Pillmo Privacy Policy
Effective date: 2026-10-31
Operator: SignalNow
Privacy officer: SignalNow Pillmo operations
Contact: signalnow.app@gmail.com
Pillmo is an app that reminds you when to take your medicine and keeps a record of your doses. You use the personal medicine features without signing up. The medicines, schedules and dose records you enter are stored on your device and are not sent to the operator's server.
- Family (Pillmo Premium): Only when you choose Family, sign in and agree to connect with family do we store, on the operator's server, the information you chose to share with the family you connect (section 8).
- Ads: If you use Pillmo for free, a Google AdMob banner ad appears at the bottom of the screen, and Google processes device information to provide ads (section 3). Ads are not shown if you buy Pillmo Premium or Remove ads.
- Usage statistics: We use Google Analytics for Firebase to count how far people get in the app (for example, whether they added a first medicine or how many days they checked off). We never send medicine names, dose records or health readings, and you can turn this off in Settings › Share usage statistics (section 3).
- iPhone app: The iPhone app offers Family, Pillmo Premium and Remove ads just like the Android app, paid through the App Store. For Family sign-in you can use an Apple Account as well as a Google account. Ads (Google AdMob) and usage statistics (Google Analytics for Firebase) work the same as on Android. It does not ask for App Tracking Transparency permission and does not use the advertising identifier (IDFA). Google ML Kit and Google Play billing in section 3 apply to the Android app only, and Sign in with Apple and App Store payments to the iPhone app only.
1. Information we process and where it is stored
| Information | Purpose | Where it is stored and when it is deleted |
|---|---|---|
| Medicine name, strength, schedule, notes, amount left | Medicine reminders, records and refill tracking | Your device. Deleted when you delete the medicine or the app data |
| Time taken, dose status, notes | Dose records, calendar, rates | Your device. Deleted when you delete the record or medicine, or the app data |
| Health readings (blood pressure, pulse, blood sugar, weight) and journal (symptoms, mood, notes) | Health records, trends, medicine reports | Your device. Deleted when you delete the record or the app data |
| Medicine photos you take or choose | Telling medicines apart in your list and records | The app's storage on your device. Cleaned up when you change or remove the photo, delete the medicine, or delete the app data |
| Report details you enter | Creating a medicine report PDF | Your device. PDFs you create must be deleted from wherever you saved them |
| App settings such as reminders and display | Using the app the way you chose | Your device. Deleted when you delete the app data |
| Usage statistics: steps reached in the app (onboarding finished, medicine added, first day checked off, 3 and 7 days checked off, family added or connected, report created, subscription or Remove ads screen viewed or purchased), app instance ID, device and app information | Improving the service (seeing where people stop using the app and how they found it) | Google Analytics. Kept up to 14 months, then deleted. Once you turn it off in Settings, nothing more is sent |
| Your email address, message and any diagnostic information you attach when contacting us | Answering your questions and fixing problems | The operator's support inbox. Information no longer needed is deleted once your request is handled, and you can ask us to delete it |
We do not sell or provide your medicines or dose records for advertising. When you email us, include only what we need to answer. We don't need medicine names, health information or ID documents.
2. Permissions and what they are for
| Permission or feature | Purpose | If you don't allow it |
|---|---|---|
| Notifications | Showing medicine and refill reminders | You can still use records, search and other features |
| Exact alarms | Scheduling reminders at the times you set | Reminders may be delayed depending on your device settings |
| Camera | Reading a medicine box barcode or the text on a label, taking a medicine photo | You can add medicines by searching or typing the name |
| Photo picker | Using a photo you choose as a medicine photo | The default medicine picture is used |
| Boot completed | Restoring scheduled reminders after your phone restarts | Provided by the operating system, with no separate prompt |
| Display over other apps | When [Full-screen alarm] is on, showing the alarm over the lock screen and other apps at dose time | You get a normal notification instead |
Barcode and text recognition is processed on your device, and temporary photos used for recognition are cleaned up afterwards. Images you set as a medicine photo are kept in the app's storage and are not uploaded to a server. The originals in your gallery are separate from the copies stored in the app.
