Effective October 12, 2026 · Last reviewed October 12, 2026

Privacy policy

Your medication data is some of the most sensitive information you carry. We treat it that way — on-device first, encrypted at rest, and never for sale.

The plain-English version

Pill Reminder Kit (“Pill Reminder Kit”, “we”, “us”) is published by Pill Reminder Kit, Inc. We make a medication reminder app for iOS and Android. This page explains what we collect, why, and what we will never do.

• Your medication list, schedule, doses, photos, and notes are stored on your device only. There is no account, no sign-in, and no server copy in v1.
• Optional AI features (label scanning, interaction and allergy checks, and the others listed below) send the minimum data each one needs to an AI provider through our secure proxy: Anthropic’s Claude first, with OpenAI and Google Gemini as backups. You consent to this in-app before any AI feature activates, and you can revoke consent at any time.
• We use privacy-safe analytics, crash diagnostics, and ad-campaign measurement — Google Analytics for Firebase, Firebase Crashlytics, and your device advertising identifier — to understand usage, fix bugs, and measure our own marketing. This never includes your medication names, doses, schedules, or any health content, and you can turn it off in Settings → Privacy.
• We do not sell, rent, or share your medication data with advertisers, data brokers, insurers, or employers. Ever.
• You can export a Doctor PDF or delete all data permanently from Settings → About → “Delete all data”.

What we collect

Medication data (on-device only)

Names, doses, strengths, schedules, reminder times, intake history, photos of bottles, and any notes you add. This data lives in an encrypted SQLite database on your device (iOS Data Protection / Android Keystore). We do not have a copy of it on any server.

Subscription state

If you purchase a subscription (weekly, monthly, or annual), your purchase receipt is handled by Apple or Google. RevenueCat — our in-app purchase processor — receives your purchase receipt and a RevenueCat anonymous app-user ID. RevenueCat does not receive your medication content.

AI feature usage (optional, explicit consent required)

Before you can use any AI feature, we ask for your explicit in-app consent. If you grant it, each request goes from the app to our proxy (a Firebase Cloud Function) and from there to one AI provider: Anthropic (Claude) first; if Claude is unavailable, OpenAI; and if neither answers, Google (Gemini). Only the data the feature needs is sent:

• Label scan and pill count: the photo you take of a medication label or of loose pills. The result (name, dose, instructions, or a count) is returned to your device only.
• Say your schedule: the text of the instruction you dictated (speech is turned into text on your device first), plus the names already on your list so a misheard name can be matched.
• Interaction check, medicine explainers, lifestyle and side-effect notes, and medicine levels: medication names (and, for some, strength and form). No photos, schedules, or personal details.
• Allergy check and “Can I take this?”: the medication being checked, the allergies and conditions you entered, and (for “Can I take this?”) the names of your other medications.
• Ask your history: your question and a short summary of your own dose log (adherence, logged symptoms and dates) that the app builds on your device.

Some of these checks let the AI provider run a web search to look up current drug information; the search queries it writes may contain medication names, never your personal details. Requests are processed and the answer returned; we do not store the photo, the text, or the answer on our servers, and none of the providers may use this data to train their models under their API terms. Each provider may keep request logs briefly for abuse monitoring, as its API terms allow.

You can revoke AI consent at any time in Settings → Privacy. If revoked, every AI feature falls back gracefully: photo capture returns to manual entry, and the AI checks are skipped until consent is re-granted.

Usage analytics (aggregate, non-identifying)

To understand how the app is used and where people get stuck, we collect aggregate, non-identifying usage analytics through Google Analytics for Firebase. This covers events such as which screens you view, completing onboarding, adding a medication, logging a dose, viewing the paywall, and subscribing — plus coarse device and app information (app version, device model, OS version, language, country, and a Google-generated app-instance ID).

Where we record that you have medications, it is only as a coarse, bucketed count (for example, “1–3” or “4–10”). We never send your medication names, doses, strengths, schedules, photos, notes, or any other health content to analytics.

Crash & performance diagnostics

We use Firebase Crashlytics to capture crash reports and stability data — stack traces, the device model, OS version, and app state at the time of a crash — so we can find and fix bugs. Crash reports contain no medication or health content.

