Pill Timer Privacy Notice

Medical Disclaimer

Pill Timer is a reminder and tracking tool only. It is not a medical device. It does not provide medical advice, diagnosis, or treatment, and should never replace guidance from a qualified healthcare professional. Always follow your doctor's instructions.

We are not liable for missed doses, delayed notifications, or any health-related outcomes resulting from use of the app. Read full Medical Disclaimer →

Data We Collect

Pill Timer is designed to work offline-first. No account is required, and no personal medication data is transmitted to our servers. The following data is stored locally on your device only:

Medication information — medication name, dosage, schedule, reminders, and intake history. Stored locally in the device database.
App preferences — theme, language, notification settings, onboarding progress.
Gamification data — streaks, points, and achievements earned through app use.

We also collect anonymous diagnostic data to improve stability and performance:

Crash reports — anonymous crash logs (Firebase Crashlytics).
Usage analytics — aggregated, anonymous feature usage (Firebase Analytics).
Push notification token — device-specific token used by Firebase Messaging to deliver reminders. Not linked to personally identifiable information.

Permissions

Notifications — required to deliver medication reminders.
Exact alarms (Android) — required for time-critical medication alerts.
Photos (optional) — only if you choose to attach an image to a medication entry. Images are stored locally on your device.

Third-Party Services

We use the following third-party services. Each provider has its own privacy policy governing the data they process:

Service	Purpose
Firebase Analytics Google LLC	Anonymous usage analytics
Firebase Crashlytics Google LLC	Anonymous crash reporting
Firebase Messaging Google LLC	Push notifications
Google Generative AI (Gemini) Google LLC	Optional AI-assisted features
App Store / Play Billing Apple Inc. / Google LLC	In-app purchase processing

Data Retention & Deletion

All medication data is stored locally on your device. You can delete it at any time by using the in-app reset option or by uninstalling the app. No server-side deletion request is needed for your medication data.

Anonymous analytics data is retained for 14 months; anonymous crash data is retained for 90 days. For any questions, contact support@corecodery.com.

Your Rights

Depending on your jurisdiction (GDPR, PDPA, CCPA, etc.), you may have the following rights regarding your personal data:

Access — request a copy of the personal data we hold about you.
Rectification — request correction of inaccurate or incomplete data.
Deletion — request that we delete your personal data (“right to be forgotten”).
Withdraw consent — for analytics, advertising, or marketing emails, at any time.
Portability — receive your data in a structured, machine-readable format.

To exercise any of these rights, see our Data Deletion page or email support@corecodery.com.

Children's Privacy

CoreCodery products are intended for general audiences and are not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us at support@corecodery.com and we will delete it promptly.

Data Security

We implement industry-standard security measures including HTTPS across all endpoints, privacy-preserving analytics, and secure hosting infrastructure (Cloudflare Workers). However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

Changes to This Policy

We may update this policy from time to time. Material changes will be reflected by updating the “Last updated” date at the top of this page. For significant changes, we will provide additional notice (e.g., via email or in-app notification). Continued use of our products after changes constitutes acceptance of the updated policy.

Governing Law

This policy is governed by the laws of Thailand. Any disputes arising under this policy shall be subject to the exclusive jurisdiction of the courts located in Thailand. If you are located outside Thailand, applicable local data protection laws (e.g., GDPR for EEA residents, PDPA for Thailand residents) will also apply to you as relevant.

Contact Us

For any privacy-related questions or to exercise your rights, contact us at:

CoreCodery

Email: support@corecodery.com