Pilly

Privacy Policy

Last updated: June 16, 2026

Pilly ("us", "we", or "our") operates the Pilly mobile application (the "App"). We are committed to protecting your personal information and your right to privacy. This policy explains what we collect, how we use it, and the choices you have. Because Pilly handles health-related information, we hold ourselves to a stricter standard than a typical app.

1. Your medication data stays on your device

Your medications, schedules, dose history, notes, and settings are stored locally on your device, and backed up to your own private iCloud so they survive reinstalling the App. We do not run user accounts, we do not upload your medication list to a Pilly server for storage, and we cannot see it. Deleting the App and clearing the App's iCloud backup deletes this data.

If you use the in-app export or doctor-report features, the data goes only where you choose to share it.

2. AI features and what they send

Two optional features send data to our servers strictly to answer your request, and the data is processed by our AI provider (OpenAI) to generate the response:

We do not use this data to train models, we do not sell it, and we do not keep copies beyond what is needed to process the request.

3. Apple Health (HealthKit)

If you choose to connect Apple Health, Pilly reads the health measurements you authorize (such as weight, blood pressure, blood glucose, and heart rate) to display them alongside your medication insights on your device, and to include them in doctor reports that you choose to generate and share.

HealthKit data is never sent to our servers, never shared with or sold to third parties, and never used for advertising, marketing, or AI processing. It leaves your device only inside a report you yourself create and send. You can revoke access at any time in the iOS Health app under Sharing.

4. Subscriptions and in-app purchases

Pilly Plus and Pilly Pro are optional auto-renewing subscriptions sold and billed by Apple (App Store). When you subscribe, restore, or cancel, the purchase is handled entirely by Apple. Pilly receives only the transaction information Apple provides to verify your subscription status — it does not include your payment details or personal identity. We use it solely to unlock paid features. Apple's handling of your purchase is governed by Apple's privacy policy.

5. Notifications

Dose reminders and refill alerts are scheduled locally on your device. The content of your reminders (medication names, dosages) is composed on-device and is visible on your lock screen according to your iOS notification settings.

6. What we collect automatically

The App itself does not include third-party analytics or advertising SDKs. Apple may provide us aggregated, anonymized statistics (downloads, crashes) through App Store Connect. Our servers keep standard technical logs (timestamps, anonymized request metadata) for reliability and abuse prevention.

7. How long we keep information

AI requests are processed transiently. Server logs are retained for a limited period for security and reliability, then deleted. Your medication data is yours, on your device and your iCloud — we never had it.

8. How we keep information safe

Requests between the App and our servers are encrypted in transit. We apply appropriate technical and organizational measures on our servers. No method of electronic transmission is 100% secure, and transmission is at your own risk.

9. Children

The App is not directed to children under 13, and we do not knowingly collect data from them. A parent, guardian, or caregiver may use the App to manage a dependent's medications.

10. Your rights

Depending on your jurisdiction, you may have rights to access, rectify, erase, or restrict processing of personal information. Because your medication data is stored only on your device and your iCloud, you can exercise most of these rights directly: edit or delete data in the App, or use Settings → Clear all data. For anything else, contact us.

11. Changes to this policy

We may update this policy from time to time. The updated version is effective as soon as it is accessible, and is indicated by the "last updated" date above.

12. Contact us

Questions or comments about this policy? Email inquiries@zaatar.tech.