Advertising & campaign measurement

Pill Reminder Kit shows no ads inside the app. We do, however, run our own marketing campaigns (for example, Google Ads) and need to know which campaigns bring people who find the app useful. To measure this, we use analytics together with your device advertising identifier (IDFA on iOS, Advertising ID on Android) to attribute app installs and subscriptions to a campaign. This measurement is processed by Google (Google Analytics and Google Ads).

We neveruse your medication or health data for advertising, we don’t target ads at you inside the app, and we don’t sell your data to advertisers or data brokers.

Consent and your choices

You stay in control of analytics, diagnostics, and ad measurement:

• iOS App Tracking Transparency:before using your advertising identifier (IDFA), we show Apple’s tracking prompt. If you decline, we do not access the IDFA, and analytics continues in a privacy-safe, non-tracking mode.
• Opt out anytime: turn off Settings → Privacy → Usage analytics to stop analytics, diagnostics, and ad-measurement collection entirely.
• EEA & UK: we use Google Consent Mode v2. Analytics and ad-measurement storage stay denied by default until you give explicit consent on the first screen of onboarding. Elsewhere analytics is on by default, and you can opt out at any time as above.

What we do not collect

• Your real name, address, date of birth, or social ID.
• Your email address (unless you send in-app feedback or contact support).
• Your location, contacts, or photo library outside the bottle photos you take in-app.
• Analytics or crash data tied to your medication content or any health data.
• Health insurance, pharmacy, or provider identifiers.
• Your advertising identifier without your permission (iOS ATT / opt-out).

How we use your data

We use the data above strictly to provide and improve the app. That means scheduling your reminders, surfacing your history, and generating your doctor reports. We never use your medication or health data to train third-party AI models, to target ads, or to sell to anyone. We do use the aggregate, non-identifying analytics described above to improve the app and to measure our own marketing campaigns. The drug-interaction check is informational only and not medical advice — always confirm with your pharmacist or physician.

Photo-to-pill capture

When you photograph a medication label and have granted AI consent, the image is sent over a TLS connection to Anthropic (Claude) — or, if Claude is unavailable, to OpenAI or Google (Gemini) — processed, and discarded. The image is never stored on our servers. The AI proxy runs on Google Cloud (Firebase Cloud Functions, us-central1, project pillreminder-prod). Access to the proxy is authenticated via Firebase App Check (App Attest on iOS, Play Integrity on Android) — a device-attestation mechanism that sends no personally identifiable information.

Per Apple App Store guideline 5.1.2(i), we name Anthropic, OpenAI and Google explicitly as the AI sub-processors for this feature. Before sending any pill-bottle photo to them, we ask you to consent in-app. You can revoke consent at any time, in which case the photo-to-pill feature falls back to manual entry.

Children

The app is intended for adults managing their own medications or those of a family member. We do not knowingly collect data directly from children under 13.

Your rights

You can:

• Export your medication history as a Doctor PDF from Settings → Doctor report.
• Delete all your data permanently from the device: Settings → About → “Delete all data”.
• Revoke AI consent for every AI feature in Settings → Privacy.
• Opt out of analytics, diagnostics, and ad measurement anytime in Settings → Privacy → Usage analytics. On iOS you can also withdraw advertising-identifier access via iOS Settings → Privacy & Security → Tracking.
• Request a record of any server-side data we hold by writing to privacy@pillreminderkit.app. (The only server-side data we hold is your RevenueCat entitlement state, a daily AI-usage counter keyed to a one-way hash of your anonymous RevenueCat ID, and any feedback messages you send us.)
• EU/UK residents have rights under GDPR; California residents under CCPA. Email us and we’ll honor them within 30 days.

Security

All data on your device is protected by the OS-level secure storage layer: iOS Data Protection (tied to your device passcode / Face ID / Touch ID) and Android Keystore. We do not hold a server-side master key for your medication data — meaning even we cannot read it. AI proxy calls are encrypted in transit with TLS 1.3.

Sub-processors

We share the minimum necessary data with the following vendors. None of them receive your full medication list as structured data, beyond the specific scopes described below.

Changes to this policy

If we make material changes, we’ll surface a notice in the app and update the “last reviewed” date at the top of this page. Continued use of the app after a change indicates acceptance.

Get in touch

Privacy questions, concerns, or requests: privacy@pillreminderkit.app. We respond to every email; usually within two business days.