Privacy Policy

01Who We Are

Pill Assist is published by Dedalva LLC ("we", "us", or "our"). This Privacy Policy explains how we collect, use, store, and protect information when you use the Pill Assist mobile application ("App") on Android or iOS.

If you have any questions or concerns about this Privacy Policy or your personal data, please contact us at the address above.

02Scope

This Policy applies to all users of Pill Assist regardless of where you are located. We have written it to comply with:

• The EU General Data Protection Regulation (GDPR — Regulation 2016/679)
• The UK General Data Protection Regulation (UK GDPR) and UK Data Protection Act 2018
• The Australian Privacy Act 1988 and Australian Privacy Principles (APPs)
• Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial laws
• The California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and other applicable US state privacy laws

03Information We Collect

3a. Information You Provide Directly

When you use Pill Assist, you enter information that is stored locally on your device only. This includes:

3b. Information Collected Automatically (Ads Flavor Only)

If you use the version of the App that includes advertising ("Ads" build), Google AdMob collects certain information automatically to serve advertisements. This may include:

• Device identifiers (Advertising ID / IDFA)
• IP address (approximate location)
• Device type, operating system version, and language
• App interaction data (ad impressions, clicks)

This data collection is subject to your consent, which is requested through a consent dialog (powered by Google's User Messaging Platform) when you first launch the Ads build. The No-Ads build of Pill Assist does not display advertising and does not enable this data collection.

3c. Problem Reports & Feedback You Submit

Pill Assist includes an optional “Report a Problem” feature (Settings → Help & Feedback). It is entirely voluntary. When you submit a report, the App prepares an email pre-filled with your description and opens your device's native mail app — you review it and tap Send to transmit it. No data leaves your device unless you complete that final Send step. If you choose to send, the following is included:

• The description you type and the optional category you choose (Bug, Confusing, or Suggestion)
• An optional screenshot, only if you choose to attach one
• Basic technical diagnostics attached automatically: the App version, your device model, and operating system version

We deliberately do not include your medication names, dose logs, profile names, pharmacy details, or any other health information in a problem report. Please avoid typing sensitive personal or health details into the description or capturing them in a screenshot, as the report is sent to us.

3d. Information We Do Not Collect

Apart from the voluntary problem reports (§3c), we do not collect, transmit, or store your data on our servers. Specifically:

• We have no servers or cloud storage for your health, medication, profile, or pharmacy data — it stays on your device
• We do not collect your email address, phone number, or other contact details (a problem report includes no contact information unless you choose to type it)
• We do not track your location
• We do not collect financial or payment information
• We do not use advertising or behavioural analytics SDKs to profile you
• We do not collect, transmit, or store any crash or error diagnostics — no crash-reporting SDK or service is used
• We do not create user accounts

04How We Use Your Information

Data You Enter (All Users)

Your health, profile, pharmacy, and photo data is used solely to operate the App on your device:

• Display your medication schedules, dose logs, and reminders
• Schedule local push notifications for medication reminders
• Generate medication reports and adherence summaries within the App
• Enable the optional encrypted export of your data to a file (.maexp) for backup or transfer to another device — this transfer is initiated entirely by you

Your data never leaves your device unless you explicitly choose to share an export file.

Problem Reports & Feedback (When You Submit One)

If you send a problem report (§3c), we use the description, optional category, optional screenshot, and technical diagnostics solely to reproduce, diagnose, and fix the issue you reported and to improve the App. We do not use problem reports for advertising or profiling, and we do not sell or share them.

Advertising Data (Ads Flavor Only, with Consent)

If you consent to personalised advertising, AdMob uses the data listed in §3b to serve relevant ads. If you decline personalised advertising (or are outside a region where consent is required), non-personalised ads may still be shown; these use less data. You can withdraw your consent at any time (see §10).

05Legal Basis for Processing (GDPR & UK GDPR)

For users in the European Economic Area (EEA) and United Kingdom, we rely on the following legal bases:

06Data Storage and Security

All data you enter into Pill Assist is stored exclusively on your device. We use the following security measures:

• Encryption at rest: The App's database is encrypted using SQLCipher (AES-256), a widely used open-source database encryption library.
• Secure key storage: The database encryption key is stored in Android's EncryptedSharedPreferences (backed by the Android Keystore) or iOS's Keychain.
• App lock: An optional PIN/biometric lock prevents access if your device is unlocked by someone else.
• Encrypted exports: Data export files (.maexp) are encrypted with AES-256-GCM using a password you choose. We do not have access to these passwords.

Because data is stored locally, the security of your information also depends on your device's own security features (screen lock, OS updates, etc.).

07Data Sharing and Third Parties

We do not sell, rent, or share your personal data with third parties for their own purposes, except as described below.

