Privacy Policy — Simple Prescription Organizer

**Effective date:** February 24, 2026

**Last updated:** February 24, 2026

**App name:** Simple Prescription Organizer

**Package / Bundle ID:** com.simple.simple_prescription_organizer

**Contact:** support@prescriptionorganizer.app

—

## 1. Introduction

Simple Prescription Organizer (“the App”, “we”, “our”, or “us”) is a personal health records manager designed to help individuals and families organize prescriptions, test reports, medicines, and doctor information on their own device. We are deeply committed to protecting the privacy of your health data. This Privacy Policy explains what information the App collects, how it is used, where it is stored, and your rights regarding that information.

By using the App, you agree to the practices described in this Privacy Policy. If you do not agree, please discontinue use of the App.

—

## 2. Summary of Key Principles

– **Your health data stays on your device.** All medical records, prescriptions, and attachments are stored exclusively in a local SQLite database on your phone. We do not operate any servers that receive or store your personal health information.

– **No account is required** to use the App. You can use all core features entirely offline without creating any account.

– **Google Drive sync is opt-in and premium-only.** If you subscribe to SPO Premium, you may optionally back up your data to your own personal Google Drive account. The data goes directly to your Google account — not to our servers.

– **Ads are shown to free users only.** If you use the free version, Google’s advertising platform (AdMob) may collect certain device identifiers to show relevant ads. Premium subscribers see no ads whatsoever.

– **We do not sell, rent, or share your personal health data** with any third party.

—

## 3. Information We Collect and Store

### 3.1 Information You Provide (Stored Locally on Your Device)

The following data is entered by you and stored entirely on your device in a local SQLite database:

**Family Profiles**

– Family member names and their relationship to you (e.g., Self, Father, Mother, Spouse, Son, Daughter)

– Optional profile image

**Prescriptions**

– Visit date and medical condition / disease name

– Attending doctor’s name, specialty, and hospital

– Prescribed medicines: name, strength, dosage form, dose frequency, relation to meals, duration, and special instructions

– Recommended diagnostic tests

– Custom tags

– Active/inactive status

– Optional attachment: a photo or PDF scan of the physical prescription

**Test Reports**

– Test name, lab name, and date

– Attending doctor and family member association

– Optional attachment: a photo or PDF of the test report

**Doctors**

– Doctor name, specialty, hospital

– Optional visiting card photo

**Medicine Reminders & Dose Tracking**

– Scheduled medicine dose times (morning, evening, night)

– Whether a dose was marked as taken today (stored locally via device shared preferences; this data is automatically cleared daily)

**Application Settings**

– Notification preferences (on/off, alert style)

– Theme color preference

– PIN code (stored as a one-way cryptographic hash — the original PIN is never stored)

– Biometric authentication preference

– Auto-sync interval preference (premium only)

—

### 3.2 Attachments and Files

When you attach a photo or PDF to a prescription, test report, or doctor record, the file is copied into the App’s private storage directory on your device. These files:

– Are stored entirely on your device

– Are not transmitted to any server by the App

– Are included in backup archives only if you explicitly initiate a backup to your own Google Drive (premium) or export using the device’s share sheet

—

### 3.3 Information Collected by Third-Party Services

The App integrates the following third-party SDKs, each of which may collect data according to their own privacy policies:

#### a) Google AdMob (Free users only)

Free users see banner ads, interstitial ads, and app-open ads served by **Google AdMob**. AdMob may automatically collect:

– Device identifiers (Advertising ID / IDFA)

– IP address (used to derive approximate location for ad targeting)

– Device type, OS version, language, and time zone

– Ad interaction data (e.g., impressions, clicks)

AdMob uses this data to show personalized advertisements. You can opt out of personalized advertising through your device settings (Android: **Settings → Google → Ads → Opt out of Ads Personalization**; iOS: **Settings → Privacy & Security → Tracking → disable tracking for this app**).

