This policy explains what information the MediRemind app (“MediRemind”, “we”, “us”) collects, why we collect it, who we share it with, and the choices and rights you have. MediRemind is a medication reminder and management app. We take the privacy of your health information seriously and do not sell your personal data.
Information we collect
| Category | Examples |
|---|---|
| Account information | Email address, display name, and the authentication method you choose (email/password, Google, or Apple sign-in). Passwords are stored only as a secure one-way hash. |
| Health & medication information | Medications, dosages, schedules and categories you enter; the record of doses you mark as taken or missed; medication stock levels; and, if you choose to add them, medical ID details and emergency contacts. |
| Location | Your device’s precise location, used only at the moment you use the pharmacy finder or weather-based medication alerts. It is used to perform that search and is not stored as a location history by us. |
| Caregiver relationships | Links between a patient account and the caregiver(s) they choose to share with, and the adherence data shared with a linked caregiver. |
| Device & notification data | Push notification tokens, your time zone (so reminders fire at the right local time), and basic device information needed to deliver reminders reliably. |
| Subscription status | Whether you have an active Premium subscription, and the entitlement identifiers needed to unlock paid features. We never see your card details — payment is handled by the app store. |
| Smart speaker linking | If you connect Amazon Alexa or Google Home, the access tokens needed to send reminders to your speakers. |
How we use your information
- To deliver medication reminders on your phone and, if linked, your smart speakers.
- To store and sync your medication data across your devices.
- To provide caregiver features you opt into, such as sharing adherence with a chosen caregiver.
- To power optional features you use: the pharmacy finder and weather-based alerts (both use your location).
- To maintain the security and reliability of the service.
Lawful basis and health data
The medication information you enter is health data, which UK GDPR treats as “special category” data under Article 9 and protects more strictly than ordinary personal data. We handle it on that basis.
- Our lawful basis (Article 6) is performance of a contract — you asked us to provide the reminder service — and, for optional features such as the pharmacy finder, weather alerts and smart-speaker announcements, your consent.
- For health data (Article 9) we rely on your explicit consent, given when you create an account and enter your medicines. You can withdraw it at any time by deleting the data or your account.
How your information is stored
Your data is stored using Google Firebase (Authentication, Cloud Firestore, Cloud Storage) and processed by Google Cloud Functions. Data is encrypted in transit, and access is restricted by security rules so that only you — and any caregiver you explicitly link — can read your records.
Who we share it with
We share data only with the service providers needed to run the app, and only as required to provide the feature you are using:
| Provider | Purpose | What is shared |
|---|---|---|
| Google Firebase / Google Cloud | Account, database, storage, notifications, backend | Your account and app data (as our processor) |
| Google Cloud Text-to-Speech | Generating spoken reminder audio | The reminder text to be spoken |
| Google Places | Pharmacy finder | Your location coordinates for the search |
| Open-Meteo | Weather-based alerts | A location’s coordinates only — no personal identifiers |
| Amazon (Login with Amazon / Alexa) | Only if you link Alexa | The tokens and reminder content needed to speak reminders |
| Google Assistant / Home | Only if you link Google Home | The content needed to announce reminders |
| Apple | Only if you use Sign in with Apple | Sign-in identifiers |
| RevenueCat | Managing Premium subscription entitlements | An anonymous app user ID and your subscription status — no medication or health information |
We do not sell your personal data or share it for advertising.
Data retention and deletion
You can permanently delete your account and all associated data at any time from within the app: Settings → Security → Delete Account. This removes your profile, medications, dose history, medical ID, emergency contacts, caregiver links, backups, and sign-in record. Full instructions are on our account deletion page.
We keep your data only for as long as your account exists. If you contact us to request deletion instead, we will action it within 30 days.
Your rights
Depending on where you live (including under UK and EU GDPR), you have the right to access, correct, export, or delete your personal data, and to withdraw consent. You can exercise access and deletion directly in the app, or contact us for any other request.
Children
MediRemind is not directed to children and is intended for use by adults managing their own or a family member’s medication.
Changes to this policy
We may update this policy from time to time. Material changes will be reflected by the effective date above and, where appropriate, notified in the app.
Contact us
Questions about this policy or your data? Email Hello@bluebear-devs.com, or visit the MediRemind app page.