The app information may list a microphone permission, but the current version does not ask to use the microphone or record audio (there is no voice reminder feature). You can change optional permissions in your phone's settings.
3. Internet connections and outside services
Separately from storing your medicines and dose records on your device, the following features communicate with outside services.
- Public medicine photos: Public pill photos are downloaded from the Korea Ministry of Food and Drug Safety server (
nedrug.mfds.go.kr). Ordinary web request information (such as your IP address) may reach that server. - Google ML Kit: Used for barcode and text recognition. Photos and recognized text are not uploaded for recognition, but the SDK sends device and app information, an installation identifier, and diagnostic information such as performance and errors to Google. See Google ML Kit data disclosure for details.
- Google Firebase: Firebase Cloud Messaging and installation management included in the app may send service information such as an app installation identifier and a notification registration token to Google when they start. Family sign-in (Google, Apple or anonymous) also uses Firebase Authentication. Your personal medicines and dose records are not part of this communication. See Firebase privacy information for how each service processes data.
- Google Analytics for Firebase (usage statistics): To count how far people get in the app (section 1), we send Google the app instance ID, device and app information (model, OS and app version, language), an approximate region estimated from your IP address, and how you installed the app (referral information from the store link). We never send medicine names, dose records, health readings, journal entries or what you call your family members. We don't use the advertising ID or device identifiers (SSAID on Android, IDFV on iPhone), and this information is not used to personalize ads. You can turn it off any time in Settings › Share usage statistics, and nothing more is sent after that. See How Google uses information from sites or apps that use its services for details.
- Google AdMob (ads): To show banner ads to free users, the advertising ID, device and app information, an approximate location estimated from your IP address, and ad impression and click information may be sent to Google. Your medicines and dose records are not included in ad requests, and ad content is limited to Parental Guidance (PG) or below. Where the law requires consent, the app shows a consent screen, and you can change your privacy choices again in the app's settings. You can reset or delete the advertising ID in your phone's settings. The iPhone app doesn't ask for App Tracking Transparency permission, so it requests ads without the advertising ID (IDFA). See How Google uses information in advertising for details.
- Google Play billing (Android): Pillmo Premium (subscription) and Remove ads (one-time purchase) are paid through Google Play. The operator does not receive card or other payment details. To confirm access to Family, our server checks the purchase status and purchase token with Google Play.
- App Store payments (iPhone): Pillmo Premium (subscription) and Remove ads (one-time purchase) are paid through the App Store. The operator does not receive card or other payment details. To confirm access to Family, our server checks purchase information signed by Apple (product, original transaction ID, purchase and expiry time, whether it was refunded, and whether it is a live or test purchase), and receives subscription renewal, expiry and refund updates through Apple's server notifications.
- Sign in with Apple (iPhone): If you choose your Apple Account when starting Family, Apple passes a user identifier specific to this app to Firebase Authentication. We do not ask for your name or email. When you delete your Family account, the Sign in with Apple connection is revoked too.
- Send feedback: Opens your email app, and nothing is sent until you send it yourself. If you choose to attach diagnostic information, it may include your device model, OS and app version, and notification permission status.
- Visiting this website: This website is served through Cloudflare. Ordinary connection information such as your IP address, the requested address and the time may be processed to deliver pages and keep them secure. This website does not use advertising or analytics tracking scripts.
The iPhone app does not run Google ML Kit. Google AdMob (banner ads) and Google Analytics for Firebase (usage statistics) work as described above. Only if you use Family does the app sign in with Firebase and create a notification registration token to receive family alerts, which are delivered through the Apple Push Notification service (APNs). If you don't use Family, no sign-in or notification registration token is created. Label text and barcodes are read only on your iPhone with Apple's on-device Vision feature. Your medicines, dose records and health readings are stored on your iPhone, and only what you choose to share through Family is sent to the server as described in section 8. Downloading public medicine photos and sending feedback work as described above.
Google and Cloudflare operate their services outside Korea as well, so related information may be processed outside Korea when you use these services. See the Google Privacy Policy and the Cloudflare Privacy Policy for details.
