**App identifier: com.d73.pillbox**  
Effective date: October 12, 2026

Pill Identifier & Reminder (“Pillbox”, “the App”) is operated by **Lakhwani Haresh** (“we”, “us”). The App reads pill and medicine-label photos, saves your medicine list, and helps you remember the times you choose.

**No app account is required. There are no ads or advertising tracking. Saved medicine records stay on your device.** Optional photo identification and subscription services process information as explained below.

## At a Glance

✅ No app registration, email address, or phone number required  
✅ Saved medicines, notes, photos, schedules, and Taken records are stored on your device  
✅ Manual medicine entry and reminders work without an AI upload or subscription  
✅ Photo identification asks for your agreement before uploading  
✅ **Delete your data** and **Export my records** are available in Settings

❌ No ads or advertising identifiers  
❌ No tracking across other apps or websites for advertising  
❌ No selling or sharing medication records for marketing  
❌ No microphone, location, contacts, or Apple Health access

**Purchase information is used for subscription verification and purchase analytics.** Uploaded photos and service records may be retained by providers; local deletion does not erase every provider-held record.

## What Stays on Your Phone

The App stores these records locally:

- **Medicines you save** — names, strengths, visible identity details, saved front/back photos, and available source references.
- **Reminders** — the times and days you choose, and whether a schedule is active or paused.
- **Notes you add** — text you choose to keep with a medicine.
- **Taken records** — the scheduled time and when you marked a reminder Taken. Undo clears its Taken status; the underlying local reminder occurrence may remain.
- **Settings** — appearance, snooze preference, first-use date, and local free-identification usage.

The widget reads the same local medicine storage. We do not provide an online medicine account, cloud synchronization, or a server backup of your saved records.

The App configures its medication storage to be excluded from device and cloud backups. Some app preferences, original photos in your Photos library, and files you export may be backed up separately under your device or destination settings. **Do not rely on a device backup to recover your saved medicines or photos.**

Deleting a medicine removes its local record, saved photos, associated reminders, and history. **Settings → Delete your data** removes the App’s local medicine records and related preferences and cancels its local notifications.

**Export my records** creates a JSON file containing medicine text, source identifiers, reminder schedules, and recorded history. **Saved photos are not included.** You control exported files; the location or service you choose may store or share them.

## What Leaves Your Phone, When, and Where It Goes

**1. Selected photos, when you agree to identification**

Taking or selecting a photo does not itself send it to AI. After the upload disclosure, choosing **Agree and identify** sends the selected, resized photo or front/back photos over an encrypted connection to our **Firebase / Google Cloud relay**, which forwards them to **OpenAI’s API** to read visible medicine identity.

No app account or purchase identifier is attached to the photo request. However, a photo can contain identifying or sensitive information. **Cover patient names, addresses, prescription numbers, and other personal details before uploading.** Anything visible in the image can be processed by the provider.

Our relay processes the request without saving photos or results to a medicine database. Its application logs record service status and timing, not photos, medicine names, or the returned reading. Hosting providers may separately process and retain request metadata such as IP addresses and timestamps for operation and security. The relay uses a temporary, salted IP hash in memory for one-minute rate-limit windows. See [Google Cloud’s logging documentation](<https://docs.cloud.google.com/logging/docs/audit>).

OpenAI states that API data is not used to train its models by default unless the API customer opts in to sharing. Its standard abuse-monitoring logs may retain submitted content for up to 30 days, or longer where legally required or necessary for safety. Other service features, including temporary prompt caching, can also involve retention. Disabling stored API responses does not guarantee zero retention. See [OpenAI’s API data controls](<https://developers.openai.com/api/docs/guides/your-data>).

For source checking, the relay sends candidate medicine names and label identifiers to **DailyMed**, a US National Library of Medicine service. It does not send your selected photo, saved notes, reminders, or Taken history to DailyMed. Opening a source link visits that website under [NLM’s web policies](<https://www.nlm.nih.gov/web_policies.html>).

**2. Subscription information, when the App checks or manages access**

**Apple** handles payment through your Apple account. We do not receive your payment-card details.

**RevenueCat** processes an anonymous app customer identifier, app/device configuration information, and available transaction or subscription details to load plans, verify access, restore purchases, prevent purchase fraud, and report purchase activity. Subscription checks can occur when the App opens, including before you make a purchase. We do not attach saved medicine records or uploaded photos to RevenueCat’s identifier.

