Privacy Policy

1. Data we collect

• Account: name, email, phone number (when you sign up).
• Health: medicines, schedules, intake logs, vitals you choose to track.
• Usage: pages viewed, buttons clicked, device type, OS, browser — only when you grant Analytics consent.
• We do NOT collect biometric data, government IDs, or financial information.

2. Purpose of use

• Send medication reminders.
• Let family caregivers see real-time adherence (with consent).
• Improve the app via aggregated analytics (only with Analytics consent).
• Meet legal obligations (tax, audit).

3. Third-party services

• Google Firebase Analytics — usage data. Processed in the United States by Google LLC under Google's Standard Contractual Clauses (PDPA §28). Sent only when you grant Analytics consent.
• Google Tag Manager — orchestrates analytics tags. No data stored by GTM itself.
• Cloudflare — site hosting, edge caching. No personal data stored.

4. Storage region

Your account + health data is stored encrypted on our managed PostgreSQL. Analytics data is processed in the United States by Google. Cross-border transfers comply with PDPA §28.

5. Your PDPA rights

• Access — request a copy of your data.
• Rectification — correct inaccurate data.
• Erasure — request deletion (account deletion in-app or via email).
• Portability — receive data in machine-readable format (in-app export).
• Withdraw consent — at any time, via Privacy Settings (in-app).
• Object to processing — for direct marketing or profiling.
• Complaint — to the Personal Data Protection Committee (PDPC) of Thailand.

6. Retention

• Account + health data: while your account is active. Deleted within 30 days of account deletion request.
• Analytics: 14 months (GA4 default).
• Logs: 90 days for security/debugging.

7. Contact