TakeMyPills Privacy Policy

Health data (GDPR Article 9)

Medication names, dosages, schedules and intake history are "special category" health data under GDPR Article 9. We process them on the basis of your explicit consent (Art. 9(2)(a)), for the sole purpose of helping you keep track of doses. We never share them with advertisers and never train models on them. Push notifications never contain a medication name, so a glance at your lock screen reveals nothing about what you take.

1. What we collect

TakeMyPills collects what it needs to remind you, and nothing else:

• Profiles of the people you track: first name, colour, role (yourself, a child, a parent).
• Medications: name, dosage, free-text notes, schedule.
• Intake history: taken, skipped, and when.
• Family code, if you share tracking with someone.
• A random device identifier, your language and your time zone — needed to send reminders to the right phone at the right hour.
• Pseudonymous usage analytics via PostHog Cloud EU: which screens are opened, which features are used, crash reports. They carry a random install identifier, your app version, device model, and your IP address reaches the server. They never contain a medication name.

2. How we use it

• Show your medications, your schedule and your history inside the app.
• Send your reminders at the right time, on every device of your family.
• Find crashes and see which features help — never for advertising, never for profiling. TakeMyPills shows no ads at all.
• Validate your subscription and unlock premium features.

3. Who else sees it

We do not sell, rent or trade your data. It reaches only the providers the app needs to run:

• Our own server (trainrboost.com, hosted in France) — family sync and reminders. This is where your profiles, medications and intake history are stored if you turn family sharing on.
• PostHog Cloud EU — pseudonymous usage analytics, hosted in the European Union.
• RevenueCat — subscription status, under a pseudonymous identifier.
• Apple / Google — payment processing for subscriptions, under their own policies.
• Expo (u.expo.dev) — the app checks for a new version at launch, which tells Expo your platform, app version and IP address.

4. How long we keep it

• Without family sharing, nothing leaves your device: your medications and your history live in the app only, and uninstalling removes them.
• With family sharing on, your profiles, medications (name, dosage, notes) and intake history are stored on our server so the other members can see them. They are deleted automatically when the last member leaves the family.
• Device identifiers and push tokens are removed after 180 days without any activity, and immediately when you erase your data.
• Analytics events are kept for 12 months.

5. Your rights

Under the GDPR you can, at any time:

• Erase everything: Settings → Reset everything wipes your device and, if you were the last member of your family, everything we held on the server. If other members remain, the shared data stays for them — ask each of them to leave the family to have it deleted.
• Object to analytics: turn off "Share usage data" in Settings. The app then stops sending events, at this launch and at every later one.
• Ask what we hold about you, or ask for a correction, by emailing privacy@trainrboost.com.
• Lodge a complaint with your data protection authority — in France, the CNIL (cnil.fr).

6. Legal basis, controller, transfers

• Controller: TrainRBoost — contact privacy@trainrboost.com.
• Legal basis: your explicit consent for health data (Art. 9(2)(a)); performance of the service for reminders and family sync (Art. 6(1)(b)); our legitimate interest in a working app for crash reports and usage analytics (Art. 6(1)(f)), which you can object to at any time.
• Transfers outside the EU: our server and PostHog are in the European Union. RevenueCat, Apple, Google and Expo are established in the United States; those transfers rely on the European Commission's standard contractual clauses.

7. Children and caregivers

TakeMyPills is made for adults managing their own medication, and for parents and caregivers tracking someone else's. Children under 13 should not use it on their own. A parent who adds a child profile becomes the controller of that profile and exercises the child's rights on their behalf (GDPR Art. 8).

8. Contact

For any privacy question, data request or concern, write to us:

privacy@trainrboost.com