Privacy Policy

Last updated: October 9, 2026 · Document version: privacy-2026-10-09

MediTracer makes Tubular Daily Care (“Tubular”), an app families use to record tube-feeding care at home. This policy covers meditracer.com and the Tubular apps for iOS and Android. It uses the app’s own words. Your Care Record is everything recorded about the care you give. A Helper is someone who records care in it with you. Your Sign-In Identity is the email-backed account you sign in with.

The short version

You can use Tubular without signing in. Your Care Record then stays on your device, and we don’t receive it.
If you turn on Backup, we store a copy of your Care Record on our servers. That lets you get it back on a new phone and, with Tubular Plus, share it with Helpers.
Backup uses our service providers to store and sync your Care Record. Optional website analytics are controlled separately from Backup.
We don’t sell your information, and we don’t use it for advertising.
Pump sound detection runs on your phone. Audio never leaves it.
You can delete your Care Record and your Sign-In Identity at any time.

Information we collect

Your Sign-In Identity. Your email address, your name if you give one, and how you sign in (email and password, Sign in with Apple, or Google).
Your Care Record, if you use Backup. What you and your Helpers enter: the Care Plan, feeds and other care you log, amounts and rates, medications, symptoms, weights, tube details, notes, and Visit Questions. We also keep who recorded each entry, when, and how (by hand or by pump detection).
Helpers you invite. Their name and email address, and their role in your Care Record.
How you use the app. Settings needed to run the app and, when enabled, optional subscription-screen usage events. These events are separate from the care you log.
Device and technical information. Device type, operating system, app version, notification tokens, and crash and error reports. Error reports are configured to filter personal information. The app does not collect session replay recordings. Our sign-in systems record IP addresses to protect accounts.
Website visits. Vercel receives technical requests, such as your IP address, browser information, and the page requested, to host and secure the site. If you allow optional analytics, Vercel Web Analytics records page views and selected site interactions, and Vercel Speed Insights records Core Web Vitals and related performance measurements. These tools can receive the page or event URL, referrer, general location, browser and device information, and performance measurements. We exclude account, sign-in, support and request, invitation, deletion, newsletter, Family Access, administrative, API, and legal pages from optional analytics. Necessary sign-in storage works independently.
Your website privacy choice. A first-party cookie named meditracer_optional_analytics stores only the version of the choice and whether optional analytics are allowed or off. It expires up to one year after you make or replace a choice, unless you delete it sooner.
Purchases. Your Tubular Plus subscription status and history, from Apple or Google through our subscription provider. We never receive your payment card details.
What you send us. Feedback, pump requests, support emails, and messages sent through our website’s contact form, hardship-access request, or newsletter sign-up. A newsletter sign-up records your email, signup source, consent time and version, and subscription status. For abuse prevention, it also stores a keyed, one-way HMAC fingerprint derived from the request IP address. The newsletter record does not store the raw IP address or a browser user-agent string. Other request forms may include the technical information used to prevent abuse. Please avoid sending health details in website forms.

What stays on your device

Your Care Record, until you turn on Backup. Without Backup, the care you log is not uploaded. Error reports, store purchases, service requests, and messages you choose to send are separate from your Care Record.
The Care Recipient’s name. The dedicated Care Recipient name field stays on your device. Names or other identifying details you type into notes, questions, or other backed-up fields are included in Backup.
Pump sounds. Pump detection listens on your phone, and no audio is ever sent to us. We only receive the care it logs, like any other entry.

How we use information

To run Tubular. We store and sync your Care Record, restore it on a new device, share it with Helpers you invite, send the reminders you set, and show a running feed on your iPhone lock screen.
To understand and improve Tubular. We use error reports, feedback you send, and optional usage analytics to find problems and improve the service. Optional usage analytics do not require you to submit care content.
To talk with you. Sign-in emails, invitations, subscription notices, answers to your messages, and product updates you subscribe to. Newsletter messages include an unsubscribe link; you can also contact us to stop them.
To manage Tubular Plus. Trials, renewals, and access for the Helpers on your plan.
To keep Tubular working and safe. Finding and fixing crashes, preventing abuse, and securing accounts.
To meet legal obligations. Tax and billing records, and responses to lawful requests.

