Privacy Policy

In one sentence: Vita Care works without an account and keeps your data on your phone. Four things do leave it — all four optional, all four turned on by you: remote care, the automatic email summary, cloud label reading, and the contact form. We don't sell your data and there are no ads.

Who processes your data

The data controller is Novema Solutions LLC, 2858 S Karlov Ave, Chicago, IL 60623-4439, United States. Contact: vitacare-privacy@novemasolutions.com.

Vita Care is developed and distributed under the Novema Solutions LLC brand.

First, because it shapes everything else

Vita Care works entirely without an account and without an internet connection: reminders, schedules, appointments, on-device caregiver mode, PDF reports, and on-phone label reading. If you never sign in, we hold nothing about you at all, and this policy shrinks to the section "What your phone stores."

What follows describes what happens if you turn on one of the three features that do use the internet.

What your phone stores

What you enter so the reminders work: medication names, doses, schedules, whether you marked a dose and at what time, your medical appointments, and optionally your name, photo and date of birth. If you use on-device caregiver mode, the same for the people you care for.

Some of this is health information, and we treat it as such.

Remote care (optional)

Remote care lets another person — your daughter, your son, whoever you choose — see from their phone whether you've taken your medication. Two phones can't talk to each other without a server in between, so this is the feature that does take data off your phone.

It only works if both people sign in and both accept the link: the person who will be caring enters a code, and the person who will be cared for confirms it on their own phone. Nobody can follow you without your authorization.

What is uploaded while the link is active:

• Your account. When you sign in with Google we store an internal identifier, your email address and your display name. We use Google's Firebase Authentication, which also retains your Google account photo (not the one you set inside the app — that's a different thing and never leaves the phone).
• Your doses from the last 7 days: medication name, the time it was due, whether it's taken, skipped or pending, when it was marked, who marked it, and whether the medication is paused. (If you turn on the automatic email summary, this becomes 28 days. See below.)
• A sign of life: the last time your phone connected, and your time zone. Without it, the person caring for you can't tell "she hasn't taken it" from "her phone has been off for a day."
• The link: who follows whom, when it was created, which alerts the other person chose to receive, and — if the person being cared for revokes it — when.
• Your display name, copied inside the link, so the other person's screen shows a name and not an identifier.
• A device identifier for notifications (a Firebase Cloud Messaging token), along with your language and time zone.
• Pairing codes, which expire on their own after 15 minutes.
• If you're running low on medication: the medication name and the days left, and only for those with less than seven days left. We don't upload how many pills you have and we don't keep your inventory: what goes up is the alert already made, and it disappears from the server as soon as you restock.

What is never uploaded, even with remote care active: your date of birth, the profile photo you set inside the app, your medication photos, your appointment history, your notes, and the app's settings. None of that leaves the phone because of remote care.

(Your medication photos do leave in one case, and only that one: when you press the button to have the label read. It is explained below, under “Cloud label reading”.)

(The one exception is your next appointment — only that one, and only if you turn on the automatic email summary. Your appointment history, the reason, and whether you attended never leave the phone.)

Who sees it: only the people you have authorized, and only while the link is active. At most 4 people can follow you at a time, and no paid plan raises that cap — it's a privacy limit, not a business one.

How long: doses delete themselves after 7 days. We don't keep a long history of your medication, because you don't need one to flag a missed pill. If you turn on the automatic email summary this becomes 28 days, and goes back to 7 as soon as you turn it off.

How to stop it: you can revoke the link from your phone whenever you want, without telling anyone and without explaining yourself. From that moment the other person stops seeing your doses. If nobody is following you, your phone stops uploading anything.

Alerts. If the person caring for you turns on alerts, they'll get a notification when a dose time passes unmarked. That alert includes your name and the medication name.

One thing worth knowing: when the other person marks a dose for you, your phone shows who marked it. It works the same in both directions, on purpose: nobody touches your medication behind your back.

Cloud label reading (optional, paid)

Vita Care can read a medication label two ways:

• On-device (default, free): the app reads the label on your phone using Google's ML Kit. Nothing leaves.
• In the cloud (paid, optional): if the on-device reading isn't clear enough, you can tap "Read in the cloud." Only then, and only for that one photo, we send the image to a cloud service we operate, which uses Google's Vertex AI (Gemini) to read the medication name and dose.

This only happens if you tap the button — never automatically. We send the photo and nothing else: not your name, your other medications, or any other data. The photo is processed to extract text and is not stored afterward, by us or by Google, and is not used to train any AI model; this processing is covered by Google Cloud's Data Processing Addendum. The name and dose are filled into the form for you to review before saving.

The contact form (optional)

If you write to us from "Report a problem," we receive what you write, your email if you include it, any screenshots you attach, and some technical details: your phone model, your Android version and the app version. Those technical details are shown to you on screen before sending, and they're included because "my reminders don't arrive" can't be fixed without knowing which phone you have — it's almost always the manufacturer's battery saver.

The message reaches our support inbox and is kept for as long as the conversation lasts, and up to 12 months after.

