Pillpal ("the app") is a medication reminder and caregiving app. This policy explains what information Pillpal collects, how it is used, and the choices you have. The short version: we collect only what the app needs to work, we never sell your data, and you can delete everything at any time.
Information we collect
Account information. When you sign in with Apple or Google, we receive your name and email address (Apple lets you hide your real email; that works fine with Pillpal). If you sign in with an email code, we store that email address.
Medication and health information you enter. Your medicine names, dosages, schedules, dose history (taken, skipped, snoozed), and inventory levels. You provide this information yourself; we never import it from anywhere else.
Caregiving connections. If you pair with a family member or loved one, we store that connection and share dose activity between the paired accounts — that is the app's purpose. The patient can see who is connected, and either side can end the connection at any time.
Contact details (optional). A caregiver may store a patient's phone number so the app can offer Call/Message buttons. This stays in your account and is never used by us.
Device information. A push notification token and app version, so caregiver alerts can reach your device.
How we use it
- To schedule and deliver dose reminders and caregiver alerts
- To sync your data between your devices and with paired caregivers
- Nothing else. No advertising, no profiling, no sale of data, no third-party marketing.
Where your data lives
Your data is stored on your device (so the app works fully offline) and synced to our backend hosted by Supabase, protected in transit with TLS encryption and at rest by row-level security — only your account and your paired caregivers can access your data.
Crash reports
If the app malfunctions, an anonymised diagnostic report may be sent to Sentry (sentry.io), our crash-reporting provider. These reports are scrubbed of personal and health information — medicine names, notes, emails and identifiers are removed before anything leaves your device. We use them solely to find and fix bugs.
Sharing
We do not sell or rent your information to anyone. Data is shared only:
- Between accounts you explicitly pair (caregiver ↔ patient)
- With service providers that host our infrastructure (Supabase), bound to process data only on our behalf
- If required by law
Data retention and deletion
You can delete your account at any time in Settings → Delete account. This permanently removes your profile, medications, dose history, and device records from our servers, and wipes local data from the app. If you can't access the app, you can request deletion by email — seeDelete Your Account for full details and what gets removed.
Children
Pillpal is intended for adults — people managing their own medication or caring for someone else. It is not directed at children under 13, and we do not knowingly collect data from them.
Not medical advice
Pillpal is a reminder and tracking tool. It does not provide medical advice, diagnosis, or treatment. Always follow your doctor's or pharmacist's instructions.
Changes
If this policy changes materially, we will note it in the app and update the date above.
Contact
Questions or requests: apps@nftatoms.com