AI Pill IDPill identifier appDownload

Privacy Policy

Effective June 15, 2026. Last updated October 9, 2026.

This Privacy Policy describes how Pill Identifier: AI Pill ID (“AI Pill ID,” “we,” “our”) handles information when you use our mobile application on iOS and Android (the “App”). The iOS and Android versions are built differently, so this policy describes each one separately. It explains what leaves your device, where it goes, and why.

The App does not require an account, and there is no sign-in. We do not collect your name, email, phone number, postal address, location, contacts, or calendar.

1. iOS app

1.1 Pill identification

When you identify a pill, the photo (from the camera, your photo library, or an Apple Visual Intelligence capture) and any imprint text you type are sent through AIProxy, a secure API proxy that verifies requests with Apple DeviceCheck, to Google’s Gemini API for analysis. The request does not carry a user ID. We do not run a server that stores these photos or requests. How long AIProxy and Google retain request data is governed by their own terms, including the Gemini API terms.

1.2 AI Health Assistant and Drug Interaction Checker

When you use these features, your question, the previous messages in that chat (as conversation context), and the medicine names involved are sent the same way: through AIProxy to Google’s Gemini API.

1.3 Your permission before sharing with AI

From version 1.0.16, the iOS app asks for your permission in a “Share with AI?” popup before anything is sent to Google’s Gemini API. You can withdraw this permission at any time in the App under Settings > Share with AI. While it is off, nothing is sent to Gemini.

1.4 Data stored on your device

Your scanned medicines (including their photos), reminders, dose logs, and chat history are stored on your device. From version 1.0.16, this data stays on your device only and is not synced to iCloud.

Versions before 1.0.16 could sync this data to your private iCloud database through Apple CloudKit. If you used an earlier version, a copy may remain in your iCloud. We cannot access your private iCloud data. You can delete it in iOS Settings > [your name] > iCloud > Manage Storage > Pill Identifier.

As with any iPhone app, your device’s own iCloud or computer backup may include the App’s data. This is standard iOS behavior and is controlled by your backup settings.

1.5 Analytics (TelemetryDeck)

We use TelemetryDeck to understand how the App is used and to fix problems. TelemetryDeck receives a pseudonymous app user ID (a random value derived from Apple’s identifier for vendor) and feature-use events. From version 1.0.16, these events are:

  • App launched, scan started, and scan completed
  • The confidence level of an identification
  • Paywall shown, trial started, and subscription purchased
  • Reminder created (only whether food timing and supply tracking are turned on)
  • A dose was logged (without whether it was taken or skipped)
  • A refill alert fired, and supply was refilled
  • A streak milestone was shown
  • A reminder notification was opened, or one of its buttons was pressed (not which button)
  • Your “Share with AI” choice (allowed or declined)
  • Error diagnostics

From version 1.0.16, analytics do not include whether a dose was taken, skipped, or missed, your dose schedules, pill or refill counts, streak lengths, which reminder button you pressed, or anything from Apple Visual Intelligence. Versions before 1.0.16 sent some of this detail, including dose status, refill counts, and the generic labels Visual Intelligence sends (such as “pill” or “tablet”).

No photos and no medicine names are sent to analytics.

1.6 Subscriptions (RevenueCat)

We use RevenueCat to manage subscriptions. RevenueCat receives the same app user ID, your purchase and subscription history, and the device and app information it collects to manage subscriptions. Payments are processed by Apple. We never see your card details.

1.7 Notifications

From version 1.0.16, the iOS app only sends the medication reminders you set up, and does not send promotional notifications. Reminders are scheduled locally on your device. We do not run a push notification server. You can turn notifications off in iOS Settings.

2. Android app

The Android app stores your pill scan history, identification results, medication reminders, adherence records, chat history, saved interaction checks, and preferences locally on your device. This data is not sent to our servers. You can delete it inside the App, and uninstalling the App removes it.

When you identify a pill, ask the health assistant a question, or check interactions, the photo, question text, or selected medicines are sent to our backend on Google Cloud, which forwards them to Google’s Gemini API to generate a response. Our backend does not keep this data after the response is returned.

