MedBuddy — Privacy Policy

Last updated: 2026-05-24

What we collect

Account data: email + display name + timezone + and which side of MedBuddy the account is on.
Medication schedule: name, daily reminder time, and any notes you enter.
Verification photos: still images captured at each dose. Stored in a private Supabase Storage bucket; only you and your linked monitor can view them via signed URLs. Auto-deleted after 30 days.
Compliance history: date, status (verified / late / missed), AI confidence scores. Used to compute streaks and surface adherence to your monitor.
Device push tokens: FCM token stored only so we can deliver miss alerts to your monitor's device.

What we do NOT collect

We do not upload camera frames to any third party for AI inference. Face + pill detection run entirely on-device (Google ML Kit + TensorFlow Lite YOLOv8). Only the final still you confirm is uploaded.
We do not sell or share your data with advertisers, insurers, or any third party.
The Android Accessibility Service used to lock your phone after a missed dose does not read content of other apps — it only listens for window-state changes to re-front MedBuddy.

Storage + retention

Verification photos auto-expire 30 days after upload. Account data, medication schedules, and compliance history persist until you delete your account. Email privacy@medbuddy.app to request deletion.

Permissions

Camera: verify each dose with a face + pill check.
Notifications: daily medication reminders.
Accessibility Service (Android, optional): lock your phone after a missed dose until you verify. You can disable this in Settings → Accessibility at any time.
Display over other apps (Android, optional): render the lock overlay above other apps.

Your rights

You can export your data, request deletion, or revoke any permission at any time. Contact privacy@medbuddy.app.

Open source

MedBuddy uses on-device AI from seblful/pills-detection (CC BY 4.0) and Google ML Kit (Apache 2.0). See the in-app Credits screen for the full list.