Privacy policy

The short version

PillPal has no accounts. The medicines, vitamins and supplements you add, their schedules and your dose history are stored on your device and never uploaded. The app works fully offline. What does leave the device is limited to what is needed to run purchases, deliver notifications and understand, in aggregate, how the app is used.

Data stored on your device

• Pill names, dosages, colours, reminder times and days.
• Your dose history (taken and skipped doses), kept for about 13 months and clearable from Settings.
• Your onboarding answers (goal, frustrations, preferred times), used only to pre-fill the app.
• Preferences such as theme and language.

Deleting the app deletes all of it.

Data that leaves your device

• Anonymous device identity. PillPal derives an anonymous identifier from your device so purchases can be restored and notifications can be delivered. It is not linked to your name, email or phone number, because we never ask for them.
• Purchases. Subscriptions are processed by Apple or Google and managed through RevenueCat. We receive the purchase status and an anonymous customer id, never your payment details.
• Notifications. Dose reminders are local and never leave the phone. If you allow notifications, a push token is registered so we can send service messages; we do not send marketing pushes.
• Analytics. We use Amplitude to record anonymous product events such as "reminder scheduled" or "paywall viewed" so we can see which features matter. Events never contain pill names, dosages or your history.
• Attribution. On iOS, if you allow tracking in the App Tracking Transparency prompt, the Meta SDK may use your advertising identifier to attribute the install to an ad campaign. Declining changes nothing in the app.
• Remote configuration. The app reads a small set of feature flags (for example, the free pill limit) from Firebase. Nothing is written back.

What we never do

• We never sell or share your data with data brokers.
• We never upload your pills, schedules or history.
• We never give medical advice or share health information with third parties.

This website

The site is static. It uses Google Analytics (GA4) to count visits and to see which pages lead to a download, which sets cookies and shares your IP address and user agent with Google; you can opt out with Google's browser add-on or any tracker blocker, and the site works identically without it. Fonts are self-hosted, so no request goes to Google Fonts. Store badges link to Apple and Google, whose own policies apply once you leave.

Children

PillPal is not directed at children under 13 and we do not knowingly collect data from them.

Your rights and contact

Because there is no account, the data on your device is under your control: clear history from Settings or delete the app. To ask about anything in this policy, or to request deletion of the anonymous analytics tied to your device identifier, write to support@blackboxcode.io.