Privacy Policy
Last updated: November 8, 2026
The short version
- Your medicines, schedules, dose history, prescription photos and settings are stored only on your iPhone. We never receive them.
- We have no accounts and no database of users. We don't sell or share data, show ads or use trackers.
- Prescription scanning is optional and asks for your permission first. The photo is read by an AI service, then deleted. Neither we nor the AI provider keep it.
- Data from Apple Health stays on your iPhone and is never used for advertising or shared.
Who we are
This policy explains how the Medorya app for iPhone (the "App") and the website medorya.app (the "Website") handle personal information. The App and Website are provided by Medorya ("we", "us"), which is the controller of the limited information described here. Contact: [email protected].
Information that stays on your iPhone
Everything you enter in the App is stored in the App's private storage on your device:
- Medicines, strengths, pill appearance, schedules, instructions and supply counts
- Dose history (taken, skipped, late or not marked)
- Prescription details and photos you choose to keep
- Your settings, such as language, text size and Lock Screen privacy
We do not receive this information. The App does not store your health information in iCloud and does not sync it to any server. Reminders are scheduled on your iPhone as local notifications. Widgets, Live Activities, Control Center controls and Siri read the same on-device data.
By default, medicine names are hidden on the Lock Screen, in Live Activities and in notification previews while your iPhone is locked. Siri asks you to unlock your iPhone before it reads or records doses. You can also lock the App with Face ID or Touch ID.
Apple Health
If you choose to import from Apple Health, the App reads the medications and dose records you select, with your permission. This information stays on your iPhone. It is not sent to us or to anyone else, and it is never used for advertising, marketing or data mining. You can turn off access at any time in Settings > Health > Data Access & Devices.
Prescription scanning (AI)
Scanning is optional. If your App Store country is in the European Economic Area, the United Kingdom or Switzerland, scanning happens only on your iPhone: the photo is read by Apple's on-device text recognition and Apple Intelligence, and nothing is sent to us or anyone else. Elsewhere, you can also scan on-device when offline. Before your first online scan, the App explains what will be sent and asks for your explicit permission. When you scan online (outside Europe):
- The App removes location and other hidden information (metadata) from the photo, compresses it and sends it over an encrypted connection (HTTPS) to our scanning service on Cloudflare.
- The service sends the photo to Google's Gemini model on Google Cloud (Vertex AI), which reads the text and returns a list of medicines. We use Google's zero data retention settings, so Google does not store the photo or use it to train its models.
- The photo and result exist only in memory while your request is processed, typically a few seconds. We do not log them.
- Nothing is saved until you check and confirm each medicine on your iPhone. AI can make mistakes, especially with handwriting.
- To prevent abuse, the request includes a proof from Apple that the App is genuine (App Attest) or that you have Pro (a signed App Store transaction). We use it only to check the request and do not store it. For the free scan, Apple's DeviceCheck remembers on Apple's servers that this device has used it, without telling us who you are.
- We count how many scans succeed or fail each day as a single total, with no link to you or your device.
You can withdraw your permission at any time in the App's Settings. Scanning then stops working until you allow it again; you can still add medicines by hand.
Backups
You can create a backup file in the App. It is encrypted on your iPhone with a passcode you choose and saved wherever you decide, such as the Files app or AirDrop. We never receive the file or your passcode, so we cannot recover it if the passcode is lost.
Purchases
Purchases and subscriptions are processed by Apple through the App Store. We do not receive your name, payment details or Apple ID. The App checks your purchase on your iPhone using Apple's StoreKit. Apple gives us sales reports with totals by country and product, which do not identify you.
Website
The Website does not use cookies, analytics, advertising or tracking scripts, and loads its fonts from our own server. Our hosting provider, Cloudflare, processes technical information such as IP addresses to deliver the Website and protect it from attacks, and keeps short-lived security logs.
