Pillr

Privacy Policy

Last updated: July 2026

Overview

Pillr is a clinical decision-support app designed for pharmacists. We take your privacy seriously. This policy explains what information we collect, how we use it, and how we protect it.

Information We Collect

We collect only what is necessary to provide the service:

Account information — your name, email address, and professional role (pharmacist or administrator), provided when you register.
Shift data — clock-in and clock-out times you record within the app.
Case log entries — medication names, severity ratings, and counselling notes you choose to save. These entries must not contain patient names, IDs, or any other patient-identifying information.
Rx Assistant queries — the clinical questions you submit to the AI assistant. These are processed to generate a response and are not used to train AI models.
Feedback — any feedback or reports you voluntarily submit in-app.
Profile photo — an optional avatar image, collected only if you choose to upload one from your device.
Security logs — timestamps of sign-in, sign-out, and password-change events, retained to help protect your account.

What We Do Not Collect

Patient names, dates of birth, national IDs, or any patient-identifying data.
Location data.
Your photo library, device contacts, or files — other than a profile photo you choose to upload.
Advertising identifiers or third-party tracking data.

How We Use Your Information

To provide and operate the Pillr service.
To authenticate your account securely.
To generate AI-assisted clinical responses to your queries.
To display your case log history and shift statistics.
To improve the reliability and quality of the app.

We do not sell your data. We do not use your data for advertising.

Third-Party Services

Pillr uses the following third-party services to operate:

Supabase — authentication and secure database storage. (Privacy policy)
Anthropic — AI language model that powers the Rx Assistant. Queries are sent anonymised and without patient-identifying information. (Privacy policy)
NLM RxNorm API — public drug database used for drug name lookups. No personal data is sent.
Have I Been Pwned — k-anonymity password breach check during password changes. Only the first 5 characters of a hashed password are transmitted; your actual password never leaves your device.

Data Storage and Security

Your account data and case log entries are stored in Supabase, which uses industry-standard encryption in transit (TLS) and at rest. Access to your data is restricted to your account only. Administrator accounts can view aggregated feedback submitted by their team but cannot access individual case logs.

Data Retention

Your data is retained for as long as your account is active. You may request deletion of your account and all associated data at any time by contacting us at the address below.

Your Rights

You have the right to:

Access the personal data we hold about you.
Request correction of inaccurate data.
Request deletion of your account and data.
Withdraw consent at any time by stopping use of the app.

To exercise any of these rights, please contact us using the details below.

Children

Pillr is intended solely for use by qualified pharmacists and healthcare professionals. It is not directed at or designed for use by anyone under the age of 18.

Changes to This Policy

We may update this privacy policy from time to time. When we do, the "Last updated" date at the top of this page will change. Continued use of the app after changes constitutes acceptance of the updated policy.

Contact

For any privacy-related questions or requests, please contact:

Pillr Support
madawialdehani@gmail.com