PillBook Privacy Policy

Last updated: October 19, 2026

PillBook (package `app.web.medsdiary`) is an offline medication reminder and a log for blood pressure, blood sugar and weight, for phone, tablet and Wear OS. It works entirely on your device. This policy explains what the app does with your information. In short: we don't collect it.

What we collect

Nothing. The app has no account, no server, no analytics, no advertising SDK and no crash reporting. We, the developers, never receive your data. Your health data is never shared and never sold.

What stays on your device

Everything you enter is stored only in the app's private storage on your device:

• the people you add (name, color, and optionally birth year, sex and height, used only for BMI information), their units

and blood-pressure guideline, and the personal targets you type;

• medicines (name, form, strength, instructions, color/shape tag, notes), their schedules, courses and pauses;
• dose history: when each dose was planned and whether it was taken, skipped, snoozed or missed;
• stock counts and refills;
• blood pressure, pulse, blood sugar, HbA1c and weight readings, with the context, tags and notes you add;
• notes and symptoms, measurement reminders and appointments;
• a log of when reminders were delivered (for the Reliability screen), and your settings;
• since version 1.1: tapering steps and schedule names, each medicine's alert style, the reference (not the file) of the

ringtone you pick from the phone's own sounds and its vibration, your answers to the time-zone prompt (home or local time per zone), and the results of the reliability check on this phone (checklist ticks and the restart test; not included in backups, because they describe this phone);

• since version 1.2: your own measurements and lab values (for example temperature, oxygen, INR or cholesterol) with the

range you set, which medicine a note is about, the body site you choose for an injection or patch, an optional small photo of a medicine box or pill (taken with the phone's camera app or picked from your photos; the app has no camera permission and keeps only a 96-pixel copy), whether this phone rings for each person, and a short log of family-book imports;

• since version 1.3: a person's allergies (free text) and a pause of all their medicines with its reason and resume date;

each person's meal times; which medicine a dose follows and the gap you set; pill-organiser settings and when you filled the box; the expiry month of each box you add and whether it was used up; home blood-pressure weeks; your voice settings for spoken reminders; and care contacts you type in (role, name and phone number of a doctor, pharmacy or carer). The app does not read your phone's contacts;

• since version 2.0: other timetables for a period you choose (for example a fasting month: its name, dates, the

times and amounts you type for each medicine, your suhoor and iftar times and whether sugar-check reminders are on); and, when you turn it on for a person on this phone, who gave each dose (the person themself or the carer's name you pick or type). Who gives the doses on this phone is remembered in the app's settings on this phone only;

• daily local backup snapshots (the last 7), inside the app's private storage;
• the optional app-lock PIN, stored only as a salted hash.

On Android 7 and later a tiny list of the next reminder times (with the text shown before you unlock the phone after a restart, for example "Medicine reminder (Mum)") is kept in the device's protected storage so reminders still ring before the first unlock.

The Wear OS watch app is standalone: medicines and readings you enter on the watch are stored only on the watch. The phone and the watch do not sync, and neither sends anything over a network.

The app has no internet permission: it cannot send anything anywhere. More › Privacy and data shows what is stored and lets you delete it.

Exports, reports and backups

Nothing leaves the app unless you create a file yourself:

• Doctor report and exports: a PDF, CSV or JSON file is created only when you tap Create PDF, Print, Share or

Export, and goes only to the location or app you choose.

• Encrypted backup: "Back up now" writes a backup file to a location you choose, encrypted with a passphrase of your

own (AES-256). Once written, the file is under your control. If another app on your device (for example a cloud drive) syncs that location, that app's own policy applies.

• Family book (1.2): "Share this person's book" creates a file with one person's name and profile, their medicines,

schedules and pill photos, and the last 90 days of doses, readings and notes, encrypted with a passphrase you choose (AES-256). It is sent only where you send it (for example to a family member), and only someone who knows the passphrase can open it. Importing a family book shows its content first, saves a snapshot, and then adds the person or merges the book into a person you choose.

• Pill photos are included in JSON exports, encrypted backups and family books.
• Since 1.3, care contacts (names and phone numbers), allergies, meal times and home blood-pressure weeks are included in

JSON exports, encrypted backups and the family book; pill-organiser data is included in exports and backups only.

• Clear old history (1.3): deletes doses, readings and notes before a date you pick. A snapshot is saved first.
• Import: a backup, JSON or family-book file you pick is read only to import it into the app, after it shows you

what is in it.

Android device backup

Android's own device backup of PillBook's data is off by default. Your data is included in your device backup only if you turn it on in More › Privacy and data; Google then handles that backup under its own policy. The app-lock PIN is never included.

Spoken reminders and calls

• Spoken reminders (1.3): if you turn on "Say the medicine name", the alarm screen reads the person, medicine and

amount aloud with your phone's own text-to-speech engine, using only voices installed on the phone. Nothing is recorded and nothing is sent; the app has no microphone permission. With "Hide medicine names" on it only says "Time for your medicine".

• Call (1.3): the Call buttons open your phone app with the number filled in; you decide whether to call. The app

has no phone or call permission.

Notifications and the lock screen

Reminder notifications show the medicine and the person by default; on the lock screen they say only "Medicine reminder (Mum)". With "Hide medicine names" on, notifications, widgets and the Quick Settings tile never show medicine names.

Permissions

• Notifications (`POST_NOTIFICATIONS`, Android 13+): dose, follow-up, refill, measurement and appointment reminders.

Asked in context, never at the first start.

• Alarms and reminders (`SCHEDULE_EXACT_ALARM`, Android 12+): so dose reminders ring at the time you chose. If you

don't allow it, reminders still come, within about 5 minutes.

• Run at startup (`RECEIVE_BOOT_COMPLETED`): sets your reminders again after the phone restarts or the time zone

changes.

• Vibration (`VIBRATE`) and keep awake (`WAKE_LOCK`): to ring and vibrate for a reminder while the phone sleeps.
• Biometric (`USE_BIOMETRIC`): optional unlock with your fingerprint or face for the app lock. Android handles

biometric data; the app never sees it.

• Storage (`WRITE_EXTERNAL_STORAGE`, Android 4.3 only): saving exports to the Download folder. Newer Android

versions use the system file picker instead.

• Home-screen shortcut (`INSTALL_SHORTCUT`): adding the medicine card to the home screen on older launchers.
• Not requested: internet, location, camera, microphone, contacts, phone, SMS, Bluetooth, body sensors and Health

Connect.

Deleting your data

More › Privacy and data › Delete everything removes all data from the app permanently. Uninstalling the app also removes it. Backup or export files you created yourself stay where you saved them until you delete them.

Purchases

PillBook is a paid download from Google Play, handled entirely by Google Play under the Google Privacy Policy. There are no in-app purchases, subscriptions or ads.

Health

PillBook is not a medical device and does not give medical advice. It records what you enter and reminds you at the times you choose. Blood-pressure and BMI bands, and "your range" for your own measurements, are shown for information only. Notes listed per medicine in the doctor report are what you wrote; the app does not say what caused them. Always follow your doctor's or pharmacist's instructions. Reminders depend on your phone's settings.

Children

PillBook is meant for adults (18+), including adults who manage medicines for a family member. It collects no data from anyone.

Changes

If this policy changes, the new version will be published at the same address with a new date.