The short version: DD-420 stores your logs on your device by default. We do not collect personal data on our servers. No accounts. No tracking. No ads. Optional private iCloud backup (off by default, Settings → Your Data) is user-controlled, manual, and private to your Apple ID — not continuous sync. Your information stays yours.
DD-420 is an independent iOS wellness application designed to help military veterans track PTSD symptoms and cannabis use. The app was built by an Army veteran with TBI and PTSD, for veterans — from personal experience with PTSD and the tools that help manage it. It is published as a sole proprietorship.
Questions about this policy: ddf420vet@gmail.com
We do not collect personal data on our servers. DD-420 does not require an account, and we do not operate a backend that receives your health logs.
You may optionally enter a name or nickname, caregiver details, and an emergency contact name and phone number. Those fields stay on your device (and can be included in optional private iCloud backup if you enable it). We do not require email, location, or other identifying information to use the app.
All data you enter — check-ins, symptom logs, cannabis sessions, scanned product details, notes, settings, and optional profile/contact fields — is stored on your device using Apple's SwiftData framework (and related local storage). It does not go to our servers.
Data leaves the phone only when you choose one of these paths:
We do not collect, store, or transmit any of the following on our own servers:
Optional name, caregiver, and emergency contact fields you enter are stored locally on your device (and may be included in your private iCloud backup). They are not uploaded to our servers.
Every piece of information you log — symptoms, cannabis sessions, moods, triggers, notes — lives on your iPhone by default. We have no servers that receive your health logs. There is no continuous cloud sync and no backend database operated by us.
You may optionally enable private iCloud backup in Settings → Your Data. When enabled, manual snapshots (plus the first backup when you turn it on) are stored in your Apple iCloud private CloudKit database under your Apple ID. One backup is kept per Apple ID; each new backup replaces the previous one. Turning backup off stops future uploads and does not automatically delete the cloud copy; you can delete that copy separately in Settings. We cannot read your private iCloud backup.
When you delete the app, data on the device is deleted with it. An iCloud backup you created may remain in your Apple account until you delete it from the app or manage it through Apple.
All users can generate a full clinical PDF report to share with a VA provider or therapist. This report includes symptom data, cannabis logs, and usage patterns. It is generated entirely on your device and is not sent to any server. You control where it goes — you initiate the share, and iOS handles delivery via Messages, Mail, AirDrop, or any app you choose. We never see the contents of any report you generate.
DD-420 includes a free Caregiver Sharing feature available to all users. You can create and share any of the following with a trusted caregiver, family member, or support person of your choosing:
This sharing is always voluntary and always initiated by you through iOS's built-in share sheet (Messages, Mail, AirDrop, etc.). We do not send caregiver data to any server. You control who receives it and how. We never have access to any shared content.
DD-420 may show Home Screen widgets that read a small subset of local data — such as your name, recent check-in scores, streak, or last cannabis date — through an on-device App Group container shared between the app and the widget extension. That container stays on your device. It is not our server and is not used to upload your health logs to us.
If you use the camera to scan a cannabis product label or QR code, camera frames/images are processed on your device for recognition and are not stored as photos in the app. Derived text and QR payloads you keep can be saved locally for your tracking and verification, and may be included in optional private iCloud backup if you enable it. Scanned data is not sent to our servers.
Settings includes an optional Send Feedback action that opens a user-initiated email to the developer. That message may include device and app metadata you choose to send (for example app version, build, iOS version, and device model). Health logs are not automatically attached. Sending feedback is entirely voluntary.
A future version of DD-420 may include optional integration with Apple Health (HealthKit) to read wellness data such as heart rate or sleep. If this feature is added, it will be strictly opt-in. Any HealthKit data accessed will remain on your device and will not be transmitted to any server. This policy will be updated before that feature is released.
DD-420 is 100% free. All features are available to every user at no cost. The app offers optional one-time tips ($2.99 / $4.99 / $9.99) as a way to support development — entirely voluntary, with no features locked behind them. Tips are consumable purchases processed by Apple through the App Store. We do not collect or store your payment information. We receive only a confirmation from Apple that a tip was completed — no financial details.
DD-420 may request permission to send local notifications (such as daily check-in reminders). These are generated and delivered entirely on your device by iOS. We do not use push notification services. No data leaves your device as part of the notification system.
DD-420 is designed for adults aged 18 and older and is rated 17+ on the App Store. We do not knowingly collect information from anyone under 18. If you believe a minor has used this app, contact us and we will assist in removing any locally stored data.
DD-420 does not integrate with any third-party analytics, advertising, or data-sharing services. There are no SDKs from Facebook, Google, Firebase, Mixpanel, or similar platforms in the app.
The only third-party platform involved is Apple — through the App Store, StoreKit, and, if you enable optional private iCloud backup, CloudKit / iCloud under your Apple ID — governed by Apple's own privacy policy. We cannot read your private iCloud backup.
Links you open in Safari (for example Facebook, VA, or Certificate of Analysis pages) are user-initiated. Those destinations have their own privacy policies.
Because your health logs stay on your device unless you export them, send feedback, or opt into private iCloud backup, security is tied to your iPhone's security and — if you enable backup — your Apple ID / iCloud protections. We recommend using a passcode, Face ID, or Touch ID. If your device is lost or stolen, your data is protected by iOS device encryption.
Because we do not store your health logs on our servers, there is nothing for us to access, correct, or delete on our end. Data on your device is under your control. You can delete it in the app's settings or by deleting the app. If you created an optional iCloud backup, you can delete that cloud copy from Settings → Your Data.
If we update this policy, we will post the new version here and update the effective date. If the changes are material, we will notify you within the app. Continued use of DD-420 after a policy change constitutes acceptance of the updated policy.
Questions, concerns, or requests related to this privacy policy:
A note from the developer: This app was built because veterans deserve tools that respect their privacy as much as their service. Your wellness data is yours. It always will be.