Privacy policy

Last updated November 2, 2026

Pillwright is built so that your health information stays with you. This policy explains what the app and this website handle, in plain terms.

The app

Your health data stays on your device. Medicines, doses, schedules, lab records, weight, blood sugar, blood pressure, pill designs, and your name live in the app's local store on your iPhone or iPad. The app does not create an account, does not use iCloud for this data, and does not send it to any server in this version.

One download, nothing uploaded. The only network request the app makes on its own is to download the public drug knowledge base, a file with no personal information. The request carries no identifier for you or your device.

Backups are yours. You can export an encrypted backup file protected by a password you choose. We never see the file or the password.

Camera. Scanning a label or barcode happens on the device. Images are not saved or sent anywhere.

Apple Health. If you turn it on, the app reads weight, blood sugar, and blood pressure from Health and writes only values you typed yourself. You can turn this off at any time in Settings.

Notifications. Dose, refill, and lab reminders are local notifications scheduled on your device.

Purchases. Pillwright Plus is sold through Apple. We receive a signed receipt that proves a subscription exists; it carries no name, email, or payment details. Apple's privacy policy covers the purchase itself.

The assistant (Plus, when available). When you ask the assistant a question, the app sends only the question, the names or ids of the medicines in your cabinet, and an optional age range to our server, which forwards them to an AI model provider to compose an answer. No name, birth date, contact details, or device identifiers are sent. We do not log the content of questions or answers. We log only a timestamp, response time, model name, token counts, and an outcome category.

Diagnostics. The app sends no analytics in this version. If anonymous crash or usage counts are added later, they will contain no identifiers and this policy will say so.

This website

Waitlist. If you join the waitlist we store your email address, the time you signed up, and which form you used. We send one confirmation email. Your address is kept only after you confirm; the unsubscribe link in every email deletes it outright.

Rate limiting. To stop abuse, the sign-up endpoint keeps a short-lived count per network address in memory. It is not written to a database.

No tracking. The site sets no advertising or analytics cookies.

Service providers

• Supabase hosts the public drug knowledge base and the waitlist table.
• Vercel hosts this website and the assistant API.
• Resend delivers waitlist emails.
• Anthropic provides the AI model behind the assistant.
• Apple processes purchases and delivers notifications.

Your rights

Because health data never leaves your device, you control it directly: delete the app and it is gone. For the waitlist, use the link in any email or write to support@pillwright.app. Residents of California, the European Economic Area, the United Kingdom, and other regions with privacy laws may have additional rights, and we honor requests to access, correct, or delete the email we hold.

Children

Pillwright is for adults managing their own medicines or those of someone in their care. It is not directed at children under 13, and we do not knowingly collect their information.

Changes

If this policy changes we will update the date at the top and, for material changes, say so in the app.

Questions: support@pillwright.app