Pillmo does not use Firebase Crashlytics.
4. Backup, export and sharing
Backup files, CSV files (including health readings and journal files) and medicine report PDFs are saved or shared wherever you choose, such as a files app, email or cloud storage. These files may include your medicines, dose records, health readings and journal, and the operator does not automatically receive or keep them.
Medicine photos you set yourself are not included in the app's backup file. When you restore on a new phone, choose the photos again. Backup and export files and copies you shared may remain after you delete the app, so delete them from where you keep them if you no longer need them. Backup and restore features from Android or your device maker follow that service's settings and policies.
5. Viewing, correcting and deleting your information, and contacting us
You can view, edit, export and delete your personal medicine data in the app. Deleting a medicine also deletes its schedule, dose records and refill records. To erase all app data on your device, clear Pillmo's data in your phone's settings or uninstall the app. On iPhone, delete the Pillmo app.
If you don't use Family, the operator does not hold your personal medicine data, so we cannot view or delete the records on your device for you. You can ask us at the contact address above to view, correct or delete information you sent by email, or to delete a Family account. We confirm your identity as far as the request requires and let you know the result.
See How to delete your account and data for the steps.
6. Keeping information safe
Your personal medicine records and the photos you set are processed in the app's storage on your device. We use HTTPS to communicate with outside services and ask only for the minimum information needed when answering questions. Backup and export files stay where you put them, so check your device lock and who you share files with.
7. Users under 14
Pillmo is not a service for children under 14. If we learn that a child's personal information was included in a message or similar, we delete what isn't needed. Please send related requests to the privacy contact address.
8. When you use Family (Pillmo Premium)
Family is optional. Only when the person who invites (subscribed to Pillmo Premium) and the family member who connects with an invite code sign in and agree to connect do we store the following on the Family server. This does not apply to people who use only the personal medicine features.
| Information | Purpose |
|---|---|
| Google, Apple or anonymous sign-in identifier, household and what you call each profile | Sign-in and managing family connections |
| Medicines, schedules, dose records, amounts left and health readings (blood pressure, pulse, blood sugar, weight) you agreed to share | Syncing between family and seeing dose status and health readings. The journal is never sent to family |
| Device token, app version, time zone, notification status and alert settings | Delivering family alerts and showing notification status |
| What you agreed to, the wording version and the time | Confirming consent to collect and share health information |
| Hashed invite code, number of attempts, request IDs and delivery records | Protecting connections and preventing duplicate processing |
| Purchase status, hashed purchase token (original transaction ID for the App Store) and which store | Confirming access to Pillmo Premium (for everyone connected) |
We ask for separate consent to collect and share health information when you connect with family. With Share with each other, only the scope you choose is sent, and health readings are sent only if you choose “My records too”. You can still use the personal medicine features if you don't agree.
We use Cloudflare for storage and transfer, Google Firebase for sign-in and notifications (iPhone notifications go through the Apple Push Notification service), and Google Play and the App Store to confirm purchases. Related information may be processed on servers these services run outside Korea.
Dose records on the server are cleaned up after 5 years, request IDs used to prevent duplicate processing after 7 days, and operational records such as notification deliveries after 30 days, by scheduled jobs. When a family connection is removed or an account is deleted, access is blocked right away, and after a 30-day grace period a daily deletion job removes the data. When a household owner deletes their account, the whole household is deleted; when a member deletes theirs, it applies to that account and its connections.
Server deletion does not delete medicines and records kept on each phone or files you exported. If further cleanup is needed, such as account information held by an outside sign-in service, contact us at the address above. See How to delete your account and data for the request steps.
9. Privacy officer and contact
- Operator: SignalNow
- Privacy officer: SignalNow Pillmo operations
- Email: signalnow.app@gmail.com
Please email us with questions, concerns or requests about how your personal information is handled.
10. Changes to this policy
When this policy changes, we announce the changes on this website starting 7 days before they take effect. For changes that significantly affect your rights, we give enough advance notice and ask for consent where needed.
Effective dates and changes are recorded in the privacy policy change history (in Korean).