Privacy Policy

What DrugBug stores

On your device: your settings (theme, language, level), study progress, saved drug list, agreement record, and score history.

In DrugBug's online database (only when online features are on), linked to an anonymous DrugBug account ID created on your device (not your name or email):

• Your study progress and score history (private to you).
• If you join the leaderboard: the display name you choose and your weekly XP (visible to other DrugBug users).
• If you join a class: the name you give your instructor, your class memberships and assignment scores.
• If you create a class: the class name, join code and assignments.
• If you report an error or request protocols: what you write, and an email address only if you choose to give one.

Optional account

DrugBug works without an account. If you choose to create one (Sign in with Apple or email and password), we store your email address (or Apple's private relay address if you use Hide My Email), an account ID, and your study data so it can sync across your devices.

Passwords and sign-in are handled by our authentication provider (Google Firebase Authentication); DrugBug never sees or stores your password or your Apple Account password. Apple sign-in tokens are verified by the provider's servers.

Your account data is private to you: other users never see your email, account ID or study records. Data is encrypted in transit (HTTPS/TLS) and at rest by our provider. Access to the database is restricted by server-side security rules, and only authorized DrugBug administrators can manage content.

You can export your data (Settings, Download my data) and delete your account in the app (Settings, Privacy & account). Deleting your account deletes your account and its study records; copies in our provider's backups expire within 30 days.

What we do not collect

We do not ask for patient information, and you must never enter it. We do not sell personal information, and we do not show ads.

Who can see it

Your progress and score history are private to your account. (Classes and the leaderboard are currently turned off.) If turned on: leaderboard names and XP are visible to other users. Class results are meant for your instructor; because class records are kept in a shared database area, use a first name or nickname only. Error reports and protocol requests are seen by the DrugBug team.

Students and schools

Classes are currently turned off. Learners can leave a class at any time, which deletes their class results. Schools that need a FERPA-specific data agreement should contact us before using Classes for graded work.

Account deletion and retention

Use Your data to delete everything DrugBug stores about you, or email us. We delete or de-identify your information promptly, except where we must keep limited records for legal reasons (for example records of purchases kept by Apple, or a record that you agreed to the Terms). Data stored only on your device is removed when you delete the app.

Age

DrugBug is for adults 18 and older only. If you believe someone under 18 has used DrugBug, contact us and we will delete the data.

Your choices and rights

Open Your data to leave the leaderboard, leave classes, or delete everything DrugBug stores about you. You can also email VolareMediaLLC@gmail.com to ask what we hold or to request deletion. Depending on where you live, you may have additional privacy rights; we will honor them.

Subscriptions and payments

DrugBug Plus and Pro are sold through Apple's App Store. Apple processes the payment; DrugBug never receives your card or billing details. We only learn which plan is active and when it renews or ends. Manage or cancel subscriptions in iPhone Settings, your name, Subscriptions.

Service providers

Apple distributes the app and handles purchases. When online features are on, DrugBug's database and anonymous sign-in are hosted by Google Firebase (Google Cloud). DrugBug contains no advertising or third-party tracking, and we do not track you across other apps or websites.

Changes

We will update this policy when DrugBug changes and ask you to agree again. Contact: Volare Media LLC, VolareMediaLLC@gmail.com.