Catalyst Wire Dossier Catalyst Wire Dossier

Privacy Policy

Updated October 28, 2026

Catalyst Wire operates Dossier and Drug Alerts for Android.

Android app

No account or login is required. Followed conditions, saved drugs and preferences are stored locally on your device. Version 0.3.5 and later exclude app storage from Android backup and device transfer; older versions may have allowed platform backup according to your device settings. Disease and drug requests travel over HTTPS to our API; ordinary server security logs may include request paths, IP address and time. These paths can reveal a condition you are researching. Do not use the app to submit medical records or personal health details.

Version 0.3.6 adds separate treatment follows, personal change-comparison baselines and private research notes stored only in this app on your device. Checking Your updates sends individual condition and treatment requests to Dossier over HTTPS, but does not upload your watchlist as a stored list or send note text. There is no cloud note sync or push notification service. Private notes can be deleted individually; Settings → Delete local research removes treatment follows, notes and saved comparisons. This leaves condition follows, saved bookmarks and billing intact. A user-initiated research brief opens the device share sheet with public facts and links; private notes are excluded. The destination you choose handles anything you share.

For Plus purchases, Google Play processes billing and RevenueCat provides purchase status and generates a pseudonymous app user identifier even when you do not create an account. Our backend stores that identifier, entitlement status and expiry, and minimal provider event/product references for verification and replay protection. This is pseudonymous data, not a guarantee of anonymity. We do not receive card numbers. Web and Android subscriptions are separate.

Free advertising and choices

Free supports Google AdMob banner ads when configured and available. Plus suppresses ads. Where required, Google's consent form appears before ads are requested; Settings → Ad privacy choices opens available consent controls. If consent or ad configuration is unavailable, ads stay off. Consent is not required to use Free browsing.

The ads SDK may process advertising identifiers, IP address, device/app information and ad interaction data under Google's policies. Ad requests are configured as non-personalized and do not contain followed conditions, disease searches or drug names as targeting keywords. Non-personalized ads may still use identifiers for fraud prevention, frequency capping and reporting. Device advertising settings offer additional controls.

Version 0.4.0 makes both condition and medicine favourites free and copies existing medicine watches into favourites once. It shows one latest relevant event rather than archival reading lists. Local history is retained for provenance; no new tracking, cloud sync or advertising targeting is added. Cached browse records stay on the device and are excluded from Android backup and transfer. Settings → Delete local research removes notes and legacy research data while keeping favourites.

Source records and historical analysis

Current user-facing Dossier views display selected fields from public FDA, EMA and ClinicalTrials.gov records, with source links and field provenance. They do not display AI-generated summaries, importance scores, or inferred condition–drug claims. Earlier versions processed public source records with automated analysis; historical outputs may remain in restricted internal history or rollback copies but are excluded from current public and app views. Your local condition follows, searches and private notes are not sent to an AI provider.

Website and retained records

New web registrations, checkout and newsletter signups are closed. Existing email addresses, hashed passwords, alert preferences, consent records and payment references are retained for support and historical billing. Stripe processes legacy web payments. Existing opted-in email delivery and unsubscribe handling are preserved. Our first-party page-event records include page, referrer, timestamp and tier, without a stored IP or visitor identifier; ordinary server logs are separate.

Providers and purposes

We use data to deliver content, verify subscriptions, operate permitted ads, resolve support and security issues, and keep required billing records. We do not send your followed conditions to advertising providers as targeting data or sell your watchlist.

Deletion and retention

Clear app storage or uninstall to remove all local follows, saved drugs, notes and comparison history. See data deletion to request removal of backend purchase/legacy account data. Minimal payment/event records may need to remain for accounting, security or legal obligations. Deleting data does not cancel Google Play billing. Web access logs normally rotate daily with 14 rotated files retained. Application security and error logs currently have no fixed automated deletion period and may be retained longer for support and security. Subscription and legacy records are retained as needed for the purposes and obligations above. We have not yet established a fixed retention schedule for every record type.

Audience and contact

The app is intended for adults 18 and over. We do not knowingly solicit children's personal data. Questions, access or deletion requests: support@catalystwire.org. We update this page when practices change. Public-source summaries are informational and are not medical advice.