Pilly ("us", "we", or "our") operates the Pilly mobile application (the "App"). We are committed to protecting your personal information and your right to privacy. Because Pilly handles health-related information, we hold ourselves to a stricter standard than a typical app.
Your medications, schedules, dose history, notes, and settings are stored locally on your device. We do not run user accounts. Unless you turn on Family sharing (see below), we do not upload your medication list to our servers for storage, and we cannot see it. Deleting the App deletes this local data.
If you use the in-app export or doctor-report features, the data goes only where you choose to share it.
Family sharing (Pilly Family, optional): if you subscribe to Pilly Family and invite a caregiver with a code, your medication schedule and whether each dose was taken are stored on our servers while you are sharing, so we can show the caregivers you choose a read-only view and alert them when a dose is missed. We never sell this data or use it for advertising. When you stop sharing (unpair), the connection is deactivated and no further data is shared.
Two optional features send data to our servers strictly to answer your request, and the data is processed by our AI provider (OpenAI) to generate the response:
• Ask Pilly: your question plus a snapshot of your medication schedule and adherence, so the assistant can answer about your data.
• Package scan: the photo you take of a medication package, so the printed information can be read for you.
We do not use this data to train models, we do not sell it, and we do not keep copies beyond what is needed to process the request.
If you choose to connect Apple Health, Pilly reads the health measurements you authorize (such as weight, blood pressure, blood glucose, and heart rate) to display them alongside your medication insights on your device, and to include them in doctor reports that you choose to generate and share.
HealthKit data is never sent to our servers, never shared with or sold to third parties, and never used for advertising, marketing, or AI processing. It leaves your device only inside a report you yourself create and send. You can revoke access at any time in the iOS Health app under Sharing.
Dose reminders and refill alerts are scheduled locally on your device. The content of your reminders (medication names, dosages) is composed on-device and is visible on your lock screen according to your iOS notification settings.
The App itself does not include third-party analytics or advertising SDKs. Apple may provide us aggregated, anonymized statistics (downloads, crashes) through App Store Connect. Our servers keep standard technical logs (timestamps, anonymized request metadata) for reliability and abuse prevention.
AI requests are processed transiently. Server logs are retained for a limited period for security and reliability, then deleted. Your medication data is yours, on your device. The only exception is Family sharing: while you share, your schedule and adherence are stored so caregivers can be alerted, and that connection is deactivated when you unpair.
Requests between the App and our servers are encrypted in transit. We apply appropriate technical and organizational measures on our servers. No method of electronic transmission is 100% secure, and transmission is at your own risk.
The App is not directed to children under 13, and we do not knowingly collect data from them. A parent, guardian, or caregiver may use the App to manage a dependent’s medications.
Depending on your jurisdiction, you may have rights to access, rectify, erase, or restrict processing of personal information. Because your medication data is stored only on your device, you can exercise most of these rights directly: edit or delete data in the App, or use Settings → Clear all data. For anything else, contact us.
We may update this policy from time to time. The updated version is effective as soon as it is accessible, and is indicated by the "last updated" date above.
Questions or comments about this policy: inquiries@zaatar.tech.