When you contact us
If you email us, we receive your email address and what you write, and use it only to reply. Please don't send prescription photos or other health details unless they are needed to solve your problem. Incoming email is received through Cloudflare Email Routing and our replies are sent through Resend. We delete support conversations when they are no longer needed, and within 24 months at the latest.
If you send feedback from the App (Settings > Feedback), we receive your rating, your message, the email address only if you type one, and technical details (App version, iOS version, iPhone model, language). It is forwarded to our team's private Telegram group so we can read it, and is not stored on our servers. To limit abuse, we keep a one-way hash of your IP address for one hour. Please don't include health details in feedback. Ask us at any time to delete feedback you sent.
Service providers
| Provider | What for | What it processes |
|---|---|---|
| Apple | App Store purchases, App Attest, DeviceCheck | Purchase and device-integrity checks; we receive no identity |
| Cloudflare | Website hosting, scanning service, email routing | IP addresses, scan photos in memory only, support emails in transit |
| Google Cloud (Vertex AI) | Reading scanned prescriptions | Scan photos, with zero data retention |
| Resend | Sending our email replies | Your email address and our reply |
| Telegram | Delivering in-app feedback to our team | Your feedback message, rating, optional email and App/device details |
Each provider acts on our instructions under a data processing agreement. We do not sell or share personal information for advertising, and we do not use it for profiling or automated decisions about you. If you share a Doctor Report PDF or a backup file, you decide who receives it.
International transfers
Our providers may process information in the United States and other countries. For transfers from the European Economic Area, the United Kingdom and Switzerland, we rely on the EU-U.S. Data Privacy Framework where the provider is certified, and on the European Commission's Standard Contractual Clauses. Prescription photos from users in Europe are never transferred, because scanning there happens only on the iPhone.
If you are in the EEA, UK or Switzerland
Legal bases we rely on (GDPR Article 6 and, for health information, Article 9):
- Prescription scanning: happens only on your iPhone, so we do not process your health data.
- Support emails: to answer your request (Art. 6(1)(b)) and our legitimate interest in helping users (Art. 6(1)(f)).
- In-app feedback: our legitimate interest in improving the App and answering you (Art. 6(1)(f)).
- Website security and abuse prevention: our legitimate interest in keeping the service safe (Art. 6(1)(f)).
You have the right to access, correct, delete, restrict or object to the processing of your personal data, to data portability, and to withdraw consent. Because we do not hold your App data, most requests are handled directly in the App (Settings > Export or Delete My Data). You can also lodge a complaint with your local data protection authority.
Our representative in the EU: . In the UK: .
We do not have an establishment in the EU or UK. Because our processing of personal data from Europe is limited to occasional support emails and feedback and does not include health data, we have not appointed a representative under Article 27 GDPR / UK GDPR.
On-device scanning uses AI; we tell you when AI is used and you always review the result before anything is saved.
If you are in the United States
We do not sell or share personal information, as those terms are defined in California and other state privacy laws, and we do not use it for targeted advertising. Residents of Washington, Nevada and other states with consumer health data laws can read our Consumer Health Data Privacy Policy. Medorya is not a healthcare provider or health plan, so HIPAA does not apply; if a security breach ever affected health information we hold, we would notify affected people as required by the U.S. Federal Trade Commission's Health Breach Notification Rule.
Other countries
Medorya is not currently offered in mainland China. Wherever you live, you can contact us to exercise the rights your local law gives you, and we will respond within the time it requires (at most 30 days).
Security
Data in the App is protected by iOS file encryption. Backups are encrypted with AES-256-GCM. All connections use HTTPS. Our services keep no store of user data that could be breached.
Children
Medorya is not directed to children under 13 (or under 16 where local law requires) and we do not knowingly collect information from them.
Changes
If we change how the App handles information, we will update this page and the date at the top, and explain important changes in the release notes. We will ask for your permission again before using information in a new way that requires consent.
Contact
Medorya
[email protected]