Google Drive backup (optional)

If you ask for it, Vita Care can store a backup in your own Google Drive account, in a private app folder (drive.appdata):

• The backup lives in your Drive, not on a server of ours.
• We cannot read it, not now and not ever.
• No other app can read it.
• The only permission we request is for that private folder. We do not request access to your files, your photos, your email or your contacts.
• Profile photos are not included.

The automatic email summary

It is optional and it is off. If you turn it on, a summary of your medication is emailed every week or every month to whichever address is chosen — your doctor, a relative, yourself.

You are the one who turns it on. The person caring for you can ask for it from their phone, but cannot switch it on: a question arrives on your Today screen, with the full address in plain sight, and nothing is sent until you say yes. A “no” closes that address and you won't be asked about it again.

What the summary contains: how many doses were marked and how many weren't over the last four weeks, the breakdown by medication, the days your phone gave no sign of life, and your next appointment if there is one.

What changes while it's on:

• Your doses are kept on the server for 28 days instead of 7.
• Which days your phone gave a sign of life is recorded for that month. It's needed so the summary can tell an unmarked dose from a day nobody knows anything about. It is not recorded if you don't have the summary on.
• Your next appointment is uploaded — when, with whom, and where if you entered it — so the summary can include it.
• Whoever cares for you sees that same month on their phone, instead of a week.

You turn it off yourself, in Settings → Remote care → “Email summaries” → “Withdraw”. You don’t have to ask anyone or give a reason: withdrawing consent has to be as easy as giving it.

Turning it off undoes all of that: the window goes back to 7 days, the record of signs of life is deleted entirely, and the next appointment stops being uploaded.

The summary isn't sent inside the email — a link is, and it expires after 30 days. An attachment stays in the recipient's mailbox forever and gets forwarded without control; a link can be switched off. And permission is checked when the link is opened, not only when it is sent: if you withdraw it, links already sent stop working at that moment.

Whoever receives it can unsubscribe from the email itself, without asking you.

The email is sent by ZeptoMail (Zoho), who also run our own mailbox. They receive the destination address, the subject — which includes your name — and the text of the notice. The summary itself does not travel by email: not your medications, not your doses, not your appointment. All of that lives behind the link.

Subscriptions

Purchases are processed through Google Play. We never see or store your card or any payment details.

To know whether a subscription is still active we use RevenueCat, which receives your internal user identifier and the purchase data Google sends it — never your medication or your doses.

Who we share with, and why

All of them process the data on our behalf and under contract. Transfers to the United States rely on the European Commission's standard contractual clauses and on the EU-U.S. Data Privacy Framework.

What we do NOT do

• We do not sell your data, or share it with anyone not required for the features described above.
• We do not show ads.
• We do not use analytics or tracking tools.
• We do not build advertising profiles.
• We do not read your medication. It sits on our server when you use remote care, but we don't look at it, analyze it, or use it for anything other than showing it to the person you authorized.

Legal basis

• Explicit consent (GDPR art. 6(1)(a) and art. 9(2)(a)) for everything health-related: remote care, the automatic email summary, and cloud label reading. You give it by turning the feature on, and withdraw it by turning it off or revoking the link, with no consequences for the rest of the app. For the summary, the consent is that of the person whose medication is sent, never of whoever pays the subscription.
• Performance of a contract (art. 6(1)(b)) for subscriptions.
• Legitimate interest (art. 6(1)(f)) to answer your support messages and keep the service secure.

How long we keep each thing

Your rights

You can ask us for access to your data, its rectification, its erasure, restriction of processing, portability, and you can object to processing. You can also withdraw your consent at any time, without affecting what was done before.

Write to vitacare-privacy@novemasolutions.com. We reply within one month at most.

In practice you can do almost all of it yourself without asking us: revoke a link, sign out, or uninstall. It's laid out step by step on the Data deletion page.

If you believe we've mishandled your data, you can complain to your country's supervisory authority. In Spain that is the Agencia Española de Protección de Datos (aepd.es).

App permissions and why

• Notifications: to remind you of doses and appointments.
• Exact alarms: so the reminder arrives at the right time. A medication reminder that arrives late is not a reminder.
• Full-screen notification: so the reminder is visible with the phone locked.
• Start on boot: to reschedule your reminders after a restart.
• Camera and gallery: to attach a medication photo, a profile photo, or to scan the QR code that links two phones. None of it leaves the phone unless you use "Read in the cloud."
• Ignore battery optimization (optional): so the system doesn't kill the app and drop your reminders.

How to delete your data

See the Data deletion page.

Children

Vita Care is not directed to children under 13, and we don't allow them to create the account. An adult may use the app to manage the medication of a minor in their care; in that case it's the adult who enters the data and answers for it.

Important notice

Vita Care is a support tool, not a medical device and not a substitute for professional medical advice. An unmarked dose in the app does not mean the medication wasn't taken. Label reading — on-device or in the cloud — is a convenience to speed up data entry, not a verified medical record; always confirm the name and dose are correct before saving.

Changes

If we change this policy, we'll update the date above and announce it in the app. If the change affects what we do with your health data, we'll ask you again before applying it.

Contact

vitacare-privacy@novemasolutions.com