Your medications are yours.

The short version

• No ads, no analytics, no tracking, no data sold or shared for marketing.
• Without an account, nothing about your medications leaves your iPhone.
• With an account, only encrypted data is stored on our servers.
• Pill photos are checked on your iPhone and never uploaded or kept.
• You can delete your account, and everything stored with it, from the app.

On your iPhone

Your medications, schedules, dose history and settings are stored on your iPhone. Reminders are scheduled by iOS on your iPhone; no server sends them, so no one else sees the medication names they show.

When aizu asks you to show a pill to the camera, the photo is checked on your iPhone for a pill-like shape and then discarded. It isn’t uploaded, and only the result (“confirmed by photo”) is saved with the dose.

If you back up your iPhone to iCloud or to a computer, iOS includes aizu’s data in that backup, under Apple’s terms.

If you create an account

Accounts are optional and only exist to keep your data in sync between your iPhones and safe if you lose one. You sign in with Apple. From that we receive:

• A random account identifier, and an email address — which can be a private relay address from Apple’s “Hide My Email” if you choose. We never ask for your name. The email is used only to identify your account; we don’t send marketing.
• Your medications and dose history, encrypted on your iPhone with AES-256 before upload. The key stays in your iCloud Keychain, and a recovery key only you are shown. We store the data under random-looking names and padded to fixed sizes, so we can’t tell what it is, which months it covers, or roughly how much there is.

What we can see is limited to what any server sees: that the account exists, when it was created, when it last synced, and the IP address a request came from in our provider’s logs.

Because only you hold the key, we can’t recover your data if you lose both your devices and your recovery key.

If you subscribe

Payments are handled by Apple. We never see your card or payment details. To know whether a subscription is active, aizu uses RevenueCat, which receives your purchase history from Apple, a random identifier (the account identifier if you’re signed in), and basic device information such as your iPhone model, iOS version and App Store country. RevenueCat receives nothing about your medications or history.

Who processes data for us

• Supabase hosts accounts and the encrypted sync data.
• RevenueCat manages subscription status.
• Apple provides Sign in with Apple, iCloud Keychain, payments and app distribution, under its own privacy policy.

Some of these providers are based in the United States. Where data is transferred outside the European Economic Area, it is covered by the European Commission’s standard contractual clauses or an equivalent safeguard.

We rely on your consent and on providing the service you asked for (keeping your account and subscription working) as the legal basis for this processing.

How long we keep it

Your account and encrypted data are kept until you delete your account. In the app, go to Settings → Account → Delete account: the account and all of its synced data are removed from our database straight away, and any backup copies expire on our provider’s normal schedule. The data on your iPhone stays there until you delete the app. Apple and RevenueCat keep purchase records as required for tax and accounting.

Your rights

You can ask to access, correct, export or delete your personal data, or object to how it is processed. Your medications and history can only be read on your own devices, so you view, change and delete them in the app itself. You can also complain to your local data protection authority.

Children

aizu isn’t directed at children under 16.

Changes and contact

If this policy changes, the date at the top changes with it.

Questions or requests: hello@aizu.co.