Privacy Policy

01Who We Are

Pill Assist is published by Dedalva LLC ("we", "us", or "our"). This Privacy Policy explains how we collect, use, store, and protect information when you use the Pill Assist mobile application ("App") on Android or iOS.

If you have any questions or concerns about this Privacy Policy or your personal data, please contact us at the address above.

02Scope

This Policy applies to all users of Pill Assist regardless of where you are located. We have written it to comply with:

• The EU General Data Protection Regulation (GDPR — Regulation 2016/679)
• The UK General Data Protection Regulation (UK GDPR) and UK Data Protection Act 2018
• The Australian Privacy Act 1988 and Australian Privacy Principles (APPs)
• Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial laws
• The California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and other applicable US state privacy laws

03Information We Collect

3a. Information You Provide Directly

When you use Pill Assist, you enter information that is stored locally on your device only. This includes:

3b. Information Collected Automatically (Ads Flavor Only)

If you use the version of the App that includes advertising ("Ads" build), Google AdMob collects certain information automatically to serve advertisements. This may include:

• Device and advertising identifiers (e.g. Android Advertising ID, App Set ID)
• Approximate location (estimated from IP address; no precise/GPS location)
• App interactions (ad views and taps)
• Diagnostic information (performance and crash-related signals from the ad SDK)

This data collection is subject to your consent, which is requested through a consent dialog (powered by Google's User Messaging Platform) when you first launch the Ads build. The No-Ads build of Pill Assist does not display advertising and does not enable this data collection.

3c. Problem Reports & Feedback You Submit

Pill Assist includes an optional “Report a Problem” feature (Settings → Help & Feedback). It is entirely voluntary. When you submit a report, the App prepares an email pre-filled with your description and opens your device's native mail app — you review it and tap Send to transmit it. No data leaves your device unless you complete that final Send step. If you choose to send, the following is included:

• The description you type and the optional category you choose (Bug, Confusing, or Suggestion)
• An optional screenshot, only if you choose to attach one
• Basic technical diagnostics attached automatically: the App version, your device model, and operating system version

We deliberately do not include your medication names, dose logs, profile names, pharmacy details, or any other health information in a problem report. Please avoid typing sensitive personal or health details into the description or capturing them in a screenshot, as the report is sent to us.

3d. Information We Do Not Collect

Apart from the voluntary problem reports (§3c), we do not collect, transmit, or store your data on our servers. Specifically:

• We have no servers or cloud storage for your health, medication, profile, or pharmacy data — it stays on your device
• We do not collect your email address, phone number, or other contact details (a problem report includes no contact information unless you choose to type it)
• We do not track your location
• We do not collect financial or payment information
• We do not use advertising or behavioural analytics SDKs to profile you
• We do not collect, transmit, or store any crash or error diagnostics — no crash-reporting SDK or service is used
• We do not create user accounts

04How We Use Your Information

Data You Enter (All Users)

Your health, profile, pharmacy, and photo data is used solely to operate the App on your device:

• Display your medication schedules, dose logs, and reminders
• Schedule local push notifications for medication reminders
• Generate medication reports and adherence summaries within the App
• Enable the optional encrypted export of your data to a file (.maexp) for backup or transfer to another device — this transfer is initiated entirely by you

Your data never leaves your device unless you explicitly choose to share an export file.

Problem Reports & Feedback (When You Submit One)

If you send a problem report (§3c), we use the description, optional category, optional screenshot, and technical diagnostics solely to reproduce, diagnose, and fix the issue you reported and to improve the App. We do not use problem reports for advertising or profiling, and we do not sell or share them.

Advertising Data (Ads Flavor Only, with Consent)

If you consent to personalised advertising, AdMob uses the data listed in §3b to serve relevant ads. If you decline personalised advertising (or are outside a region where consent is required), non-personalised ads may still be shown; these use less data. You can withdraw your consent at any time (see §10).

05Legal Basis for Processing (GDPR & UK GDPR)

For users in the European Economic Area (EEA) and United Kingdom, we rely on the following legal bases:

06Data Storage and Security

All data you enter into Pill Assist is stored exclusively on your device. We use the following security measures:

• Encryption at rest: The App's database is encrypted using SQLCipher (AES-256), a widely used open-source database encryption library.
• Secure key storage: The database encryption key is stored in Android's EncryptedSharedPreferences (backed by the Android Keystore) or iOS's Keychain.
• App lock: An optional PIN/biometric lock prevents access if your device is unlocked by someone else.
• Encrypted exports: Data export files (.maexp) are encrypted with AES-256-GCM using a password you choose. We do not have access to these passwords.

Because data is stored locally, the security of your information also depends on your device's own security features (screen lock, OS updates, etc.).

07Data Sharing and Third Parties

We do not sell, rent, or share your personal data with third parties for their own purposes, except as described below.

Advertising (Google AdMob)

The free, ad-supported version of Pill Assist displays banner ads through Google AdMob, a service provided by Google. Our own paid / ad-free version does not include advertising and does not collect or share any of the data described in this section.

To serve ads, the Google Mobile Ads SDK automatically collects and shares the following data with Google and its advertising partners. Pill Assist does not choose, see, or receive this data — it is handled by Google:

• Device and advertising identifiers — such as the Android Advertising ID and App Set ID.
• Approximate location — estimated from your device's IP address (we do not request or use precise/GPS location).
• App interactions — such as ad views and taps.
• Diagnostic information — performance and crash-related signals from the ad SDK.

