Privacy Policy

Effective Date: March 13, 2026

Introduction

Welcome to PillPanda. Managing your health routine is deeply personal, and trusting an app to track your medications and send you reminders is a big step. We wrote this Privacy Policy because we want to honor that trust by being completely transparent about how we handle your information.

PillPanda operates globally to help you stay on top of your medication schedules. To make our app work seamlessly, we need to process certain pieces of information. This policy explains exactly what we collect, why we need it, and how we protect it, all while complying with global privacy standards like the GDPR, CCPA/CPRA, and PIPEDA. If you ever have questions about this document or your data, you can always reach our privacy team directly at hello@pillpanda.app.

What We Collect & Why

We believe in data minimization, which means we only collect the information necessary to provide and improve our service. We organize this information into a few distinct categories based on how we receive it.

Information You Give Us Directly

Medication Images: If you use our medication scanning feature, we collect the images you upload to identify your prescriptions. We use these images solely to extract medication-specific details such as the drug name, dosage, and instructions; we do not process or store any personally identifiable information (PII) that may be visible on the prescription label, such as your name or address.

Legal Basis:* Processing your basic account setup relies on our Contract with you. However, because medication details and images are considered sensitive health data, we process this information strictly based on your Explicit Consent.

Information We Collect Automatically

As you interact with our mobile app, we quietly gather technical data to ensure everything runs smoothly.

Usage Analytics: We collect device information (like your operating system version), crash reports, and data on how you navigate the app. This helps us figure out if a recent update broke a feature or if a specific screen is confusing to use.

Legal Basis:* We rely on our Legitimate Interest to maintain, secure, and improve our mobile application.

How We Use Your Information

We do not collect your data just to have it. Every piece of information we gather serves a specific purpose in making PillPanda better for you.

Core Service Delivery: We use your account preferences and schedules to trigger timely push notifications and keep your medication logs accurate across your devices. (Contract / Explicit Consent)

Service Improvement: By analyzing aggregated usage analytics, we identify bugs, optimize battery usage, and design better features for future updates. (Legitimate Interest)

Communication: We use your email address to send you critical account updates, password reset links, and responses to your support requests. (Contract)

Security and Fraud Prevention: We monitor account access patterns to detect unauthorized login attempts and protect your sensitive information from malicious actors. (Legitimate Interest)

Legal Compliance: We maintain certain financial transaction records to comply with global tax and accounting laws. (Legal Obligation)

Marketing: If you opt in, we may occasionally send you emails about new PillPanda features or promotional offers. You can opt out of these at any time with a single click. (Consent)

When We Share Your Information

Let us be absolutely clear upfront: we never sell your personal data. We only share your information in highly specific, limited circumstances to keep our service running.

Essential Service Providers: We share necessary data with trusted companies that help us operate. This includes secure cloud hosting providers who store our databases and payment processors (like Apple, Google, or Stripe) who handle your financial transactions securely. These providers are legally bound to protect your data and can only use it for the services we request.

Legal Requirements: If we receive a valid, legally binding request from a court or government authority, we may be required to disclose certain information. We will always verify the legality of the request and, if permitted by law, notify you before handing anything over.

Business Transitions: If PillPanda is ever involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your personal data is transferred and becomes subject to a different privacy policy.

With Your Consent: For any situation outside of the above, we will ask for your explicit permission before sharing your data.

Your Privacy Rights

Because PillPanda operates globally, we offer a comprehensive set of privacy rights to all our users, regardless of where you live. You own your data, and you have the right to control it.

Access Your Data: You can request a copy of the personal information we hold about you. We will provide this within 30 days.

Correct Inaccuracies: If your account information is wrong, you can update most of it directly within the app's settings. For anything else, just ask us.

Delete Your Data: You have the "right to be forgotten." You can delete your account and associated data directly through the app settings or by emailing us.

Port Your Data: You can request a structured, machine-readable export of your medication schedules to transfer to another service.

