Privacy Policy

• madsmooth.com uses no cookies, no analytics, no advertising and no tracking scripts.
• Our hosting provider keeps standard server logs (IP address, time, page requested, browser type) to operate and secure the site. We do not use them to identify visitors and do not share them.
• If you email us, we use your message and address only to reply and keep it only as long as needed for that conversation or a resulting engagement.
• We do not sell, rent or trade personal information.

• Tonic is self-hosted. The app sends what it collects only to the Tonic server you connect it to, a server you (or someone you trust) run. Nobody else, including MADSMOOTH, LLC, receives your data.
• No advertising, no analytics or tracking SDKs, no crash-reporting services, no data brokers. Nothing is sold or shared with third parties.
• Data travels over your own network or HTTPS to your server's address. The app holds a per-device token for that server and nothing else.

What the phone app collects, and why

Each item is used only to show your own health picture in Tonic (Today, Vitals, History, alerts and reminders) and is sent only to your server, about every 15 minutes.

• Your phone's health sharing APIs (only the types you allow): steps, sleep sessions and sleep stages, heart rate, resting heart rate, nutrition (calories, protein, carbohydrate, fat, fiber, by meal), hydration and body weight. With your permission the app also writes a body weight your server provides into the health API. The app may also read heart rate variability, respiratory rate, skin temperature and exercise sessions, and read while in the background, if you grant those permissions. Health API data is never used for advertising, never sold, and never transferred except to your own Tonic server.
• Watch heart rate: the watch OS app reads heart rate from the watch's sensors and passes it over the Bluetooth/Wi-Fi link to the phone app, which uploads it to your server. The watch app stores no account and talks to no server itself.
• Physical activity (still, walking, running, cycling, driving) from OS activity recognition, and a stress estimate the app computes from heart rate and activity.
• Your phone's time zone, so times are shown correctly.
• What you enter: intake (caffeine, alcohol, supplements, medications), doses taken or skipped, blood pressure and weight.
• Breath alcohol tests: the reading and its time, from a Bluetooth breathalyzer you pair. Bluetooth scanning is used only to find the breathalyzer and is not used to infer location.
• App usage and notification counts (Focus diagnostics): if you grant Usage access and Notification access, the app can count how often apps were used and how many notifications arrived, with package names, times and counts, never the content of a notification, message or screen. In the current version these counts stay on your device in a report you can copy or share yourself; the app does not upload them.

Not collected: location (the app requests no location permission), contacts, photos, files, messages, microphone or camera, advertising ID.

Notifications

To deliver alerts and dose reminders the app keeps a connection open to your server (a foreground service) and shows what the server sends. Buttons such as snooze send that choice back to your server. No third party push service is involved.

Where your data lives

On your Tonic server, in its database, and in the encrypted backups that server makes (kept on the server and, only if its operator sets it up, copied to a storage location the operator chooses). The server's operator can also connect services they choose, such as third party chat or email for alerts, health or home automation servers; those connections are the operator's configuration, not something the app does.

On the phone, the app keeps only its settings, its server token and a short cache so screens open offline. OS cloud backup is turned off for the app.

How long it is kept

• Your history (entries, readings, alerts) is kept until you delete it or the account is deleted.
• Periodic snapshots of the phone's readings are deleted automatically after 90 days; the latest phone state is replaced with every upload.
• Server backups rotate: the newest 14 local backups are kept, older ones are deleted.

Your control and deletion

• Stop collection at any time: revoke health API, Bluetooth, activity, usage-access or notification-access permissions in OS settings, or uninstall the app (which removes everything it stored on the phone).
• Disconnect the phone: revoke its token on your server; the app can then send nothing more.
• Delete entries from the app's Log and Intake screens and the server's web pages.
• Delete everything: an administrator of your server deletes the account, which removes all of that account's data from the server database; the server's operator can also wipe the whole server, including its backups. Old backups age out as described above.
• Because the server is yours, you, or the person who runs your server, can see, export and delete everything directly. MADSMOOTH, LLC holds none of your Tonic data and so has nothing to export or delete on its side.

Children

Tonic is a health tool for adults and is not directed at children.

Medical disclaimer

Tonic does not give dosing advice, does not control any medical device, and is not a substitute for professional medical care.