Privacy Policy
Last updated: June 2026
Pillora ("Pillora", "we", "us") is a medication reminder and personal health companion app. This policy explains what data Pillora handles, how, and your choices. Pillora is offline-first: the app is fully functional with no account and no internet connection, and in that mode it collects nothing.
1. Our core principle: offline-first, opt-in cloud
- All your data is stored locally on your device (an on-device SQLite database) by default.
- If you use Pillora without an account, the app makes no network requests and we collect no personal data.
- Cloud features (backup & sync, caregiver sharing) are optional. They begin only when you choose to create or sign in to an account. Signing in is the point at which any data leaves your device.
2. Data we collect (only when you opt in)
We collect the following only when you sign in / enable the related feature:
| Data | When | Why |
|---|---|---|
| Email address | When you create an account or sign in (incl. Google sign-in) | To create and manage your account and sync your data |
| Name / profile details | If you enter them | To personalize the app and label health reports |
| Health information — medications, doses taken/skipped, vitals (e.g. blood pressure, glucose, weight), water, sleep, symptoms, journal notes, appointments, medical conditions | When cloud sync is on (signed in) | To back up and sync your data across your devices |
| Device identifier (an app-generated ID) and push notification token | When signed in / when caregiver alerts are enabled | To link your synced data and deliver reminder/caregiver notifications |
| Crash and diagnostic logs | On app errors | To find and fix bugs and keep the app stable |
| Purchase record (which plan you bought) | When you purchase premium | To restore your premium access across reinstalls and devices |
Health data is used only to provide the app's features (backup, sync, caregiver sharing, your own reports). We do not use your health data for advertising, marketing, or profiling, and we do not sell it.
3. Data we do NOT collect
- We do not collect your location.
- We do not access your contacts or address book. Caregiver invitations use a short code/link that you choose to share yourself.
- Medication photos you attach stay on your device and are not uploaded.
- We never see your payment card details — purchases are processed by Google Play Billing.
4. Service providers (processors)
We use a small number of trusted providers that process data on our behalf, under their own security obligations. We do not sell or share your data with third parties for their own purposes.
- Supabase — secure cloud database and authentication (stores your synced data and account).
- Sentry — crash and error diagnostics (account identifiers such as passwords and tokens are stripped before sending).
- OneSignal — delivery of reminder and caregiver push notifications.
- RevenueCat / Google Play Billing — purchase and subscription management.
5. Security
- All data transmitted between the app and our servers is encrypted in transit using TLS.
- Cloud data is protected by row-level security so each account can access only its own data.
- Authentication tokens are stored in your device's encrypted secure storage.
- You are responsible for the physical security of your device.
6. Data retention and deletion
- Local data remains on your device until you delete it or uninstall the app.
- Synced data is retained while your account is active.
- You can permanently delete your account and all associated data at any time from Settings → Account → Delete account in the app, or via www.orasit.com/pillora/delete-account. This permanently purges your data from our cloud servers and from the local device.
7. Children's privacy
Pillora is not directed to children under 13, and we do not knowingly collect personal data from them.
8. International users
If you enable cloud sync, your data may be processed on servers operated by our service providers, which may be located in other countries. We require appropriate safeguards from these providers.
9. Your rights
Depending on your jurisdiction, you may have rights to access, correct, export, or delete your personal data. Account data can be deleted directly in-app (Section 6). For other requests, contact us below.
10. Changes to this policy
We may update this policy. Material changes will be reflected by the "Last updated" date above and, where appropriate, surfaced in the app.
11. Contact
Questions about this policy or your data:
support@orasit.com