Privacy Policy

Scope

This Policy applies to Pill Reminder: Care Tracker and its related websites and services (the “Service”). It does not govern third-party services that you choose to use under their own terms and privacy policies.

Some features work locally without an account. The information handled by us changes when you create an account, enable cloud sync, upload a document, share with another person, turn on notifications, or use an AI-assisted feature.

Information we handle

We handle information you provide, information created while you use the Service, and limited technical information needed to operate and protect it.

• Account information, such as your email address, display name, profile image, sign-in provider, account identifiers, and authentication records.
• Health and care information, such as medication names, doses, schedules, instructions, prescription text and metadata, dose history, allergies, conditions, observations, vital signs, visits, documents, care notes, reports, and information you include in AI chats.
• Information about other people that you enter with authority, such as a patient profile, emergency contact, caregiver, clinician, or care-team relationship.
• Sharing information, such as invite codes, recipients, permissions, expiration and revocation settings, and records showing when a shared resource was accessed.
• Device and operational information, such as app version, locale, account or installation identifier, push token, device name, notification delivery status, feature-flag exposure, and security or rate-limit events.
• For anonymous AI access, a server-issued installation principal, usage counters, and a salted network fingerprint used for abuse prevention. Raw network addresses are not stored in application records for this purpose.

On-device scans and cloud data

Prescription image text recognition runs on your device. The original scan is not sent to the prescription extraction model. If you request structured extraction, the app prepares medication-focused text and removes common identifiers before that text is sent for processing. Automated redaction is not guaranteed to remove every identifier, so review the result before saving.

If you sign in or use cloud features, the Service may store and sync medication records, prescription details, raw OCR text, dose history, profiles, care information, and other records you choose to save. If you separately upload or save a document, the file itself may be stored in cloud storage. Data that remains only on your device is not received by us.

How we use information

We use information only as reasonably necessary to provide, maintain, secure, and improve the Service.

• Create and secure accounts, authenticate sign-ins, and respond to support requests.
• Save and sync medication plans, records, documents, settings, and care-team activity.
• Schedule reminders, deliver push notifications, create alerts, and support Apple Wallet passes when requested.
• Provide sharing, caregiver, clinician, report, and access-history features under the permissions you choose.
• Process optional prescription extraction, AI assistant, and summary features and enforce their usage limits.
• Operate feature flags, understand basic product usage, diagnose failures, prevent abuse, and protect the Service.
• Comply with law and enforce our Terms of Service.

When information is disclosed

We do not sell health information, and we do not use it for targeted advertising. We disclose information only in the circumstances below.

• At your direction, to caregivers, clinicians, or anyone who receives a share link or one-time access code. Revoking a grant prevents future access but cannot retrieve copies already viewed or saved by a recipient.
• To service providers that operate cloud hosting and sync, authentication, email and one-time codes, feature delivery and usage measurement, AI processing, push notifications, and Apple Wallet. Depending on the feature, these providers may include Convex, Apple, Google, Resend, Statsig, and the configured AI model provider.
• When reasonably necessary to comply with law, respond to valid legal process, protect a person from harm, investigate fraud or abuse, or defend the rights and security of users and the Service.
• As part of a merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate confidentiality and notice where required.

AI-assisted features

AI features are optional. Prescription extraction sends redacted text. The AI assistant may send your message and any medication or prescription context you attach. Yearly summaries may use adherence statistics and related care data. Requests are processed by our backend and the configured AI model provider.

Signed-in AI conversations may be stored with your account so you can view or clear their history. Anonymous AI conversations are kept on your device, while limited server records are used for authentication, quotas, rate limiting, and content-free operational counts.

Retention and deletion

We retain account and health information while your account is active and as needed to provide the features you use. Retention periods vary by data type and operational need.

You can delete your account from the app’s Settings. Account deletion removes the account and associated active records from the primary application database. Limited information may remain for a reasonable period in backups, security records, notification-delivery logs, fraud-prevention records, de-identified aggregate statistics, or where retention is required by law. Files or copies already received by another person are outside our control.

Information stored only on your device remains there until you remove it, clear the app’s data, or uninstall the app. You may also contact us for help with an access or deletion request.

Your choices and rights

Depending on where you live, you may have rights to access, correct, export, delete, restrict, or object to certain processing of your personal information. We may need to verify your identity before completing a request.

• Review and update medication, profile, sharing, and notification settings in the Service.
• Revoke a caregiver connection or share grant at any time.
• Disable notifications in the Service or in your device settings.
• Clear AI history where that control is available.
• Delete your account in Settings or email us to submit a privacy request.

Security

We use administrative, technical, and organizational safeguards designed to protect information, including authenticated access, scoped sharing permissions, redaction, rate limits, and protections provided by our hosting and platform partners. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.

Keep your device and account credentials secure, review who has access to shared information, and contact us promptly if you believe your account or a share link has been compromised.

International processing and other people’s data

Our providers may process information in countries other than the one where you live. Where required, we use appropriate safeguards for those transfers.

Only provide information about another person when you are authorized to do so. A parent or legal guardian should manage any use involving a child who cannot legally consent on their own.

Changes to this Policy

We may update this Policy as the Service changes. We will update the date above and provide additional notice when required. Your continued use after an update means the revised Policy applies from its effective date.