GDPR and your rights

We process your medicines, doses, pack scans and related health information only on your explicit consent under Article 9(2)(a) GDPR, given when you create an account and add medication data. Consent is voluntary, and you can withdraw it at any time by deleting the data or your account — that does not affect processing carried out before withdrawal.

• Health data (medicines, doses, packs, refills): explicit consent — Art. 6(1)(a) and Art. 9(2)(a).
• Account, sign-in and delivering the service: contract — Art. 6(1)(b).
• Security, audit logging and abuse prevention: legitimate interest — Art. 6(1)(f).
• Cost and claim records you keep for your insurer: consent, as part of the same account data.

• Access — get a copy of the personal data we hold about you.
• Rectification — correct anything inaccurate; most fields are editable directly in the app.
• Erasure — delete individual records or your whole account.
• Portability — receive your data in a structured, machine-readable format.
• Restriction and objection — ask us to limit or stop certain processing.
• Withdraw consent — at any time, for the health data you have entered.
• Complain to a supervisory authority in your EU/EEA country of residence.

Email privacy@bernardpiccione.com from the address on your account. We answer within one month, and may ask for confirmation of identity before releasing health data. Requests are free unless they are manifestly excessive.

• Export or print an inventory report of your medicines, supply and run-out dates.
• Edit or delete any medicine, pack, contact, receipt or claim.
• Revoke a caregiver's access with immediate effect.
• Change or switch off reminders and check-ins.

Supply forecasts, reorder alerts and interaction warnings are calculated from what you enter. They are informational only and produce no legal effect. There is no profiling and no automated decision-making in the sense of Art. 22 GDPR.

If a breach is likely to result in a high risk to your rights, we will inform you and the competent supervisory authority as required by Art. 33 and 34 GDPR. Report a suspected security problem to privacy@bernardpiccione.com.

See the privacy policy for what is collected and why, the cookie notice for device storage, and the terms of service for the rules of use.