1. Information stored on your device
Protocol may store information you enter or create, including protocols, medications, supplements and peptides; doses, schedules and dose history; preparation or reconstitution details; reminders and inventory; health measurements and goals; symptoms and check-ins; notes and protocol-change history; bloodwork reports and extracted values; and app preferences and settings.
This information is primarily stored locally on your device. Protocol does not require an account and does not automatically upload these records to a Protocol Labs-operated server.
2. Apple Health and HealthKit
Connecting Apple Health is optional, permission-based and available as a Protocol Pro feature. If you grant permission, Protocol may read only the health and fitness categories you authorize so it can display relevant measurements, trends and progress inside the app. Where supported, Protocol may write specific measurements to Apple Health when you enable that feature and explicitly save them.
Apple controls HealthKit permissions. You can approve or deny access category by category and change those permissions at any time in Apple Health or iPhone Settings. Protocol does not use HealthKit information for advertising, marketing, data mining, eligibility decisions or automated diagnosis, and does not sell or share HealthKit information with data brokers.
3. Bloodwork and on-device text recognition
When you select a bloodwork document, optical character recognition (OCR), text processing and proposed result extraction are performed on your device. You can review and correct proposed values before saving them. Bloodwork documents and extracted results are not automatically sent to Protocol Labs or a third-party processing service.
4. Apple Watch
The Protocol Apple Watch companion is available as a Protocol Pro feature. If you use the companion Apple Watch experience, Protocol may use Apple’s WatchConnectivity framework to transfer relevant protocol, schedule, reminder and completion information between your paired iPhone and Apple Watch. This transfer occurs within Apple’s device-pairing system and is used to keep the app experiences in sync. Protocol Labs does not receive this information as part of WatchConnectivity.
5. Notifications
If you allow notifications, Protocol schedules local notifications on your device for reminders you configure. The notification content and timing are managed by the operating system. Protocol does not use a developer-operated push-notification service to transmit your health or protocol records.
6. Exports, backups and sharing
PDF and CSV data, backups and other information leave Protocol’s local storage only when you explicitly initiate an action such as exporting, sharing a report, creating a backup, saving a file or sending feedback. Your selected destination—including Files, iCloud, email, messaging, AirDrop or another app—may process the information under its own privacy terms. Review the content and recipient before sharing.
Diagnostic or beta feedback may include basic app and device information needed to investigate a problem. Protocol does not automatically attach your protocols, doses, health measurements, bloodwork or personal identifiers. You control whether and how the feedback is sent.
7. No advertising, tracking or sale of data
Protocol does not include third-party advertising, cross-app tracking or third-party analytics SDKs. Protocol Labs does not sell or rent your personal information or health information. Your data is not used to build advertising profiles.
8. Protocol Pro and App Store purchases
Protocol offers optional Protocol Pro auto-renewable subscriptions. Subscription purchases, renewals, cancellations and payment processing are handled by Apple through the App Store. Protocol Labs does not receive or store your payment card details.
Protocol uses Apple’s StoreKit services to determine whether Protocol Pro features should be available. Cancelling a subscription, or allowing it to expire, does not delete your locally stored protocols, dose history, health records, bloodwork or other Protocol data. Pro features become unavailable until you resubscribe, but your locally stored data remains intact.
9. Website information
When you visit this website, the hosting and security providers may process routine technical information—such as IP address, browser type, request time and security logs—to deliver and protect the site. This website does not request your health records and does not use advertising trackers.
10. Retention and deletion
Locally stored app records remain on your device until you delete individual records, use an in-app option to delete all Protocol data, or remove the app and its local storage. Exported files and backups remain in the locations you selected until you delete them there. Removing data from Protocol does not automatically remove a copy you exported or shared.
Information stored in Apple Health is controlled separately through Apple Health and must be viewed or deleted there. Uninstalling Protocol may not delete information previously written to Apple Health.
11. Security and app lock
Protocol relies on Apple platform protections and provides an optional app lock using Apple’s Local Authentication system, such as Face ID, Touch ID or the device passcode. Protocol does not receive or store your biometric template or device passcode. No method of storage is completely secure, so you should protect your device, keep its software current and share exports carefully.
12. Medical disclaimer
Protocol is an organizational, tracking and arithmetic aid. It does not provide medical advice, diagnosis, treatment or prescriptions and is not a substitute for a qualified healthcare professional. Calculations, trends and reference information may be incomplete or incorrect. Always verify important information and seek professional medical advice before making health or treatment decisions. In an emergency, contact your local emergency services.
13. Children’s privacy
Protocol is not directed to children under 13, or the minimum age required by applicable law, and Protocol Labs does not knowingly collect children’s personal information through a developer-operated account or server. A parent or guardian who believes a child has provided information to Protocol Labs should contact us. Do not enter another person’s health information without appropriate authority.
14. Changes to this policy
We may update this Privacy Policy as Protocol develops or legal requirements change. We will publish the revised policy on this page and update the effective date. Material changes may also be communicated in the app where appropriate.
15. Contact
Questions, privacy requests or concerns can be sent to support@protocollabs.co.za. Please do not include sensitive health information unless it is necessary for your request.