Last updated: October 18, 2026
Prism is made by T-Time Media LLC (“we”, “us”). Privacy is central to what Prism is: the information you put in Prism belongs to you. This policy explains what we collect, how it is used, who helps us run Prism, and the choices you have.
Who Prism is for
Prism is for people 13 and older. We do not knowingly collect personal information from anyone under 13. If you believe someone under 13 has created an account, contact us and we will delete it.
What we collect
- Account information: your email address and password. Your password is stored by our authentication provider in protected (hashed) form; we cannot read it.
- Profile information you choose to add: display name, pronouns, gender, birthday, and a profile photo. All of these are optional.
- Care information you enter: medications and doses, injections, appointments (including provider, location, and notes), questions you want to ask at appointments, supplies you keep track of (such as amounts, refill dates, and pharmacy), and reminder settings.
- Journey information you enter: milestones and journal entries (including mood and tags), and any photos you attach to them.
- Settings: preferences such as theme, color palette, private notifications, which messages from Prism you want, the wording you choose for reminders, and whether calendar sync is on.
- Support requests: when you use Contact support, Report a problem or Privacy concern, we keep what you write, your account email address (so we can reply), the Prism version, your phone’s system version, and, if you reported by shaking your phone, the screen you were on. A screenshot is sent only if you choose to attach it. Support requests are deleted with your account.
- A notification address for your phone: if you allow notifications, your phone gives Prism a push token, a random address that lets us send it a notification. It says nothing about you. It is removed when you sign out.
- Apple Watch, if you use it: Prism on your iPhone sends your watch the next two weeks of doses and your next few appointments, so the watch can show your day even when Prism isn’t open on your phone. If Private notifications is on, the watch shows only “Dose” and “Appointment”, without names, dosage, or places. Your phone also gives the watch a key that can do only two things: check which of today’s doses are logged, and log a dose you tap on the watch. The key is kept in your watch’s secure storage, we store only a scrambled (hashed) form of it, and it stops working when you sign out or delete your account.
- Anonymous usage, only if you say yes: Prism asks once whether you’d like to share anonymous usage, and you can change your answer any time in You → Settings → Privacy & security. If you say yes, Prism counts which screens are opened and which features are used (for example “a dose was logged” or “a theme was changed”), with the Prism version, your phone’s system and version, and a random number made for this install. It never includes your name, email, account, or anything you write or record about your care, and it is not linked to your account. Turning it off deletes that random number from your phone.
Some information stays only on your device and is never sent to us, including your App Lock PIN. Shake to report reads your phone’s motion sensor on the device to notice a shake; those readings are never stored or sent. Prism does not collect your precise location.
How we use it
We use your information only to provide Prism to you: to sign you in, to store and show your records, to send account emails (such as confirming your email address or resetting your password), and to respond when you contact support. If you said yes to anonymous usage, we also use those counts to see which parts of Prism get used, so we can improve it.
We do not sell your information. We do not show advertising in Prism, we do not use your health, identity, or journal information for advertising, and Prism does not include third-party advertising tools. The only usage counting is the anonymous, opt-in kind described above.
Who helps us run Prism
- Supabase hosts our database, sign-in system, and private file storage, on servers in the United States. Your records and photos are stored there.
- Resend delivers our account emails and forwards your support requests to our support inbox. It receives your email address and the content of the message being sent, including a screenshot if you attached one.
- PostHog receives the anonymous usage counts described above, only if you said yes. It stores them on servers in the European Union, without your IP address or location, and they can’t be connected to your account.
- Apple. If you use the location search when adding an appointment, the text you type into that field is sent to Apple Maps to suggest places. This happens only in that field, and Apple’s privacy policy applies to it.
- Expo delivers messages from Prism that you turn on (such as security alerts or news). It receives your phone’s push token and the title and text of the message, and passes them to Apple to show on your phone. If Private notifications is on, reminder messages say only “Your Prism reminder is ready.”
- Your device calendar and notifications. If you turn on calendar sync, appointments you choose are added to your own Apple Calendar on your device. If you import from your calendar, or turn on appointment suggestions, Prism reads the upcoming events on your phone to show them to you there; only the ones you choose are saved, and the rest never leave your phone. Medication and appointment reminders are scheduled on your device itself and do not go through Expo.
We may disclose information if required by law or to protect the safety or rights of others. We do not otherwise share your personal information.
Sensitive information
Prism may hold health-related and identity-related information that you choose to enter. We treat it as sensitive: each account can only access its own records, photos are kept in private storage, and you control what you record.
Your choices and rights
- Edit or delete any entry, medication, appointment, milestone, journal entry, or photo inside Prism.
- Export your data from You → Settings → Data & export.
- Delete your account from You → Settings → Data & export → Delete account. This removes your records and files and your sign-in account. Copies held in backups are removed when those backups expire.
- Ask us about your information, or to correct or delete it, by emailing support@ttimemedia.org. Depending on where you live, you may have additional rights under local law.
Security
Information is protected in transit with encryption, and our hosting provider encrypts stored data. Access rules ensure each person can read only their own records. No system is perfectly secure, so we cannot guarantee absolute security. You can add an app lock in Prism for extra protection on your device.
Changes to this policy
If we change this policy in a meaningful way, we will update the date above and, where appropriate, let you know in the app or by email.
Contact
T-Time Media LLC — support@ttimemedia.org