CarePill Privacy Policy

For the Android app CarePill (package name com.carepill.app)
Last updated: 2026-10-13 · Effective: 2026-10-13

Summary: CarePill has no account and no sign-in. The developer does not operate any server and does not receive or store your medication data. Medicines, schedules, dose records and conversations are stored only on your phone. Only when you choose to use the AI assistant, photo recognition or a weekly report is the related content sent to the AI service you configure yourself; barcode scanning sends only the product barcode number to the U.S. openFDA service.

1. Who we are

CarePill (“the app”) is a local-first medication reminder and management app developed and published by [To be filled: developer / publisher name]. For any question, complaint or request about this policy or your data, contact: [To be filled: contact email].

2. Data stored on your phone

The following is stored locally on your device (the app’s private database and secure storage) and is not uploaded to the developer:

Medicines, schedules, doses and times;
Dose records (taken / skipped / missed) and adherence statistics;
AI chat content, chat summaries, long-term memories you ask the assistant to keep, and chat photos;
Your settings (font size, reminders, speech, language);
AI service URLs, model names and API keys (keys are kept in the system secure storage);
Temporary voice recordings, used only for on-device offline recognition. The speech diagnostics page keeps only the latest test recording (max 60 s), cleared on re-recording, leaving the page or restarting.

You can delete these at any time inside the app (delete a medicine, clear the chat, delete memories, delete a model configuration); uninstalling the app removes all local data.

3. Data that leaves your phone

3.1 AI features — sent to the AI service you configure

The app ships no AI service and no developer-operated AI server. When you use the AI assistant, take a photo of a medicine box, or generate a weekly report, the app sends the following to the service address you entered in Settings → AI models (for example DeepSeek, Qwen/DashScope, Kimi, Zhipu GLM, OpenRouter, or an Ollama instance on your own device or LAN):

Your questions and the conversation context, which may contain medicine names, doses, dose times and dose records (health information);
Photos you choose to send or capture (for reading medicine boxes or leaflets);
Medication statistics read from the local database that are needed to answer (e.g. a weekly report).

This data is processed by that provider under its own privacy policy and may be transferred outside your country. We cannot access, control or delete data held by that provider; please contact the provider to access or delete it. AI features are optional: without any AI configuration, reminders, dose records, barcode scanning and offline speech all work.

3.2 Barcode lookup — only the product barcode goes to openFDA

Camera images are decoded on your phone. The app sends only the product barcode number (UPC/GTIN and the lookup term) to openFDA (api.fda.gov), a public service of the U.S. Food and Drug Administration, to look up drug label data. No photos, traceability codes, batch or serial numbers, and no personal identifiers are sent.

3.3 Barcode scanning component (Google ML Kit)

On Android, barcode scanning uses Google ML Kit, which processes images on the device. The component may send usage and performance diagnostics to Google; these do not include image content or your medication data.

3.4 Ordinary network information

As with any network request, the services above (your AI provider, openFDA, Google ML Kit) receive connection information such as your IP address and request time. The app contains no advertising, analytics or crash-reporting SDK and collects no advertising identifier.

4. Data we do not collect

No name, phone number or email — the app has no accounts;
No location, contacts, SMS or call logs;
No advertising identifier, no ad targeting, no profiling.

5. Permissions and why

Camera: scan product barcodes, photograph medicine boxes/leaflets (photos leave the device only when you send them).
Microphone: voice input and offline speech recognition; audio is processed on the device and is not uploaded.
Notifications: dose reminders and missed-dose reminders.
Exact alarms and full-screen (lock-screen) reminders: show the reminder at your scheduled time, and repeat if not acknowledged.
Boot completed: restore scheduled reminders after a restart.
Battery optimization exemption: keep reminders reliable on phones that restrict background apps (granted by you in system settings).
Bluetooth: used when your audio input is a Bluetooth microphone/headset, for voice capture and announcements; not for scanning nearby devices.
Network: reach your configured AI service and openFDA; core features work offline.

6. Retention and deletion

Local data is kept until you delete it or uninstall the app; the app provides in-app deletion for medicines, chats, memories, model configurations and keys.
Backup, log and speech-diagnostic files are saved where you choose when you export them; they are not uploaded to the developer.
For data already sent to a third-party AI service, use that provider’s privacy policy to request access or deletion.

7. Backup and export

“Export backup (JSON)”, “Export logs” and “Export speech diagnostics” are always started by you and saved to a location you choose. Backups exclude API keys by default; if an option to include keys is ever offered, it requires an explicit second confirmation. The developer does not receive these files.

8. Security

API keys are stored in the system secure storage and are neither uploaded nor written into backups (unless you explicitly choose so). All preset cloud AI endpoints use HTTPS; local/LAN models (for example Ollama) are reached over http:// and are not encrypted, so use them only on a trusted network. Keep your phone lock and keys safe, and delete model configurations you no longer use.

9. Children

The app is intended for adults aged 18 and over (mainly older adults and their family members). It is not directed to children and does not knowingly collect personal information from children.

10. Medical disclaimer

The app is not a medical device. It is not intended to diagnose, treat, cure or prevent any disease and does not replace a doctor, pharmacist or prescription. Reminders and AI answers are for reference only; follow your clinician’s instructions for medication, dose changes and stopping treatment. In an emergency (chest pain, trouble breathing, a fall), seek medical care or call your local emergency number immediately. Some phones restrict background apps and may delay reminders; follow the in-app “Phone setup guide” and verify with “Test reminder”.

11. Changes to this policy

When this policy changes, the new version is published on this page with an updated date; material changes are also highlighted in the app. The in-app “Settings → About → Privacy and disclaimer” page covers the same key points as this policy (shown in your app language).