Privacy Policy

1Who we are

PillPal (“we”, “us”) provides a medication-reminder web app for seniors and a dashboard for the family members who care for them. This policy explains what information the app handles and why. For any privacy question, contact us at support@pilpilar.pages.dev.

2Information we collect

• Account details — the email address and name you use to create a family account.
• Care information you enter — a loved one’s name, age, health conditions, their medications (name, dose, times, an optional pill photo), and stock counts.
• Dose activity — when a dose is taken, skipped, or missed, and the time it was recorded.
• Optional dose proof — if you choose to record it, a short photo/video that a dose was taken (video recordings turn on the microphone too, so they include audio).
• Notification data — if you enable phone alerts, a push-subscription token for your device.
• Home location — only if you choose to capture it, to help family in an emergency.
• Technical data — basic device/browser information needed to operate and secure the service.

3How we use it

Solely to run the service: to show reminders, record dose history, alert family members about missed doses, sync data across a household’s devices, and keep the app secure. We do not sell your data or use it for advertising.

4Service providers

We use trusted processors to operate PillPal, and share only what each needs to do its job:

• Supabase — database, authentication, and file storage (hosts your account and care data, including any medication photo or profile picture you upload).
• Cloudflare — website hosting and serverless functions; Cloudflare Workers KV also holds household sync data and, if you record one, your dose-proof clip.
• Tap Payments — takes the payment if you subscribe. You enter your card or KNET details on Tap’s own hosted payment page, never on a PillPal page. What we send Tap is the amount and currency, the plan name, the caregiver name saved in your settings (or the part of your email address before the “@” if you have not set one), your account email address, and our internal household and account ids; we keep a copy of Tap’s record of each charge for reconciliation and disputes.
• OpenRouter — routes two AI features. For the in-app assistant (“Pip”), the messages you type plus relevant care context (the patient’s name, age and conditions; medication names, doses, instructions and times; today’s schedule; a 7‑day adherence summary; and whether emergency alerts are on) are sent to generate a response, and if you ask about a medication an illustrative picture may be generated from its name alone — never a photo of you or your real pill. For the optional medication-label scanner, a photo of the medicine package or pills that you choose to scan is sent to read the printed name, dose, form and quantity. OpenRouter forwards these requests to an underlying AI model that it selects and that we can change; as configured in our code at the time of writing, that is an OpenAI model for the assistant and the label scanner, and a Google model for the illustrative medication pictures.
• ElevenLabs — optional human-voice reminders (the text of the reminder, which names the medication and the dose, is sent to synthesize the audio).
• Resend — sends email: missed-dose alerts to a household’s caregivers, the adherence summary if you ask for one, and messages you send us through the contact form. A missed-dose email names the person and the medication concerned and the time it was due.
• U.S. National Library of Medicine (DailyMed) — when the app offers a real product photo of a medication, our server sends that medication’s name to DailyMed’s public drug-label service to look one up. Only the name is sent; no photo of you or of your own pills is involved.
• Expo push service — delivers missed-dose alerts to the PillPal phone app. It receives your device’s push token and the alert text, which for a single missed dose names the person and the medication.
• Your browser’s push service (Google, Mozilla, Apple or whoever makes your browser) — delivers missed-dose alerts if you turn on browser notifications. It receives your subscription address and an alert encrypted for your device, so it can see that a message was sent to you but not read its contents.
• Google Fonts and jsDelivr — serve the typefaces and one code library that our pages load into your browser. Like any file your browser fetches, this shows them your IP address and browser details. They receive no care data.

5Storage & security

Data is stored in your Supabase project and isolated per household using row-level security, so one family cannot see another’s data. Traffic is encrypted in transit (HTTPS). If you record a dose-proof clip, it is stored as a private object in Cloudflare Workers KV and is served only to a signed-in member of your household, through an endpoint that checks your account’s session token — never as a public or shareable link. No system is perfectly secure, but we take reasonable measures to protect your information.

6Retention

We keep your data for as long as your account is active. Dose-proof clips are kept for up to 30 days and then automatically deleted. You can delete a loved one’s profile, individual records, or ask us to delete your account and associated data at any time — deleting a loved one or your account also deletes any of their dose-proof clips still in storage, not just the database rows that pointed at them. Deleting your account covers your profile and sign-in identity, every household you own together with its members, the people cared for, their medications, dose history, alerts, invites, emergency settings, subscription record and notification registrations, and the files you uploaded — medication photos and profile pictures; a dose-proof clip also expires by itself 30 days after it is recorded, without anyone asking (clips recorded before 13 August 2026 expire on the longer 120-day schedule they were stored with).

7Your rights

You may request access to, correction of, export of, or deletion of your personal data. To make a request, email support@pilpilar.pages.dev and we will respond within a reasonable time.

8Children

PillPal is intended for adults (caregivers and the seniors they support). It is not directed at children.

9Changes

We may update this policy as the service evolves. Material changes will be reflected by the “last updated” date above.

10Contact

Questions about privacy? Email support@pilpilar.pages.dev.