**Premium subscribers are completely ad-free.** No ad SDKs are invoked after premium status is activated.

AdMob Privacy Policy: https://policies.google.com/technologies/ads

—

#### b) Firebase (Core Services)

The App uses **Firebase Core** to support SDK initialization. Firebase may collect basic diagnostic information such as:

– App instance identifier

– App version

– Device type and OS

Firebase Privacy Policy: https://firebase.google.com/support/privacy

—

#### c) Google Sign-In & Google Drive API (Premium — Opt-in)

If you subscribe to SPO Premium and choose to enable **Google Drive Sync**, the App will request you to sign in with your Google account. The following applies:

– The App requests only the **`drive.appdata` scope**, which limits access strictly to the App’s private, hidden folder in your Google Drive. The App cannot read any other files in your Google Drive, and no one else can see this folder.

– The backup archive (a ZIP file named `spo_backup.zip`) contains your SQLite database and all attachment files (prescription images/PDFs, test reports, doctor visiting cards).

– This backup goes **directly from your device to your Google account**. We never see, access, or store your backup data.

– Your Google email address is displayed in the Settings screen to confirm which account is connected.

– You can revoke access at any time by signing out within the App, or via your Google Account’s **Security → Third-party apps with account access** page.

Google Sign-In & Drive Privacy Policy: https://policies.google.com/privacy

—

#### d) In-App Purchases (Google Play / Apple App Store)

SPO Premium is a yearly subscription ($6.99/year) processed entirely by **Google Play** (Android) or the **App Store** (iOS). We do not collect or process any payment information. All purchase data is handled by the respective platform and is subject to their terms and privacy policies:

– Google Play: https://policies.google.com/privacy

– Apple App Store: https://www.apple.com/legal/privacy/

—

#### e) Google ML Kit — Text Recognition (On-Device)

When you scan a prescription image, the App uses **Google ML Kit’s Text Recognition** to extract text from the image. This processing occurs **entirely on your device** using an on-device machine learning model. No image data or recognized text is sent to Google’s servers or any external service.

ML Kit Privacy Policy: https://developers.google.com/ml-kit/terms

—

## 4. How We Use Your Information

| Purpose | Data Used | Legal Basis |

|—|—|—|

| Display and manage your health records | Health data you enter | Consent (you provide it) |

| Schedule and deliver medicine reminder notifications | Medicine names, dose times | Consent (you enable notifications) |

| Back up and restore your data (premium only) | All locally stored data | Consent (you initiate backup/restore) |

| Show advertisements (free users only) | Device identifiers (via AdMob) | Legitimate interest / Consent |

| Process in-app subscription purchases | Purchase receipt (by platform) | Contract performance |

| Provide app security (PIN / biometric lock) | PIN hash (local only) | Consent (you enable the PIN) |

We do not use your health information for research, analytics, marketing, or any purpose beyond providing the core features of the App.

—

## 5. Data Storage and Security

### 5.1 Local Storage

All personal health data is stored in a private SQLite database inside the App’s sandboxed storage on your device. This storage is:

– Not accessible to other apps on your device (standard Android/iOS sandbox)

– Not transmitted to any server by the App

– Protected by your device’s own encryption (if you enable device encryption)

### 5.2 App-Level Security

– **PIN protection:** You may set a 4-digit PIN. The PIN is stored as a one-way cryptographic hash (SHA-256 based). The original PIN is never stored or recoverable.

– **Biometric authentication:** If your device supports fingerprint or face recognition, you may optionally use biometrics in addition to a PIN.

– **Screen lock:** The App automatically locks when sent to the background, requiring PIN or biometric re-authentication on return.

### 5.3 Google Drive Backup Security

Backups stored in your Google Drive App Data folder are encrypted in transit (HTTPS/TLS) and protected by Google’s security infrastructure. Access requires authentication with your Google account.

—

## 6. Data Sharing

We **do not sell, rent, lease, or share** your personal health information with any third parties for their commercial purposes.

Data may be indirectly shared in the following limited circumstances:

– **Google AdMob:** Device advertising identifiers are shared with AdMob to serve ads (free users only, as described in Section 3.3.a)

– **Google Drive:** Your backup archive is stored in your own Google account (premium users who opt into sync, as described in Section 3.3.c)

– **Platform stores:** Purchase receipts are processed by Google Play or the App Store (as described in Section 3.3.d)

– **Legal compliance:** We may disclose information if required by law or to protect the rights, property, or safety of our users or the public. However, given that we do not store your health data on our servers, any such request would be extremely limited in scope.

