MedGOBLIN · Privacy
Privacy, in plain language.
Updated September 23, 2026
Your medication records and journal deserve care. Here is what MedGOBLIN stores, what optional features share, and the choices you have.
At a glance
The app encrypts its main records on your device.
Optional medicine and pharmacy searches send information to outside services.
Widgets, notifications, copied text and exported backups have separate privacy considerations.
You can turn off optional features and delete your app records in Settings.
Who develops MedGOBLIN?
MedGOBLIN is developed by Robot in the Attic Productions LLC. For support or a privacy question, contact robotintheatticproductions@gmail.com.
Who this beta is for
The initial beta is for invited adults aged 18 or older in the United States. Begin with fictional records while testing reliability. This is a testing restriction, not a claim that the app has received a particular App Store age rating.
Information you enter
The app stores the profile and health notes you choose to provide, medication details and schedules, dose history, journal entries, contacts, appointments and your settings. These support the features you use. Main records are encrypted before being saved in the app's storage. The encryption key is kept in the device's secure key storage.
Your records are available to the app in memory while it is running. Encryption does not protect against every situation, such as someone using your already unlocked app. Keep your device protected and use the app lock if you want an additional unlock step.
Optional medicine searches
Online drug lookups are off unless you enable them. When enabled, searches send medicine names, identifiers or product codes to the US National Library of Medicine's RxNav service or the US Food and Drug Administration's openFDA service. The provider receives the request and normal connection information, including your IP address. You can enter medication information manually without enabling these searches.
The barcode lookup sends the product code, rather than a bottle photograph. Photo text recognition runs on the device. The app attempts to delete its temporary scan photo after reading it and retries cleanup at the next cold launch if a capture was interrupted. If cleanup fails, the app shows a warning.
Finding pharmacies
If you choose a pharmacy search, your selected coordinates and search radius go to Apple Maps. Typing an address, city or ZIP uses Apple's geocoding service first. Apple also handles connection information. Your medication list and journal are not sent with the search.
Results are temporary. MedGOBLIN clears them when you return to the search screen or background the app and does not save Apple listings in contacts or backups. Existing contacts remain saved, and you may enter your own pharmacy details manually. Calling and directions open the relevant system app when you choose them. Apple's services have their own privacy practices.
Learn more about NLM's privacy practices and openFDA's terms and service monitoring. These providers have their own handling and retention practices. Turning off searches prevents future lookups; it cannot retract a request already sent.
Gobbo's voice
Gobbo uses selected recorded performances included with the app, with your device's speech system for lines that have not been recorded. His facial animation runs on the device using bundled artwork and timing cues. The app plays these lines; it does not use this feature to record your microphone or upload your voice. You can turn speech off and adjust its pitch in Settings. Audio may be audible to people nearby, including when you choose playback while the phone is in silent mode.
Notifications and widgets
Reminder content is given to the device's notification system, outside the app's encrypted record store. By default, reminders use fixed messages without medication names, doses or appointment details. Calm uses plain wording; Everything can use Gobbo's wording according to your selected personality. These messages can still reveal that the app is reminding you about medication or an appointment. Detailed reminder text is optional. Your device settings also affect what appears on a locked screen.
Widget sharing is optional and off by default. Enabling it places a selected reminder snapshot in storage shared by MedGOBLIN and its widget. This copy is outside the main encrypted store so the widget can display it. Turn off widget sharing to ask the app to clear that copy. The app reports a clearing failure so you can retry.
Backups and copied text
Password-encrypted backups go to the location you select in the system share sheet. Keep the password separately and safely; it is needed to open the backup on another installation. The app cannot recover a forgotten backup password. The temporary export copy is cleaned up after sharing; your chosen saved copy remains at its destination.
Copying records or appointment notes places readable text on the system clipboard. Full-data copying is explicitly labeled unencrypted and asks for confirmation. Clipboard and sharing features are outside the main record store's protection. Consider where you paste or send that information.
Contacts, links and your choices
You choose when to select a contact, open directions, call, message, email or visit an information source. Those actions pass the selected information to the relevant system app or website. Their handling is separate from MedGOBLIN's local record storage.
You can change optional online lookups, widget sharing and notification detail settings in the app. Device settings control camera, contacts, location and notification permissions. Core manual entry remains available without online drug lookup.
Keeping and deleting information
Your app records remain until you edit or delete them. Settings includes a Delete everything action. Before deleting or replacing app records, the app asks the notification system to cancel pending reminders, remove delivered notifications and clear its last stored notification action. It also clears drug-reference results held in memory and any legacy reference cache saved by earlier versions. It reports a failure if deletion cannot complete, including notification cleanup or clearing the optional widget copy. Deleting app records does not delete backups, clipboard contents, messages or files you previously saved outside the app, or information already handled by an outside provider.
To ask about privacy or information included in a support message, email robotintheatticproductions@gmail.com. Please avoid including medication lists, journal entries, backup files or passwords in the request.
Support messages and privacy requests
Robot in the Attic Productions LLC handles support and privacy requests at the email address above. We use the contact information and content you choose to send to respond, investigate problems and improve reliability. Do not send health records or backup passwords. We aim to delete closed support conversations and associated attachments within 90 days after resolution, except material still needed for an ongoing issue, dispute or legal obligation. Our email and service providers may maintain their own backups or records under their policies. This period does not control copies you retain or Apple's own TestFlight records.
You may ask about access, correction or deletion of information you sent us by email. We may need limited information to verify the request. We cannot retrieve your local medication records, journal or backup password for you; use the app's local editing, export and deletion controls for those records. Requests will be handled according to applicable requirements.
Beta feedback and Apple services
If you send feedback, we receive what you choose to include. TestFlight and iOS may provide crash reports, diagnostics and beta feedback under Apple's own terms and privacy practices. Please report problems using fictional examples wherever possible.
Visiting our website
The company website is hosted by Squarespace. Visiting a website is separate from using MedGOBLIN's local record store. Squarespace processes browser, network and device information, IP addresses, requested pages and related technical information to deliver and protect the site. The company site currently also uses Squarespace analytics and an activity log; analytics cookies may be placed. Browser cookie controls can limit cookies, but do not prevent all server logging. See Squarespace's privacy policy and its cookie information. Do not enter medication details or journal entries in the company's general contact form. Use the support email for app issues, with private records left out.
Changes to this notice
The notice will be updated when the app's information handling changes. Check the published revision date when reviewing it.