The Android app uses Firebase App Check (Play Integrity) to verify that requests come from a genuine, unmodified install. This produces a short-lived attestation token. It uses RevenueCat to manage subscriptions, which assigns an anonymous identifier to your install to track subscription status. Purchases are processed by Google Play.

3. No ads and no tracking

The App has no ads and no advertising SDKs. It does not use the advertising identifier (IDFA), does not track you across other apps or websites, and we do not sell or share your data for advertising.

4. Third parties

  • Google (Gemini API): AI model for pill identification, the health assistant, and interaction checks (iOS and Android). Privacy policy.
  • AIProxy: Secure proxy that forwards iOS app requests to the Gemini API (iOS). Privacy policy.
  • Apple (App Store, Visual Intelligence, iCloud / CloudKit): Purchases through the App Store, and Visual Intelligence as an on-device capture source: the App reads the image Visual Intelligence passes to it, and from version 1.0.16 that image is sent to Google Gemini only after you open it and allow Share with AI (iOS). iCloud sync applies to iOS versions before 1.0.16 only. Privacy policy.
  • TelemetryDeck: Pseudonymous usage analytics (iOS). Privacy policy.
  • RevenueCat: Subscription management (iOS and Android). Privacy policy.
  • Google (Firebase App Check, Google Cloud, Google Play): Request verification, the AI backend, and purchases (Android). Privacy policy.

5. How we use information

  • To generate the identification, chat reply, or interaction report you request
  • To manage your subscription
  • To understand App usage and fix errors (iOS analytics)
  • To protect the service from abuse and keep it secure

We do not use your data for advertising, and we do not sell it.

6. Deleting your data

  • In the App: delete individual items such as scans, reminders, dose logs, and chats.
  • iCloud (iOS versions before 1.0.16): delete any copy left in your iCloud in iOS Settings > [your name] > iCloud > Manage Storage > Pill Identifier.
  • Uninstall: removing the App deletes the data stored on your device.
  • Analytics and subscription records: email support@aipillid.com and we will delete the records tied to your app user ID from TelemetryDeck and RevenueCat.

You can also revoke camera, photo library, and notification permissions at any time in your device settings. Identification needs a photo to work.

7. Children’s privacy

The App is not directed to children under 13 (or the equivalent minimum age in your jurisdiction). The App is age-rated 16+ on the App Store (17+ on devices running iOS versions earlier than 26). We do not knowingly collect information from children. If you believe a child has used the App, please contact us at support@aipillid.com.

8. California residents (CCPA)

If you reside in California, you have the right under the California Consumer Privacy Act to (a) know what categories of personal information we collect, (b) request deletion, and (c) opt out of sale. We do not sell or share personal information for cross-context behavioral advertising. The categories we process are described in Sections 1 and 2. To make a request, email support@aipillid.com.

9. European Economic Area / United Kingdom (GDPR & UK GDPR)

If you are in the EEA or UK, our lawful basis for processing the data needed to provide a feature you request is performance of that service (Art. 6(1)(b)). Our lawful basis for pseudonymous analytics and for keeping the service secure is our legitimate interest in maintaining and improving the App (Art. 6(1)(f)). You have the right to access, rectify, delete, restrict, and object to processing, and to lodge a complaint with your supervisory authority.

10. International data transfers

The service providers listed in Section 4 may process data outside your country, including in the United States. The Android app’s backend runs on Google Cloud in the United States.

11. Security

All network traffic between the App and the services above is encrypted in transit. On iOS, requests to the Gemini API go through AIProxy, which verifies them with Apple DeviceCheck. On Android, requests to our backend are verified with Firebase App Check, and backend keys are stored in Google Secret Manager.

12. Medical disclaimer

The App is for informational purposes only and is not medical advice. Identification results are likely matches, not a confirmed identification. Always confirm with a pharmacist or doctor before taking, stopping, or changing any medicine. In an emergency, call your local emergency number.

13. Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top of this page reflects the most recent revision. For material changes, we will post a notice inside the App.

14. Contact us

Privacy questions or requests: support@aipillid.com