—

## 7. Data Retention

| Data | Retention |

|—|—|

| Health records (prescriptions, tests, doctors, family) | Retained until you delete them or use “Clear All Data” |

| Attachment files (images, PDFs) | Retained until you delete the associated record |

| Daily dose-taken status | Automatically cleared each day |

| Settings preferences | Retained until app uninstall or “Clear All Data” |

| Google Drive backup | Retained in your Google account until you delete it |

| AdMob identifiers | Managed by AdMob per Google’s retention policies |

If you uninstall the App, all locally stored data is deleted by the operating system as part of standard app removal.

—

## 8. Your Rights and Choices

Regardless of your location, you have the following controls:

### 8.1 Access and Portability

You can view all data within the App at any time. You can export a complete backup of all your data (database + attachments) as a ZIP file using **Settings → Export Data** and share it to any location of your choice.

### 8.2 Correction

You can edit any prescription, test report, family member, or doctor record directly within the App.

### 8.3 Deletion

You can delete individual records or use **Settings → Clear All Data** to permanently erase everything stored by the App. This action is irreversible and removes all data from your device.

### 8.4 Withdrawal of Consent (Notifications)

You can disable medicine reminders at any time via **Settings → Notifications** or through your device’s system notification settings.

### 8.5 Google Drive Sync

You can disconnect your Google account and disable sync at any time via **Settings → Google Drive Sync → Sign Out**. To delete your backup from Google Drive, go to your Google Drive → **Storage → Manage Storage** → locate the app and delete its data, or revoke access via your Google Account security settings.

### 8.6 Advertising Opt-Out

Free users can opt out of personalized advertising through device settings as described in Section 3.3.a. This will not affect the number of ads shown, but ads will not be personalized to your interests.

### 8.7 Premium Upgrade

Upgrading to SPO Premium removes all advertisements and associated data collection by AdMob entirely.

—

## 9. Children’s Privacy

The App is not directed to children under the age of 13 (or 16 in the European Economic Area). We do not knowingly collect personal information from children. If you believe a child under the applicable age has provided personal information through the App, please contact us at support@prescriptionorganizer.app and we will take steps to address the situation, including deletion of the relevant information.

—

## 10. Users in the European Economic Area (EEA), UK, and California

### 10.1 GDPR (EEA / UK)

If you are located in the EEA or UK, you have rights under the General Data Protection Regulation (GDPR) including the rights to access, rectify, erase, restrict processing, and port your data. You also have the right to object to processing and the right to lodge a complaint with your local data protection authority.

Since all personal health data is stored locally on your device and is not transmitted to our servers, you can exercise most of these rights directly within the App (see Section 8). For any other GDPR requests, contact us at support@prescriptionorganizer.app.

**Legal bases for processing:** Consent (you choose to enter health data), Contract performance (premium subscription), Legitimate interests (app security, crash diagnostics).

### 10.2 CCPA / CPRA (California)

If you are a California resident, you may have rights under the California Consumer Privacy Act (CCPA) / California Privacy Rights Act (CPRA), including the right to know what personal information is collected, the right to delete it, and the right to opt out of its sale. We do not sell personal information. For any such requests, contact us at support@prescriptionorganizer.app.

—

## 11. Third-Party Links and Services

The App may display links to external websites (e.g., help articles). We are not responsible for the privacy practices of those external sites. We encourage you to review the privacy policy of any website you visit.

—

## 12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in the App’s features, applicable laws, or third-party services. When we make material changes, we will update the “Last updated” date at the top of this document and, where appropriate, provide notice within the App. Your continued use of the App after any changes constitutes your acceptance of the updated policy.

—

## 13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the privacy practices of the App, please contact us:

**Email:** contact@thesimpleapps.dev

**App:** Simple Prescription Organizer

—

*This privacy policy was last reviewed and updated on February 24, 2026.*