Part I. Terms of use
1. About the service
Pillbox is a mobile organiser for supplements and medicines: bottle scanning by barcode and label photo, a review of how items in your cabinet combine, an intake schedule with reminders, a calendar of what you took, a chat with an AI pharmacist and a report for your doctor.
The app keeps evolving: features, texts and limits may change. The current version of this document lives at https://doxapp.dev/pillbox/privacy and behind the “Privacy policy” link in the app profile.
2. Not medical advice
Pillbox is a reference and organisation tool, not a medical device. The cabinet review, scan results, AI pharmacist answers and the doctor report are informational and do not replace a consultation with a doctor or pharmacist.
The app does not diagnose, does not prescribe or discontinue medicines and does not change doses. Decisions about taking, stopping or combining supplements and medicines are yours to make together with your doctor. If you feel unwell, seek medical help.
Reference information comes from open sources: the NIH Dietary Supplement Label Database, DailyMed and openFDA drug labels, and NIH ODS fact sheets. These databases may be incomplete or outdated, and reading a label from a photo may contain errors. Always check the package and the product label.
3. Limitation of liability
The developer does not guarantee the accuracy of recognised ingredients and doses, the completeness of detected combinations, the timeliness of reminders or the correctness of AI answers. To the extent permitted by applicable law, we are not liable for harm to health, a missed dose or overdose, unwanted interactions or other consequences of actions taken on the basis of information in the app.
Reminders depend on phone settings: notification permission, battery saver mode and time zone. Do not rely on the app as the only way to control intake of vital medicines.
The service is provided “as is”, without a promise of uninterrupted operation or error-free data.
4. User conduct
It is forbidden to use the app for unlawful purposes, spam, abuse, hacking attempts or circumvention of service limits. You are responsible for the content of chat and feedback messages and for the photos you upload.
5. Data
Data handling is described in Part II. By using the app you agree to processing to the extent needed for its features.
6. Paid features
During the test period every Pillbox feature is free; there are no subscriptions or in-app purchases. If a subscription appears later, its terms, price and cancellation flow will be described on the subscription screen at the moment of purchase and in an updated revision of this document. Purchases will go through the app store under its rules.
7. Changes and contact
We may update this document. We will announce material changes in the app. Questions and requests: publisher@doxmediagroup.com.
Part II. Privacy policy
8. What data is processed
| Data | Purpose | Where it is stored |
|---|---|---|
| Your cabinet: names of supplements and medicines, ingredients, doses, schedule, intake and skip marks, goals and age group | Core features: daily plan, cabinet review, reminders, calendar | On your phone; a cloud copy for sync only if you sign in. A de-identified snapshot for analytics — see below |
| Label photos | Reading ingredients and doses | Sent to the recognition server and not kept after the reply. A small thumbnail stays in the bottle card on your phone |
| Barcodes and product names | Lookup in the open NIH DSLD and openFDA databases | Requests go directly from your phone to those databases |
| Questions to the AI pharmacist and the cabinet contents | An AI answer that takes your cabinet into account | Sent to our server and the model provider without your name, email or other identifiers. The question log is kept up to 90 days for quality control |
| Google account: email and identifier | Sign-in and cabinet sync between devices (optional) | Supabase (database and authentication) |
| Anonymous device identifier | Server request limits, abuse protection, linking errors to requests | On the phone and in the server log |
| Technical data: device model, Android and app version, language, usage events, error and crash reports | Stability and improvement of the app | Firebase (Google Analytics for Firebase, Crashlytics) |
| Usage snapshot: cabinet contents, schedule, intake marks, review findings, questions and answers in the AI chat, settings, in-app events | Product analytics and troubleshooting per device, improving the cabinet review and AI answers | Our server (Supabase) under an anonymous device identifier, without name or email; events are kept up to 180 days |
Cabinet contents are health-related information. We process them only for app features, never use them for advertising and never sell them. Your name, email and other identifiers are not included in requests to the AI or to label recognition.
9. Legal basis
Processing is based on your consent, given when you install and use the app, and on the performance of this agreement. You consent to processing of health-related information by adding supplements and medicines to your cabinet. You can withdraw consent by deleting your data and account (section 12).
10. Who receives data
- Vercel — hosting of the app server (label recognition, AI chat, limits).
- Supabase — database and authentication: account, cloud copy of the cabinet, request log.
- Polza.ai and Google Gemini models — processing of label photos and AI pharmacist answers on de-identified data.
- Google Firebase — anonymous usage statistics and crash reports.
- NIH DSLD, openFDA, DailyMed, Open Food Facts — open databases that receive barcodes and product names from your device.
- Google — sign-in with a Google account, if you use it.
Servers of these services may be located outside your country. Data is shared only to the extent needed for the respective feature. We do not share data with other third parties except where required by law.
11. Notifications and permissions
Intake reminders are created locally on the phone and need no server. You can revoke the notification, camera (for scanning) and exact-alarm permissions in Android settings; the related features will stop working.
12. Retention and deletion
- The cabinet stays on your phone while the app is installed. Uninstalling the app deletes local data.
- The cloud copy is kept while the account exists. The “Delete account” button in the profile deletes the account and all its cloud data.
- Recognition and AI answer cache: up to 7 days; server request log: up to 90 days; both are deleted automatically.
- Firebase statistics are kept in de-identified form under Google’s rules, by default up to 14 months.
Delete everything: Profile → Account → “Delete account”, then uninstall the app. Or write to publisher@doxmediagroup.com.
13. Your rights
You can request information about processing, correction or deletion of data, withdraw consent and export your cabinet (“Export data” in the profile). Send requests to publisher@doxmediagroup.com; we reply within 10 business days.
14. Security
Data travels over an encrypted connection (HTTPS). Access to the cloud copy of the cabinet is restricted to the account owner at the database level. Service keys are stored only on the server.
15. Children
The app is not intended for children under 16. We do not knowingly collect their data; if found, such data is deleted.
16. Changes to this policy
The current revision is always available at doxapp.dev/pillbox/privacy. The revision date is at the top of the document.