached provider reports, capture and export caches, and planned app reminders from the active installation. It does not delete Health Connect source records, revoke Android permissions, remove Android-held backup copies, or delete files previously shared or exported outside the app.

Journey RX has no user accounts, so there is no server-side account or developer-held account data to delete.

Adults only

Journey RX is intended only for adults age 18 and older. It is not directed to children.

Changes to this policy

Material changes will be reflected by updating this policy's effective date. If a future version adds an account, backend, analytics, advertising, remote support destination, new Health Connect use, or other data transmission, this policy will be updated before release.

Contact

For privacy or support questions, contact Stephen@theark.io.