Google AdMob (Ads Flavor Only, with Consent)

The Ads build of the App includes Google AdMob. When you consent to advertising, Google may collect and process data as described in the Google Privacy Policy. Google acts as an independent data controller for the data it collects via AdMob. We have no access to, and are not responsible for, the data Google collects for advertising purposes.

• Google's privacy policy: policies.google.com/privacy
• Google's data safety information: support.google.com/admob/answer/6128543

Legal Disclosures

We may disclose information if required to do so by law, regulation, court order, or other legal process, or if we reasonably believe disclosure is necessary to protect the rights, property, or safety of Dedalva LLC, our users, or the public.

Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of our assets, user data (which, as noted, is stored on your device rather than our servers) would not be transferred, as we do not hold it.

08Data Retention

Because all data is stored on your device:

• Your data persists until you delete the App or manually clear App data through your device settings.
• Uninstalling the App on Android deletes the encrypted database. On iOS, App data is also deleted on uninstall.
• Backups: Some device backup systems (iCloud on iOS, Google One on Android) may back up App data in encrypted form. Pill Assist's Android build excludes the encrypted database from backup (as the key is device-bound and would not be restorable) but includes certain preferences.
• Exported files: If you export a .maexp file and share it, you are responsible for managing that file and any copies of it.
• We do not retain any of your personal data on our servers because we do not receive it.

09International Data Transfers

Your personal health and profile data does not leave your device and is therefore not subject to international transfer.

AdMob data (Ads flavor only, with consent) may be transferred to and processed in the United States and other countries where Google operates data centres. Google relies on Standard Contractual Clauses and other transfer mechanisms approved under GDPR for these transfers. See Google's Privacy & Terms for details.

10Your Rights

Regardless of where you are located, you may contact us at [email protected] with any privacy concerns. Your specific rights depend on your jurisdiction:

EU / EEA (GDPR) and United Kingdom (UK GDPR)

You have the right to:

• Access — obtain a copy of the personal data we hold about you
• Rectification — have inaccurate data corrected
• Erasure ("right to be forgotten") — request deletion of your data
• Restriction — ask us to restrict processing in certain circumstances
• Data portability — receive your data in a structured, commonly used format
• Object — object to processing based on legitimate interests
• Withdraw consent — where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing
• Lodge a complaint — with your national supervisory authority (e.g. the ICO in the UK, or your EU Member State's data protection authority)

Because your data is stored on your device, most of these rights can be exercised directly within the App (editing or deleting records, exporting data, or uninstalling the App). For requests relating to AdMob data, please refer to Google's privacy controls.

California (CCPA / CPRA)

California residents have the right to:

• Know what personal information we collect, use, disclose, or sell
• Delete personal information we have collected (note: we hold none on our servers)
• Correct inaccurate personal information
• Opt out of the sale or sharing of personal information — we do not sell or share personal information for cross-context behavioural advertising outside of AdMob, which is subject to your consent
• Limit use of sensitive personal information — your health data is not used for any purpose other than operating the App
• Non-discrimination for exercising your rights

To exercise these rights, contact us at [email protected]. We will respond within 45 days.

Canada (PIPEDA)

We collect only the minimum personal information needed to operate the App. You have the right to:

• Access your personal information held by us
• Withdraw consent to the collection or use of your personal information at any time (subject to legal or contractual restrictions and reasonable notice)
• Challenge our compliance with PIPEDA by contacting us, and if not resolved, by filing a complaint with the Office of the Privacy Commissioner of Canada (www.priv.gc.ca)

Australia (Privacy Act 1988 / Australian Privacy Principles)

Under the APPs you have the right to:

• Access the personal information we hold about you (APP 12)
• Request correction of personal information that is inaccurate, out of date, incomplete, irrelevant, or misleading (APP 13)
• Know why a request for access or correction is refused

Because we hold no personal information on our servers, these rights are most practically exercised directly on your device. You may also contact us at [email protected]. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (www.oaic.gov.au).

11Children's Privacy

Pill Assist is not directed at children under the age of 13 (or under 16 where required by local law, including in the EU and UK). We do not knowingly collect personal information from children under these ages. If you are a parent or guardian and believe your child has entered information into the App, you can delete the App or clear its data to remove all locally stored information. Please also contact us at [email protected].

12Health Data — Additional Disclosures

We recognise that medication and health information is among the most sensitive personal data that exists. We want to be clear:

• Your health data is used only to operate the App on your device
• It is never analysed, sold, or shared with advertisers, insurers, employers, or any other party
• It is never transmitted to us or any third party (except in AdMob's advertising data — which does not include your medication records)
• The encrypted database format means that even if your device is accessed without your permission, your data is protected by AES-256 encryption

13Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For material changes that affect how we handle your data, we will provide notice within the App.

Your continued use of Pill Assist after changes become effective constitutes your acceptance of the revised Policy.

14Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact:

We aim to respond to all privacy enquiries within 30 days. EU/UK users with unresolved concerns may also contact their national data protection authority.