EasyPill Mobile App - Privacy Policy

Last updated: 09 March 2026

1. About this Notice

This Privacy Policy is provided in English, which is the binding and authoritative version. Translated versions in Spanish, Portuguese, and Traditional Chinese are available for convenience: Español | Português | 繁體中文 . In case of any inconsistency, the English version prevails.

This Privacy Notice (“Notice”) explains how The EasyPill Team (“we”, “us”), based in the United Kingdom, collects and uses information when you use the EasyPill mobile application (the “App”).

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we are the "Data Controller" of your information. Our App is designed with "Privacy by Design" at its core: we do not require you to create an account, and we do not collect your name, physical address, or contact details to provide our core services.

The App enables users to process their own special category health data (medication details) locally. We do not access or process this data.

Please take the time to read this Notice carefully. If you have any questions or comments, please contact us via dev@32astudio.com .

2. What information does the EasyPill Team collect and why?

Legal basis

The law requires us to have a legal basis for collecting and using your personal data. We rely on one or more of the following legal bases:

Performance of a contract with you: Where we need to perform the contract we are about to enter into or have entered into with you.
Legitimate interests: We process anonymous technical data for product development and error fixing. We balance any potential impact on you and your rights before we process your data.
Legal obligation: We may use your data where it is necessary for compliance with a legal obligation.
Consent: We rely on consent where you have given active agreement (e.g., opting-in to personalized ads).

Purposes for which we will use your personal data

We have set out below, in a table format, a description of all the ways we plan to use the various categories of your personal data, and which of the legal bases we rely on to do so. We have also identified what our legitimate interests are where appropriate.

Purpose / Use	Type of data	Legal basis and retention period
Core app functionality (reminders/schedules)	User-entered medication details and schedules	Contractual: The App does NOT create user accounts. Data is stored exclusively on your device using local storage.
Optional OCR (extracting text from medicine labels)	User chosen image from Camera/Photo from the device and resulting text	Contractual: Necessary to provide the AI feature you have requested. Image data is processed ephemerally by the App via the Google Gemini API to generate the requested information. We do not collect, access, or store your photos or the AI-generated text on our systems, all remote data is discarded immediately after the analysis is complete by Google. Data handling by the service provider is governed by Google’s Privacy Policy.
App Administration & Protection (Troubleshooting)	Technical logs and IP address (via Google Firebase Crashlytics)	Legitimate Interest: To fix bugs and ensure security. We do not use this to identify you. Logs are automatically purged by Google after 90 days.
Data Analytics (App improvement)	Technical logs and aggregated anonymous statistics	Legitimate Interest: To keep the App relevant. IP addresses are processed by Google Cloud via standard network infrastructure data handling. Data is retained for no longer than 12 months.
To show advertisements (via Google AdMob)	Approximate Location, Ads Interactions data, Crash Logs & Diagnostics, Device Identifiers.	Consent-based: For users in the UK/EEA, we collect and manage your preferences for personalized ads via our in-app transparency tools (UMP SDK). You can withdraw or change your consent at any time in the App's 'Privacy Settings'. Data retention is governed by Google’s Privacy Policy. Legitimate Interest/Necessary：Showing Ads help to keep our team running. Basic technical identifiers and diagnostic data are processed for fraud prevention and app stability, regardless of ad personalisation. AdMob uses third-party vendors to serve ads. You can view the full list of these providers and manage your preferences within the app's 'Privacy Settings' menu. No Medical Data Shared：We do NOT transmit or share any of your personal or medication info with Google AdMob or it's third-party advertising partners. The adMob advertising SDK only perceives that you are using health wellness/tool category app.

3. Who do we share your personal information with?

If you opt-in to advertisements, we share specific technical identifiers with Google AdMob to serve ads. Google may use this data to show you personalized ads based on your interests. You can learn more about how Google handles data here: How Google uses information from sites or apps that use its services.

Consent Management: We use the Google User Messaging Platform (UMP) SDK to manage your privacy choices. This tool ensures that your data is only shared with advertising partners if you have given explicit consent. You can view the full list of these third-party providers and manage your preferences at any time within the app's 'Privacy Settings' menu.

If you choose to use OCR feature for medicine information, we make use of Google Cloud/Gemini API. Image data is sent to Google for processing. This data is processed ephemerally by us and is not used for other purposes

However, the App does not store, or share your information besides the above stated purposes.

4. How we protect your privacy

We will process the personal information we collect in accordance with this Notice and based on the following principles:

Fairness: We process your personal information fairly, which means that we are both transparent about how we process it and we process it in accordance with applicable laws.
Lawfulness: We process your personal information only on a valid lawful ground.
Purpose limitation: We process your personal information for specified and legitimate purposes (as described above), and do not process it in a manner that is incompatible with those purposes, unless permitted by applicable data protection laws.
Data minimization: We only process information that is adequate, relevant and limited to what is necessary to achieve the purposes for which the data are processed.
Data accuracy: We take appropriate measures to ensure that any personal information we hold about you is accurate.
Data security: We use appropriate technical and organisational measures to protect the personal information that we collect and process. Such measures include to-date secure network architectures that contain firewalls, intrusion detection devices, and backups.

5. Data storage, retention and deletion

We do not collect or store your medicine and schedule information outside of your device. Your medicine information is strictly processed and stored at your device. We have no access to this data and cannot delete it for you. To delete this data, simply uninstall the App or clear the App’s storage in your phone settings.

Technical log and anonymised usage statistics are stored on Google Cloud. IP addresses as an industry standard is part of the stored data. Since we do not store names or account details, we cannot identify individual users in the data. We have periodic deletion of the data and the retention periods are stated in section2.

Advertising Data: If you consent to personalized ads, your preferences are stored via the UMP SDK. You can clear this at any time by resetting your advertising ID in your device settings or changing your choices in the App's 'Privacy Settings'.

We prioritize local data residency. Our core infrastructure (Cloud Run and Storage) is explicitly hosted in UK data centers. However, as we utilize global services like Google Firebase and Gemini AI to ensure app stability and advanced features, some technical diagnostic data may be processed on servers outside the UK. All such transfers are protected by standard contractual clauses and data privacy frameworks to ensure your information remains secure and handled in accordance with UK GDPR.

6. Your data protection rights

You have rights under the UK GDPR, including the right to access, rectify, or request the erasure of your data.

Important Note on Anonymisation: Because we do not store your name or account details, and because your medication data is stored only on your phone, we cannot identify you. Therefore, we cannot "delete" your data from our side because we don't have it. To exercise your "Right to be Forgotten," simply delete the App or clear the App's storage in your phone settings.

If you have concerns, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK's supervisory authority for data protection. They can be reached at www.ico.org.uk or by calling 0303 123 1113.

We respond to all requests we receive via dev@32astudio.com from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws in the UK.

7. Linking to other websites

The App may include links to third-party websites. We do not control these websites and are not responsible for their privacy statements.

8. Updates to this Notice

We may update this Notice to reflect legal or technical changes. The "last updated" date at the top will indicate the latest version.

9. How to contact us

If you have questions, please contact us via dev@32astudio.com.