What we don’t do

We don’t sell your personal information or your Care Record.
We don’t use your information for advertising, and we don’t share it with advertisers or data brokers.
We don’t give medical advice, and we don’t use your information to make care decisions for you.

Helpers you invite. They see and add to your Care Record according to the role you give them.
Service providers that run Tubular for us. Supabase (database, sign-in, and servers), PowerSync (syncing between devices), Sentry (crash reports), RevenueCat (subscriptions), Resend (email), Apple and Google (sign-in, purchases, and notifications), Vercel (website hosting, Web Analytics, and Speed Insights), and Sanity (public website content and media). These services receive the information needed for their functions; their terms and privacy policies also describe their processing. See our service-provider list for the categories involved.
When the law requires it. To respond to a valid legal request, or to protect someone’s safety or our rights.
If MediTracer changes hands. If MediTracer is merged or sold, your information would move with the service and stay covered by this policy.

How long we keep it, and deleting it

We keep backed-up care information while your Care Record exists. Settings → App & privacy → Delete account provides separate choices for deleting a Sign-In Identity and, for a Care Record Owner, deleting the selected Care Record. Deleting one does not automatically delete the other or clear every device. Follow our data deletion page to choose the scope you need. Billing, legal, security, and deletion-request records may remain where needed for their purposes or required by law. Copies held in provider logs and backups follow the applicable provider retention and deletion process. Contact us for the status and scope of a request, including support messages and provider-held information.

The website privacy-choice cookie lasts up to one year after your latest choice. Vercel keeps optional Web Analytics and Speed Insights data under the reporting window and retention rules for our Vercel plan. Newsletter consent and subscription records are kept while an address is subscribed. After an unsubscribe request, we retain the email, consent record, suppression status and date, and protected connection fingerprint for as long as needed to honor the opt-out and prevent abuse. Contact us to request deletion; some records may remain where needed for security, legal, or suppression purposes.

Without Backup, your Care Record lives only on your device. Use the app’s clear-local-data action to remove the local copy. Operating-system backups or exports you made are managed separately by you and your device provider.

How we protect it

Information is encrypted in transit between your device and our servers, and only the people at MediTracer who need backed-up information can access it. No system is perfectly secure, so we can’t promise information will never be exposed. If a breach affects your information, we’ll tell you promptly.

Tubular is offered directly to consumers. It is not offered as a HIPAA business-associate service for a healthcare provider or health plan. Other privacy and consumer-health laws may still protect your information. Contact us before using Tubular on behalf of a healthcare organization.

Your choices and rights

Use Tubular without Backup. Tubular’s free features work on your device without it.
See or correct your information. Edit entries in the app, or ask us for a copy of what we hold. Include the scope you need, such as your Care Record, account details, or website messages; do not email passwords or medical records to verify your identity.
Delete your information. From the app, or by emailing us.
Control website analytics. Optional website analytics start off. Choose “Allow optional analytics” or “Keep optional analytics off” in the privacy panel, and reopen Privacy choices in the footer whenever you want to replace that choice. A Global Privacy Control signal keeps optional analytics off.
Control messages. Turn off notifications in the app and use the unsubscribe link in each newsletter email or contact us to stop newsletter messages. Unsubscribing leaves a suppression record so we can honor the choice. These choices do not turn off essential service or security messages.

Depending on where you live, you may have more rights over your information, including health information. You may ask to access, correct, copy, or delete information, withdraw optional consent, and appeal a denied request by contacting us and saying that you want to appeal. We verify requests proportionately and respond under the deadlines that apply to your request. We won’t treat you differently for exercising your rights. Withdrawing optional consent does not undo processing that already occurred or delete your Care Record; request deletion separately.

Children

Tubular is for parents and other adult caregivers. The Care Recipient is often a child, and a parent or guardian enters information about them. Tubular isn’t directed to children, and we don’t knowingly collect information directly from children.

Changes to this policy

When we change this policy, we’ll update the date at the top. If a change affects how we use information you’ve already given us, we’ll tell you in the app or by email before it takes effect.

Contact us

If you have questions about this policy or how your information is handled, reach us at hello@meditracer.com.