PillBro Privacy Policy
PillBro collects only what it needs to remind you about your medicines, never sells your data, and never uses your medicine information for advertising. This policy explains what PillBro collects, why, who can see it and how you can delete it.
In short
- Your medicine reminders are set up on your phone and work without the internet.
- We keep a copy of your medicines and ticks on our servers so they sync and can be restored, and so caretakers you approve can see today's doses.
- We never collect your NRIC, home address or date of birth.
- We never sell your data, and we never use your medicine or health information for advertising.
- We never share your PillBro data with XYNQ's other products.
- You can delete your account and all your data from inside the app at any time.
1. Who we are
PillBro is a medicine-reminder app made in Singapore by XYNQ Technologies Pte. Ltd. (UEN 202639080N) ("we", "us"), part of the XYNQ group of products. We follow Singapore's Personal Data Protection Act 2012 (PDPA). This policy covers the PillBro app for iPhone and Android, including the PillBro Beta.
2. What we collect
We collect only the information below. Most of it you type in yourself.
| Information | Examples | Why we need it |
|---|---|---|
| Account | Your email address and an account ID from Sign in with Apple or Google. With Apple you can hide your real email. | To sign you in and keep your data yours |
| Name caretakers see | A name you choose, e.g. "Mum" | So caretakers you approve know who they're helping |
| Medicines | Name, strength, form, colour, schedule, dose times, amount per dose, and an optional "my reason" note | To remind you and show your doses |
| Dose records | Which doses you ticked and when, and "only when needed" doses you recorded | Your calendar, streaks and history |
| Reminder settings | Reminders on or off, nudges on or off, nudge delay | To send the notifications you chose |
| Stock (Plus) | Pills added, recounts and expiry months, kept as dated records | Pill countdown, running-low and expiry warnings |
| Care contacts (Plus) | Your GP, clinic or pharmacy: name, phone, address, opening hours | So you can call them for refills |
| Scan photos (Plus) | Photos of a medicine label or receipt you choose to scan | To read the medicine details for you to check |
| Caretaker links | Who you added as a caretaker, and when a link started or ended | To run caretaker sharing |
| Activity | When you last opened PillBro or ticked a dose (active or not active only) | The wellbeing check |
| Phone details | Your time zone, notification token, app version, device type | To time reminders correctly and deliver caretaker alerts |
| Plan and beta feedback | Your plan and trial dates, which Plus features you tapped, survey answers, and simple counts of features used | To run your plan and improve PillBro |
| Crash reports | Technical details when the app crashes, without your medicine data | To fix bugs |
What we never collect: your NRIC or other ID numbers, home address, date of birth, location, contacts list, photos you don't choose to scan, or data from health apps and wearables.
About other people: if you add a care contact, you give us their work details, such as a clinic's phone number. Only add details you are allowed to share. Caretakers have their own PillBro accounts.
3. How we use your information
We use your information only to run PillBro for you and to make it better. We use it to:
- remind and nudge you at the right times, and keep your calendar, streaks and history;
- sync your data between your phone and our servers, so you can restore it on a new phone;
- show today's doses to caretakers you approved, and send the wellbeing check;
- run your Free or Plus plan and your trial;
- show food tips that match your medicines (worked out inside the app);
- understand which features are useful, using counts and survey answers that never include your medicines;
- fix problems, keep PillBro secure and meet our legal duties.
We ask for your consent when you first open PillBro. If we want to use your information for a new purpose, we will tell you first and ask again.
What we never do:
- We never sell or rent your personal data.
- We never use your medicine or health information to choose ads. The "Sponsored" space in the Beta is a fixed sample with no tracking.
- We never send your medicine information to analytics or advertising companies.
- We never share your PillBro data with XYNQ's other products or businesses, such as BernieKnows, and never combine it with data from them.
- We never give medical advice. PillBro is a reminder and record-keeping tool. It isn't a substitute for advice from your doctor or pharmacist.
4. Caretakers
A caretaker sees only your prescribed doses for today, and only if you added them yourself. Nothing is shared until you add a caretaker.
How it works: the person who will help you opens PillBro in their own account and shows you their personal caretaker code (a QR code or 8 characters, usable once, valid for 24 hours). You scan or type it, check their name, and tap Add. Only people you add yourself can become your caretaker. You can also keep any medicine private: caretakers then see only "Private medicine", its time and whether you ticked it. Either of you can end the link at any time, and their access stops immediately.
| A caretaker can | A caretaker can never |
|---|---|
| See the name you chose, e.g. "Mum" | See your history before today |
| See today's prescribed doses: medicine name, strength, form, dose time, and whether and when each was ticked | See supplements, your "my reason" notes, stock, care contacts or photos |
| Get a wellbeing check alert if they have Plus | Add, change, delete or tick your medicines |
| See if you've told PillBro you stopped using it | Act on your account in any way |
Wellbeing check: if PillBro sees no activity from you for about 2 days while prescribed doses were due, it first asks you "Are you OK?". If there is still no activity 12 hours later, your approved caretakers who have Plus get an alert. In the Beta, activity means opening PillBro or ticking a dose. PillBro knows only "active" or "not active", never what else you do on your phone. If you tap "I've stopped using PillBro", no caretaker alerts are sent.
