Medicine Track App Privacy Policy

1. Introduction

ALMAREN LABS LLC ("we", "us", "our") respects your privacy. This Privacy Policy explains what data our medication reminder application — published in the app stores under a descriptive name in each language, "Medicine Track App" in English and "İlaç Takip Uygulaması" in Turkish (the "App") — collects, why, where it is stored, and what rights you have over it. It is written to align with the GDPR, the Turkish Personal Data Protection Law (KVKK), and app store requirements.

The App handles health information — the medicines you take and whether you took them. We treat it accordingly. We do not sell it, we do not use it for advertising, and we do not use it to train any model.

The App is free. There is no advertising SDK, no analytics or crash-reporting SDK, and no in-app purchase in the app.

2. You Do Not Give Us an Identity

The App has no sign-up, no email address, and no password. When you first open the app, your device generates a random account identifier, a connection code to share with people you want to follow your medicines, and a private recovery code. That identifier is all we use to recognise your data.

This means we do not know your name, email address, phone number, or postal address — unless you type a display name into the app yourself, which is optional.

We should be clear about one thing: because this random identifier is linked to your medicine records, it is still personal data under the GDPR and KVKK, and everything in this policy applies to it. Calling it "anonymous" would not be accurate.

3. Information We Collect

Account data. A random account identifier, a connection code (shared with people you want to follow your medicines), a six-digit version of it, and a private recovery code — all generated for you. Optionally, a display name if you enter one. Your chosen interface language and time zone.

Health data — the core of the app. For each medicine you or your caregiver records: the medicine name, an optional usage note (for example "after meals"), a colour and icon you pick, an optional photograph of the medicine packaging, the reminder times, and the days of the week it applies to. For each dose: whether it was marked as taken, when, and the calendar date on your device.

Caregiver connection data. Which accounts are connected to which, in which direction, and the display name a caregiver assigns to a person they follow (for example "Mum").

Notification data. Records of reminders and caregiver alerts — the title and text of the notification, which medicine it concerned, and which connected account triggered it.

Device notification token. On Android, a push-notification token issued by Google for your device. We store it so that a caregiver's alert can wake your phone even when the app is closed. It is not used for anything else.

Technical data. Standard server connection logs (such as IP address and request time) generated when your app talks to our server, kept for security and troubleshooting.

What we do NOT collect. We do not collect your email address, password, phone number, contacts, precise or approximate location, advertising identifiers, payment details, or usage analytics. There is no advertising or analytics software in the app.

4. How We Use Your Data

• To run the Service: store your medicines, deliver reminders at the times you set, record which doses you took, and sync between your device and our server.
• To support caregiver connections: show your medicine data to a person you have connected with, and deliver the alerts they send you.
• To keep the Service secure: detect and limit abuse, such as excessive requests to our server.

That is the complete list. We do not profile you, we do not make automated decisions with legal or similarly significant effects, and we do not share your data with anyone for their own purposes.

5. Caregiver Sharing — Who Can See Your Data

This is the only way another person can see your information, so it is worth reading carefully.

Nothing is shared until you share a code. A connection can only be created by deliberately handing over your connection code — as a QR code, a link, or a six-digit number. That code grants only the access described here; it cannot be used to open or recover your account.

Once connected, that person can see your medicine list (names, notes, photographs, reminder times) and your full dose history — including which doses you missed. They can also add, edit, and delete medicines in your account, rename your account, and trigger an alarm on your phone.

Seeing and ending connections. In the app, open Tracking -> People Following Me. That list shows everyone who currently has access to your data and lets you remove any of them yourself, immediately, without their agreement. Deleting your account removes every connection in both directions. You may also email info@almarenlabs.net.

If you manage someone else's medicines, you are responsible for having their permission — or for being their parent or legal guardian. We cannot verify the relationship between two connected accounts.

6. Legal Bases for Processing

Where the GDPR applies:

Where the KVKK applies, the same processing rests on performance of a contract (Art. 5/2-c) for ordinary data, and on your explicit consent (Art. 6) for health data and for caregiver sharing. Turkish-language versions of these consent texts are shown in the app.

You can withdraw your consent at any time by deleting your account, which erases the data processed on that basis. Withdrawal does not affect the lawfulness of processing carried out beforehand.

7. Where Your Data Is Stored, and Who Processes It

Your account data, medicines, and dose history are stored on cloud servers located in Sweden (European Union).

We use a small number of third-party processors:

Because ALMAREN LABS LLC is established in the United States, our own access to your data also involves a transfer outside the EEA and outside Türkiye. These transfers are made under the transfer mechanisms offered by those providers and under the applicable rules on international transfers in the GDPR and the KVKK.

Photographs are the one part of your health data stored outside the EU. If you would rather not have that, simply do not add a photograph to a medicine — the app works fully without one.

8. Data Retention and Deletion

We keep your data for as long as your account exists. There is no automatic expiry, because a medication history is only useful if it is complete.

When you delete your account, we permanently remove your medicines, reminder schedules, dose history, uploaded photographs, notification records, and all caregiver connections to and from your account. Deletion is immediate and cannot be undone — your account cannot be recovered afterwards, even with your recovery code.

To delete: in the app, Settings -> Delete My Account. Details: https://www.almarenlabs.net/meditrack/account-deletion

Note that uninstalling the app does not delete your data from our servers. Please use the in-app deletion.

Standard server connection logs are kept for a short period for security purposes and are not linked to your medicine records.

9. Security

Data is transmitted over encrypted connections (HTTPS). Access to your records requires your account identifier, and our server checks on every request that a caregiver is actually connected to a person before showing or changing that person's data. Sensitive endpoints — account recovery, caregiver pairing, photo upload — are rate-limited to resist abuse.

No system is perfectly secure. Please treat your recovery code the way you would treat a password — anyone who has it can open your account. Your connection code is different: it only lets someone follow your medicines, and you can revoke it at any time.

10. Your Rights

Depending on where you live, you have rights over your data. In the EEA and the UK, under the GDPR, these include access, rectification, erasure, restriction, objection, and portability. In Türkiye, Article 11 of the KVKK gives you equivalent rights.

You can exercise most of them directly in the app:

• Erasure: Settings -> Delete My Account.
• Rectification: edit or delete any medicine, note, photograph, or dose record at any time.
• Withdrawing consent: for caregiver sharing, remove the person in Tracking -> People Following Me; for health data processing, Settings -> Delete My Account.

For access, portability, or any other request — including if you can no longer open the app — email info@almarenlabs.net. We will respond within the period required by applicable law.

If you are in the EEA or the UK, you may also lodge a complaint with your local supervisory authority. If you are in Türkiye, you may apply to the Personal Data Protection Authority (KVKK Kurumu).

11. Children

The App is intended for adults. We do not knowingly collect data from anyone under 18 without the involvement of a parent or legal guardian. If you believe a child's data has been recorded in the app without that involvement, contact us and we will delete it.

12. Changes to This Policy

If we change this policy, we will update the "Last Updated" date above and, for material changes, notify you in the app. If a change requires new consent — for example a new purpose for your health data — we will ask for it separately before that processing begins.

13. Contact Us

Email: info@almarenlabs.net
Address: ALMAREN LABS LLC, 8 The Green, STE 23103, Dover, DE 19901, USA
Website: https://www.almarenlabs.net/