RevenueCat’s purchase reporting includes purchase analytics; this is separate from advertising tracking. See [RevenueCat’s purchase-data disclosure](<https://www.revenuecat.com/docs/platform-resources/apple-platform-resources/apple-app-privacy>).

**3. Information you choose to send to support**

If you email us, we and our email service provider receive your email address, message, and any attachments. We use that correspondence to answer the request and handle relevant support or privacy matters.

Please do not send unnecessary medical information, patient photos, payment-card details, or secret keys.

## Service Providers

- **Apple** — app distribution, purchases, subscriptions, and payment processing.
- **Google (Firebase / Google Cloud)** — hosts the photo-processing relay and associated operational services; our support address also uses Google’s email service.
- **OpenAI** — processes the selected photos to return visible medicine identity fields.
- **US National Library of Medicine / DailyMed** — provides retrieved medicine-label source records.
- **RevenueCat** — subscription verification, restoration, fraud prevention, and purchase reporting.

These services process information under their applicable terms and privacy practices. We do not use medication records for advertising, sell them, or share them with data brokers.

## Permissions

- **Camera** — requested when you choose to take a photo.
- **Photos** — Apple’s photo picker shares only the item you select; the App does not browse your photo library.
- **Notifications** — optional, for reminders at the times and days you choose. Notifications are scheduled locally; the App does not send remote push notifications.

You can change permissions in device Settings. You can decline photo processing and use manual medicine entry.

To stop future photo processing, do not choose **Agree and identify**; agreement is requested for each upload. Withdrawing agreement cannot undo a completed request or override lawful provider retention.

Notification content can reveal a medicine name on your lock screen. You can control previews in device notification settings.

## Health Information

Medicine photos, names, notes, schedules, and history can reveal sensitive health information. Saved records are not uploaded as a medicine library. Photos are sent for identification only after the upload disclosure and your agreement.

Identification can be wrong, and a source match does not establish a pill’s contents, authenticity, or safety. The App does not provide medical advice, choose doses, or recommend treatment. Confirm medicine identity with a doctor or pharmacist and follow your clinician’s instructions.

## Retention, Deletion & Security

Local records remain until you delete them or the App/device data is removed. We cannot recover records for you from a server copy.

Information sent for online processing uses HTTPS/TLS. Local storage relies on iOS protections. AI provider secret keys are kept on the backend rather than in the App. No method of storage or transmission can be guaranteed completely secure.

**Settings → Delete your data** removes local medicines, saved photos, notes, reminders, history, and related preferences, cancels local notifications, and returns the App to onboarding. It does **not**:

- cancel your Apple subscription;
- delete exported files or originals in your Photos library;
- erase Apple or RevenueCat billing records;
- retract completed provider processing or erase provider security logs;
- delete support correspondence.

Provider records may be retained for service operation, security, billing, dispute handling, or legal obligations. Support correspondence is retained as needed to resolve the request and meet applicable obligations. Contact us for assistance with provider-held information.

## Your Rights

Depending on applicable law, you may have rights to access, correct, export, delete, restrict processing of, or object to the use of your personal information, withdraw consent, or complain to a privacy authority.

You can edit, export, or delete local records in the App. For support correspondence or information held by service providers, email us; we will help with applicable requests and may need information to verify the request.

Some records may need to be retained where the law permits or requires it. We do not sell personal information or discriminate against you for exercising privacy rights.

## Children

The App is intended for adults organizing their own medication, not for children’s use. Do not upload children’s personal information.

If you believe a child has submitted personal information, contact us so we can assist with appropriate removal requests. Deleting data from the phone alone cannot retract information already processed by a provider.

## Transfers & Changes

The relay is configured in Google Cloud’s US Central region. Service providers and their subprocessors may process information in the United States or other countries under their applicable service terms and safeguards.

We will update this page and its effective date when the policy changes. We will give appropriate notice of material changes and obtain fresh agreement where required before starting new processing.

## Contact

**App operator: Lakhwani Haresh**

**Email: [email protected]**

In the App: **Settings → Contact support**

---

Use of the App is also subject to [Apple’s Licensed Application End User License Agreement (EULA)](<https://www.apple.com/legal/internet-services/itunes/dev/stdeula/>).