Privacy Policy

1. Who we are

PillPal is a medication management application developed and operated in the United Kingdom. References to "we", "us", or "PillPal" in this policy refer to the PillPal service and its operators. You can contact us at privacy@pillpal.app.

2. What data we collect

To provide the PillPal service, we may collect:

• Account information: your name and email address when you register.
• Medication data: medicines, dosage schedules, and refill records you enter.
• Symptom logs: any symptoms or wellbeing notes you record in the app.
• Usage data: anonymised crash reports and feature usage to improve the app.
• Care circle data: names and contact details of carers or family members you invite, with their consent.

3. How we use your data

We use your data solely to provide and improve PillPal:

• To deliver medication reminders and refill alerts
• To surface symptom patterns relevant to your medications
• To share your dose status with carers you have explicitly authorised
• To send product updates if you have opted in
• To diagnose technical issues and improve reliability

We do not sell your data. We do not use your health information for advertising purposes.

4. Health data and UK GDPR

Medication and symptom information is classified as special category health data under UK GDPR. We process this data under Article 9(2)(a) — your explicit consent — which you provide by choosing to enter information into PillPal. You may withdraw consent and delete your data at any time from within the app or by contacting us.

5. Data storage and security

Your data is stored on secure cloud infrastructure. Data is encrypted in transit (TLS) and at rest. We retain your data for as long as your account is active. You can request deletion at any time.

6. Sharing with third parties

We do not share your personal or health data with third parties except:

• Infrastructure providers necessary to operate the service (under Data Processing Agreements)
• Carers you explicitly invite to your care circle
• Where required by law

7. Your rights

Under UK GDPR you have the right to:

• Access the data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Object to processing or request restriction
• Data portability — receive your data in a machine-readable format
• Withdraw consent at any time without affecting prior processing

To exercise any of these rights, contact privacy@pillpal.app. You also have the right to lodge a complaint with the ICO at ico.org.uk.

8. Children

PillPal is not intended for users under 13. We do not knowingly collect data from children.

9. Changes to this policy

We may update this policy as the product evolves. Significant changes will be communicated via the app or email. Continued use of PillPal after changes constitutes acceptance of the updated policy.