Google uses this data to serve and measure ads, for analytics, for app functionality, and for fraud prevention, security, and compliance. It is transmitted securely (encrypted in transit using TLS). Pill Assist never shares your medications, supplements, people, pharmacies, or any health or profile information with Google or any advertiser — that data stays encrypted on your device and is never transmitted for advertising.

Where required by law (for example, in the EEA and the UK), we ask for your consent before serving personalized ads. You can also limit ad tracking at any time by resetting or deleting your Advertising ID in your device's settings (Settings → Google → Ads on Android). Uninstalling the app stops all data collection by the ad SDK. See our Data Deletion page for details.

For more information on how Google collects and uses this data, see Google's Privacy Policy and How Google uses information from sites or apps that use its services.

Legal Disclosures

We may disclose information if required to do so by law, regulation, court order, or other legal process, or if we reasonably believe disclosure is necessary to protect the rights, property, or safety of Dedalva LLC, our users, or the public.

Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of our assets, user data (which, as noted, is stored on your device rather than our servers) would not be transferred, as we do not hold it.

08Data Retention

Because all data is stored on your device:

• Your data persists until you delete the App or manually clear App data through your device settings.
• Uninstalling the App on Android deletes the encrypted database. On iOS, App data is also deleted on uninstall.
• Backups: Some device backup systems (iCloud on iOS, Google One on Android) may back up App data in encrypted form. Pill Assist's Android build excludes the encrypted database from backup (as the key is device-bound and would not be restorable) but includes certain preferences.
• Exported files: If you export a .maexp file and share it, you are responsible for managing that file and any copies of it.
• We do not retain any of your personal data on our servers because we do not receive it.

09International Data Transfers

Your personal health and profile data does not leave your device and is therefore not subject to international transfer.

AdMob data (Ads flavor only, with consent) may be transferred to and processed in the United States and other countries where Google operates data centres. Google relies on Standard Contractual Clauses and other transfer mechanisms approved under GDPR for these transfers. See Google's Privacy & Terms for details.

10Your Rights

Regardless of where you are located, you may contact us at [email protected] with any privacy concerns. Your specific rights depend on your jurisdiction:

EU / EEA (GDPR) and United Kingdom (UK GDPR)

You have the right to:

• Access — obtain a copy of the personal data we hold about you
• Rectification — have inaccurate data corrected
• Erasure ("right to be forgotten") — request deletion of your data
• Restriction — ask us to restrict processing in certain circumstances
• Data portability — receive your data in a structured, commonly used format
• Object — object to processing based on legitimate interests
• Withdraw consent — where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing
• Lodge a complaint — with your national supervisory authority (e.g. the ICO in the UK, or your EU Member State's data protection authority)

Because your data is stored on your device, most of these rights can be exercised directly within the App (editing or deleting records, exporting data, or uninstalling the App). For requests relating to AdMob data, please refer to Google's privacy controls.

California (CCPA / CPRA)

California residents have the right to:

• Know what personal information we collect, use, disclose, or sell
• Delete personal information we have collected (note: we hold none on our servers)
• Correct inaccurate personal information
• Opt out of the sale or sharing of personal information — we do not sell or share personal information for cross-context behavioural advertising outside of AdMob, which is subject to your consent
• Limit use of sensitive personal information — your health data is not used for any purpose other than operating the App
• Non-discrimination for exercising your rights

To exercise these rights, contact us at [email protected]. We will respond within 45 days.

Canada (PIPEDA)

We collect only the minimum personal information needed to operate the App. You have the right to:

• Access your personal information held by us
• Withdraw consent to the collection or use of your personal information at any time (subject to legal or contractual restrictions and reasonable notice)
• Challenge our compliance with PIPEDA by contacting us, and if not resolved, by filing a complaint with the Office of the Privacy Commissioner of Canada (www.priv.gc.ca)

Australia (Privacy Act 1988 / Australian Privacy Principles)

Under the APPs you have the right to:

• Access the personal information we hold about you (APP 12)
• Request correction of personal information that is inaccurate, out of date, incomplete, irrelevant, or misleading (APP 13)
• Know why a request for access or correction is refused

Because we hold no personal information on our servers, these rights are most practically exercised directly on your device. You may also contact us at [email protected]. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (www.oaic.gov.au).

11Children's Privacy

Pill Assist is not directed at children under the age of 13 (or under 16 where required by local law, including in the EU and UK). We do not knowingly collect personal information from children under these ages. If you are a parent or guardian and believe your child has entered information into the App, you can delete the App or clear its data to remove all locally stored information. Please also contact us at [email protected].

12Health Data — Additional Disclosures

We recognise that medication and health information is among the most sensitive personal data that exists. We want to be clear:

• Your health data is used only to operate the App on your device
• It is never analysed, sold, or shared with advertisers, insurers, employers, or any other party
• It is never transmitted to us or any third party (except in AdMob's advertising data — which does not include your medication records)
• The encrypted database format means that even if your device is accessed without your permission, your data is protected by AES-256 encryption

13Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For material changes that affect how we handle your data, we will provide notice within the App.

Your continued use of Pill Assist after changes become effective constitutes your acceptance of the revised Policy.

14Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact:

We aim to respond to all privacy enquiries within 30 days. EU/UK users with unresolved concerns may also contact their national data protection authority.