Pilliko — Privacy Policy

Effective Date: 2026-10-26

1. Hybrid Local-First Storage by Default

Your medication schedules, pill inventory, optional medicine photos, and dose logs are stored locally on your device in SQLite by default. Pilliko sets NSPrivacyTracking = false, embeds zero advertising SDKs, and never sells health data to third parties.

2. Camera Permissions & Anonymous Clinical Lookups

Camera and Photo Library access are used solely when you scan a prescription, attach an optional medicine photo, or scan a family invitation QR code. Prescription OCR runs on-device via Apple Vision / Google ML Kit. Optional drug safety lookups send only anonymous medication names (zero PII) to official U.S. NIH RxNorm and FDA OpenFDA APIs.

3. Opt-In Cloud Sync & Instant In-App Account Deletion

Cloud synchronization over Supabase PostgreSQL (protected by Row-Level Security) activates only when you sign in via Email OTP for Family Care or Pilliko Plus multi-device backup. You can revoke family links or permanently delete your account and all cloud records at any time inside Settings -> Account & Cloud Backup -> Delete Account & Cloud Data.

Contact: support@pilliko.io.vn