Privacy Policy

At MediSave, we prioritize the privacy and security of your personal health data. This Privacy Policy details how we handle, persist, and protect your information to align with Google Play Store developer guidelines, the General Data Protection Regulation (GDPR), and modern privacy best practices.

1. Information We Collect

To provide medication reminders and optional family synchronization, the application collects and utilizes the following data:

• Authentication Data: Your email address and credentials, securely authenticated via Firebase Authentication, to identify your active session.
• Local Medication Details: Medication names, dosages, times, and adherence records (TAKEN, MISSED, PENDING) stored inside a secure local Room SQLite database on your device.
• Caregiver Connections: User IDs and accepted connection statuses, utilized solely if you explicitly opt-in to sync adherence logs with family members or trusted caregivers.
• FCM Tokens: Encrypted Firebase Cloud Messaging tokens, stored strictly to route push alerts for missed medication doses or connection invites.

2. Device-Level Permissions

To function as a reliable scheduling assistant, MediSave utilizes the following high-priority Android system permissions:

• Exact Alarm Permission (SCHEDULE_EXACT_ALARM): Required to schedule precise reminders that bypass device standby/doze states. This ensures medication alarms trigger exactly when due. Tapping the "Alarm precision" card in Settings allows you to manage this permission directly in system preferences.
• Notification Permission (POST_NOTIFICATIONS): Utilized to post daily medication reminders, nudge follow-ups, and caregiver adherence updates to your notification shade.

3. Secure Cloud Synchronization & Sharing

If caregiver connectivity is activated, local adherence logs are synced over encrypted HTTPS channels to Firebase Firestore database clusters. Adherence sharing follows strict security rules: only accepted and authenticated family connections are granted read access to your adherence logs. No medical details are shared with third-party networks, brokers, or advertisers.

4. Absolute Data Control & Deletion

You retain 100% ownership and control over your data. Inside the **Account screen** ("Danger Zone") of the MediSave app, you can trigger a permanent account deletion sequence. Initiating this transaction executes the following operations:

• Permanently deletes your Firebase Authentication account.
• Purges all of your secure cloud adherence logs, connections, and metadata from Firebase Firestore.
• Clears all local databases, app preference caches, and secure storage containers instantly.

5. Data Security & Protection

MediSave is designed with user privacy and data security in mind. We implement modern technical safeguards to protect your records, including end-to-end HTTPS encryption for cloud interactions, tokenized session authorization, database-level security rules, and offline-first local SQLite database storage to ensure maximum data integrity.

6. Contact Us

For questions or support regarding our privacy practices, please contact us at our Support Portal.