Opt-Out of Marketing: Every marketing email we send includes an unsubscribe link at the bottom.

Withdraw Consent: You can withdraw your consent for us to process your sensitive health data at any time by deleting your tracked medications or your account. This will not affect the legality of any processing we did before you withdrew consent.

Lodge Complaints: If you believe we are mishandling your data, you have the right to file a complaint with your local data protection authority.

To exercise any of these rights, please email us at hello@pillpanda.app. We will never discriminate against you or degrade your service for exercising your privacy rights.

Data Security

Protecting your medication history and account details is a responsibility we take seriously. We implement robust security measures, including encrypting your data both in transit (while it travels between your phone and our servers) and at rest (while it sits in our databases). We also enforce strict access controls, meaning only authorized PillPanda personnel who need to do their jobs can access our backend systems.

However, we must be honest: no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

You also play a vital role in your own security. We strongly encourage you to use a secure screen lock on your mobile device and to avoid sharing your PillPanda account credentials with anyone. In the unlikely event of a data breach that compromises your personal information, we commit to notifying you and the relevant authorities within 72 hours of discovering the incident, outlining exactly what happened and what steps you should take.

Data Retention

We keep your personal information only for as long as we need it to fulfill the purposes outlined in this policy.

Active Account Data: We retain your account preferences and medication logs for the duration of your relationship with us. If you delete your account, we wipe this data from our active servers immediately, and from our secure backups within 30 days.

Financial Records: By law, we are required to keep records of financial transactions (like premium subscription payments) for up to 7 years for tax and auditing purposes.

Technical Logs: We routinely purge our technical usage analytics and server logs after 12 months, as older data is no longer useful for fixing current app bugs.

Marketing Preferences: We keep a record of your marketing opt-ins or opt-outs indefinitely to ensure we respect your communication choices over time.

Cookies & Tracking

While PillPanda is primarily a mobile app, we use similar tracking technologies (like mobile SDKs and local storage) to make the app function. If you visit our website at https://pillpanda.app, we also use standard web cookies.

We use Essential Trackers to keep you logged in securely and remember your basic app settings. We also use Analytics Trackers to understand how users navigate our app, which helps us improve the interface. You can manage your tracking preferences directly through your mobile device's privacy settings (such as limiting ad tracking on iOS or Android).

Children's Privacy

PillPanda is designed for general audiences and is not directed at children. We do not knowingly collect personal information from anyone under the age of 16. If you are a parent or guardian and you become aware that your child has provided us with personal data without your consent, please contact us immediately. If we discover that we have inadvertently collected data from a child under 16, we will take immediate steps to delete that information from our servers.

International Transfers

PillPanda is a global service. This means the information we collect from you may be transferred to, stored, and processed in countries outside of your home jurisdiction, including the United States or the European Union, where our hosting providers maintain servers.

Data protection laws vary by country, but we ensure your data remains protected no matter where it travels. When we transfer data originating from the European Economic Area (EEA), the UK, or Canada to other countries, we rely on legally recognized safeguards, such as Standard Contractual Clauses (SCCs) or adequacy decisions, to ensure your privacy rights remain intact.

Changes to This Policy

Privacy laws evolve, and so will PillPanda. We may update this Privacy Policy from time to time to reflect new app features or legal requirements.

When we make significant changes, we will provide fair notice by sending an email to the address associated with your account or by displaying a prominent alert inside the PillPanda app before the changes take effect. Your continued use of the app after the effective date indicates that you understand and agree to the updated policy. You can always find the most current version of this document on our website and within the app settings.

Contact Us

We welcome your questions, feedback, and requests regarding your privacy. You can reach our dedicated team through the following channels:

Email: hello@pillpanda.app

Website: https://pillpanda.app

When you reach out to us regarding a privacy concern or a data rights request, you can expect a thoughtful, human response from our team within 5 to 7 business days.