Privacy Policy
SmartPoli handles health information, so we keep this short and specific. This page says what we collect, why, who can see it, where it goes, and how you can remove it.
- We use your information only to run SmartPoli for you and the people you choose.
- We do not sell your data, show ads, or use advertising or analytics trackers.
- Only people you connect with (by a code or an invite you accept) can see your medicines.
- You can delete your account and your data yourself, in Settings.
1. What we collect
- Account: your name, email address, a hashed password (we never store the password itself), and your phone number if you use WhatsApp reminders. If you sign in with Google we receive your name and email from Google.
- Your health record, entered by you or by someone you connected with: medicines, strength, timing, doses taken, missed or skipped, notes, symptom checks and their urgency results, age, sex, blood group, allergies, and an emergency contact.
- Emergency card: the details you choose to put on it, and a photo if you add one.
- Family connections: who looks after whom, the nicknames people give each other, and when a connection was made or removed.
- Voice and chat: if you use the voice assistant, what you say and the replies are kept as a history you can delete.
- Devices and notifications: the address your phone's browser gives us so we can send you a notification, and records that a reminder was sent.
- Feedback you send us.
- Activity log: a record of changes to your medicines and connections, so you can see who did what.
2. Why we use it
To read and organise your prescriptions, schedule and send reminders, show you and your caregivers what is due or missed, run the symptom check, produce your care report, keep your account secure, and fix problems. We do not use your health information for anything else.
3. Who can see it
- You.
- Caregivers you connect with. They see your medicines, doses, notes and emergency card. You can remove them at any time, and they can leave at any time.
- Anyone with your emergency card link or QR code. The card is meant for paramedics and can be opened by anyone who has the link. You can switch the link off in the Emergency card settings.
- The people who run SmartPoli can reach the database only as needed to keep the service working and to fix problems.
4. Services that help us run SmartPoli
We use these providers. Each receives only what it needs for its job.
- Hosting and database (Render and a managed PostgreSQL database): store the app and your records.
- AI services (Groq and Google Gemini): when you scan a medicine strip, upload a prescription photo or PDF, ask for medicine information, or use the voice assistant, the photo, text or question is sent to them to be read or answered. Photos and PDFs you scan or upload are used for that one request and are not stored by SmartPoli.
- openFDA (US government drug labels): we look up medicine names to show general label information. No personal details are sent.
- Google Sign-In: if you choose "Continue with Google".
- Twilio (WhatsApp): only if you turn on WhatsApp reminders; your phone number and the reminder text go through it.
- Browser notification services (run by Google, Apple or Mozilla): carry notifications to your phone. They see that a notification was sent, in an encrypted message.
These providers have their own privacy policies. We do not let them use your information for advertising.
5. How we protect it
- Connections to SmartPoli are encrypted (HTTPS).
- Passwords are stored only as a one-way hash.
- Every request is checked on our server: you can open only your own record, or the record of someone who connected with you.
- Database backups are encrypted and kept for 14 days.
No system is perfectly safe, so please use a strong password and keep your phone locked.
6. How long we keep it
- Your data stays until you delete your account, or ask us to.
- Small technical records (such as "this reminder was sent") are removed after about six months.
- After you delete your account, copies in encrypted backups disappear within 14 days.
7. Your choices
- See and correct your details in Settings.
- Delete your account and everything in it: Settings → Your account → Delete my account. People you looked after are not deleted. Only your link to them goes. People who looked after you lose access.
- Remove a caregiver (Settings → Care team) or stop looking after someone (Remove on their page).
- Delete your voice history and turn off notifications whenever you like.
- You can also ask us, through Feedback in the app, for a copy of your data or to correct or delete it.
8. Children
SmartPoli is for adults. A parent or guardian may keep a child's medicines in their own account. We do not knowingly create accounts for children under 18.
9. Storage on your device
SmartPoli keeps your sign-in and a few settings (such as text size) in your browser's storage so you stay signed in. We do not use advertising or tracking cookies.
10. Changes
If this policy changes in a way that matters, we will tell you in the app. The date at the top shows the latest version.
11. Contact
For privacy questions or requests, open the menu in SmartPoli and choose Feedback. Rules for using the app are in the Terms of Use.