5. Who we share with
We share data only with the service providers that run PillBro, only what each one needs, and under contracts that require them to protect it. We don't share it with anyone else unless the law requires us to.
| Provider | What they do for PillBro | What they receive | Where |
|---|---|---|---|
| Google (Firebase and Google Cloud) | Our database, sign-in and server functions | Your account and the information in "What we collect" | Database and server functions: Singapore. Sign-in and security checks may be processed outside Singapore. |
| Apple and Google | Sign-in, app delivery, and delivering notifications | Your sign-in details and a notification token | Their own locations |
| Expo | Delivering caretaker alerts and wellbeing prompts | A notification token and the alert wording | [United States] |
| Google Gemini on Vertex AI (Plus scan only) | Reading the label or receipt photo you choose to scan | That photo, nothing else | Singapore |
| Google Firebase Crashlytics (only if we switch crash reports on; no personal data) | Crash reports | Technical details, no medicine data | [United States, confirm] |
The scan photo is processed only to read it and is not kept after the scan. The provider may not use it to train its models.
Transfers outside Singapore: some providers store or process data outside Singapore. When they do, we make sure the data gets protection comparable to the PDPA, through contracts and the provider's own safeguards.
If the law requires it: we may disclose information when a Singapore law or court order requires us to. We will only share what is required.
6. Your phone: notifications and permissions
PillBro asks only for the permissions it needs, and it works without the optional ones.
- Notifications: to send reminders and nudges. Reminders are scheduled on your phone, so they arrive even without the internet. On iPhone they are marked Time Sensitive, so they can come through Focus modes such as Sleep; you can turn this off in iPhone Settings.
- Alarms & reminders (Android): lets reminders arrive on time when the phone is resting. Without it, reminders may arrive a little late.
- Camera and photos (optional): used only when you choose to scan a caretaker's QR code or, with Plus, a medicine label or receipt. You can always type a caretaker's code instead.
On your lock screen: reminders show medicine names, e.g. "Did you take Metformin 500 mg?". Anyone who can see your phone may see them. You can hide notification previews in your phone's settings.
On your phone: PillBro keeps a copy of your medicines, ticks and settings on your phone so it works offline. Deleting the app removes this copy; your synced copy stays on our servers until you delete your account.
7. Keeping, deleting and protecting your data
We keep your data while your account exists, and delete it when you delete your account.
Delete your account: in PillBro, go to More → Privacy & data → Delete my account and data. This deletes your account and everything linked to it from our servers, ends all caretaker links (your caretakers are told you are no longer sharing), and clears PillBro from your phone. Copies in our backups are erased within [30] days. We can't undo a deletion.
- Caretaker invite codes expire after 7 days or once used.
- Notification tokens are deleted as soon as a phone stops accepting them.
- Crash reports are kept for up to [90] days.
- Accounts with no activity for [24 months]: we will email you, then delete the account if you don't respond.
Security: data travels encrypted (HTTPS) and is encrypted where it's stored. Database rules let each person reach only their own data, and caretakers only today's shared doses. Only authorised XYNQ staff can access the servers, and only to run and fix PillBro.
If something goes wrong: if a data breach could harm you, we will tell you and Singapore's Personal Data Protection Commission (PDPC) as the PDPA requires.
8. Your rights
Under the PDPA you can ask what we hold about you, ask us to correct it, and withdraw your consent.
- See and correct your data: most of it you can see and edit in the app. To ask for a copy of what we hold, or how it was used in the past year, email our Data Protection Officer (below). We reply within [10 business days] and will tell you first if a fee applies.
- Withdraw consent: you can turn off caretaker sharing, notifications or the camera at any time, or delete your account. If you withdraw consent for things PillBro needs to work, such as storing your medicines, we will explain what that means before we act on it.
- Complain: contact us first and we will try to fix it. You can also contact the Personal Data Protection Commission.
9. Other things to know
- Age: PillBro Beta is for people aged 18 and over. If we learn that someone younger has an account, we will delete it.
- Not medical advice: PillBro is a reminder and record-keeping tool. It isn't a substitute for advice from your doctor or pharmacist. Ticks are what you record; they aren't proof that a medicine was taken.
- Beta testing: during the Beta, PillBro is shared through Apple TestFlight and Google Play internal testing. Apple and Google may share crash reports and feedback you send through them with us, under their own privacy policies. There are no payments during the Beta.
- Changes: if we change this policy, we will update the date at the top. If a change affects how we use your data, we will tell you in the app before it takes effect.
10. Contact us
Our Data Protection Officer handles privacy questions and requests.
- Email: privacy@pillbro.co
- Company: XYNQ Technologies Pte. Ltd. (UEN 202639080N), Singapore
See also: XYNQ privacy overview