Privacy Policy

1. Summary in one paragraph

Pillbox runs entirely on your iPhone. Every medication, dose log, history record, drug interaction warning, and PDF report is created on the device and stored there. We do not operate any server, analytics service, or advertising SDK. We have no infrastructure that can receive your data and no way to identify you.

2. What we do not collect

• We do not collect your name, email, phone number, IP address, advertising identifier, or any identifier of any kind.
• We do not collect usage telemetry — there is no analytics SDK, no crash reporter, no A/B-testing service in the binary.
• We do not collect the contents of your prescriptions, dosages, schedules, dose logs, or any other medication-related data. None of it leaves the device.
• We do not track you across apps or websites.
• We do not sell, rent, lease, or share any data with anyone, including health-data brokers.

3. What stays on your device

• Medication records (name, dosage, schedule, prescriber, pharmacy, refills, notes).
• Dose log entries (timestamps, status, skipped reasons).
• Adherence statistics computed locally.
• Photos you capture in the Scan-Label flow — they are passed to Apple's Vision framework on-device and then discarded unless you explicitly save the medication.
• Subscription receipts, validated via Apple's StoreKit. Apple verifies the receipt; we receive no personally identifiable information.

4. Permissions Pillbox can request

• Camera — to scan a prescription bottle label. The image is processed by Vision on-device and never uploaded.
• Notifications — to deliver dose reminders. Reminders are scheduled locally.
• HealthKit (Pro+) — to optionally write dose events to Apple Health. Disabled by default; you control the toggle.

5. iCloud and family sharing

Version 1.0 does not sync to iCloud. Version 1.1 will introduce optional CloudKit-Share-based family viewing, which uses Apple's end-to-end encrypted private database. We will still operate no server.

6. Drug data

The bundled drug dictionary and severe-interaction edge list are derived from US-government public-domain datasets (NLM RxNorm, DailyMed, openFDA NDC). They are baked into the app binary at build time and refreshed only via App Store updates. The app does not perform runtime fetches against any external drug database.

7. Children's data

Pillbox is rated 4+. We do not knowingly collect data from any user of any age. We also do not collect data from caregivers tracking medications for a child.

8. Your rights

Because we do not collect data, there is nothing for us to delete on our side. Within the app you can delete any medication or history record at any time. Uninstalling the app removes the entire dataset from the device.

9. Changes

If we ever change this policy in a material way, we will update the version on this page and ship a new App Store release. The Effective date above tells you when the current text took effect.

10. Contact

jasperabundant@gmail.com