Privacy policy

The short version

• Your medicines, schedules and dose history are stored on your device. Pillbo works with no account and no network connection.
• Nothing about your health is sold, shared with advertisers or data brokers, or used to train any model.
• Backup and sharing are optional. Until you turn one of them on, no health information leaves your phone.
• You can delete everything at any time. See Delete your data.

Who we are

Pillbo is the data controller for the information described here. Write to support@trypillbo.com with any question about this policy or to exercise any of the rights below.

What Pillbo stores on your device

Everything the app needs to be useful is kept in a database on the phone itself: the medicines you add (name, strength, form, colour and notes), their schedules, your dose history, care profiles you create for other people, reminder settings, and any photograph you take of a label.

This is health information, and it is treated as sensitive. It is not transmitted anywhere unless one of the optional features below is switched on.

What leaves your device, and when

Reading a medicine label

If you photograph a box or a prescription, the image is sent to our processing service so the name, strength and form can be read back to you. The image and the text extracted from it are used for that request only, are not used to train a model, and are not retained after the request completes. If you would rather not send an image, type the medicine in instead — every field the scanner fills is one you can enter by hand.

Backup and sync (optional)

If you create an account, your records are stored on our servers (hosted by Supabase) so they survive a lost phone and can appear on another device. Your device remains the authoritative copy. This data is encrypted in transit and at rest by the hosting provider. It is not end-to-end encrypted, which means we are technically able to access it — we access it only to operate the service, to investigate a fault you report, or where the law requires it.

Sharing with someone you invite (optional)

When you share a profile, the person who accepts your invite link can see that profile’s upcoming doses and its record. They cannot see any other profile, and they cannot change your medicines. The invite link is the only thing that grants this access. Revoking sharing in the app stops the link working.

Accounts

An account stores your email address and authentication details. If you sign in with Apple or Google, we receive the identifier and email address that service gives us, and nothing else. Confirmation and password-reset emails are sent through our email provider.

Feedback and support

If you send feedback or contact support, we receive the message and any email address you choose to include. We use it to read your note, reply when requested, and improve Pillbo. Please do not include medicine names, prescriptions, or other health information.

Purchases

Subscriptions are sold and processed by Apple or Google. We never see your card details. Our subscription tooling (RevenueCat) receives a purchase identifier and your subscription status so the app knows what you are entitled to.

Diagnostics and product analytics

To find crashes and understand which parts of the app are confusing, Pillbo sends diagnostic events (Sentry) and product-usage events (PostHog). These record device and app details and which screens and actions were used. They do not include medicine names, strengths, schedules, dose history, notes, photographs, or the contents of any record. You can turn analytics off in the app’s settings.

Notifications

Reminders are scheduled on your device. Granting notification permission is optional; the rest of the app works without it.

Camera and photo access

The camera and photo library are used only when you choose to photograph or pick a medicine label. Pillbo does not browse your library in the background.

Children

Pillbo is not directed at children under 13 and we do not knowingly collect their information. An adult may of course keep a care profile for a child; that profile is ordinary app data belonging to the adult’s account.

How long things are kept

Data on your device stays until you delete it or remove the app. If you use backup, your records are kept until you delete your account, after which they are removed from our systems within 30 days except where we must retain something to meet a legal obligation. Diagnostic and analytics events are kept for up to 12 months.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your information, to object to or restrict certain processing, and to complain to a data protection authority. Most of these you can exercise directly in the app; for anything else, write to support@trypillbo.com and we will respond within 30 days.

Where we rely on a legal basis under the UK/EU GDPR: operating the app you installed is performed on the basis of our contract with you; optional analytics and marketing rely on your consent, which you can withdraw at any time; and the processing of health data for backup and sharing relies on your explicit consent, given when you turn those features on.

International transfers

Our service providers may process data in countries other than your own, including the United States. Where that happens we rely on the safeguards those providers offer, such as the European Commission’s standard contractual clauses.

Changes to this policy

If this policy changes in a way that affects what happens to your information, we will say so in the app before the change takes effect. The date at the top always reflects the current version.