Privacy Policy

1. Information We Collect

Information You Provide

• Account information: Email address, display name, and password (or authentication via magic link).
• Medication data: Medication names, dosages, food instructions, notes, schedules, and chain/sequence configurations you create.
• Dose history: Records of taken, skipped, and missed doses including timestamps.
• Profile information: Medication profile names, dependent names, dates of birth, and relationships (e.g., child, parent, spouse).
• Caregiver data: Email addresses of caregivers you invite and their role assignments.

Information Collected Automatically

• Device push token: Your Expo push notification token, used solely to deliver medication reminders.
• Timezone: Your device's IANA timezone string, used to schedule reminders at the correct local time.
• Subscription status: Your current subscription tier and associated transaction identifiers.

Information We Do NOT Collect

• We do not collect location data, contacts, photos, health data from HealthKit or Google Health Connect, or advertising identifiers.
• We do not sell your data to third parties.

2. How We Use Your Information

• Deliver medication reminders at your scheduled times.
• Display your dose history and adherence records.
• Enable caregiver access so designated individuals can monitor and assist with medication management.
• Process subscription purchases and manage entitlements.
• Send push notifications for medication reminders, caregiver invitations, and snooze alerts.
• Improve the reliability and performance of the App.

3. Third-Party Services

• Supabase — Database, authentication, and server functions.
• Expo — Push notification delivery and app builds.
• RevenueCat — In-app purchase management.
• Sentry — Error monitoring and crash reporting (anonymous data only).
• Apple App Store / Google Play Store — App distribution and payment processing.

Each third-party service processes data according to their own privacy policies.

4. Data Retention

• Active accounts: Your data is retained as long as your account exists.
• Deleted accounts: When you delete your account (Settings > Delete Account), all data is permanently deleted. This is irreversible.
• Dose history: Retained for the lifetime of your account to support adherence tracking.

5. Data Security

• All data transmitted over HTTPS/TLS encryption.
• Authentication tokens stored in secure device storage (iOS Keychain / Android Keystore).
• Row-level security (RLS) policies ensure users can only access their own data.
• Caregiver access controlled by explicit relationship records with role-based permissions.

6. Your Privacy Rights

GDPR (European Economic Area)

If you are in the EEA, you have the right to access, rectify, erase, port, and object to processing of your personal data.

CCPA (California)

If you are a California resident, you have the right to know what personal information we collect, request deletion, and not be discriminated against for exercising your rights. We do not sell personal information.

Exercising Your Rights

• View/edit data: Profile, medications, and dose history screens.
• Export data: Log screen export feature.
• Delete account: Settings > Delete Account.
• Other requests: Contact us at privacy@pillplease.app.

7. Children's Privacy

The App allows users to manage medication profiles for dependents, who may be minors. We do not knowingly collect personal information from children under 13 without parental consent. If you believe a child under 13 has provided personal information without consent, please contact us.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy in the App and updating the “Last updated” date.

9. Contact Us

If you have questions about this Privacy Policy, contact us at: privacy@pillplease.app