Privacy Policy

Effective: May 16, 2026

1. Introduction

Fakrny is a medication-reminder app for adults and caregivers. This policy explains what data we collect, how we store it, and who can access it. By using the app you consent to these practices.

2. Data We Collect

Account:

• Name
• Email
• Date of birth (optional)
• bcrypt-hashed password (one-way; we cannot read your password)

Medicines:

• Medicine name, dose, instructions
• Dose schedule (times, frequency)
• Optional photo
• Log of dose actions (taken / missed) for adherence statistics

3. Where Your Data Is Stored

All your data is stored on our self-hosted Hostinger VPS in Europe, under our full control. We do not share your data with third parties for marketing or advertising. Transport is encrypted via TLS 1.3.

4. Notifications (Firebase Cloud Messaging)

We use Google Firebase Cloud Messaging solely as a push channel to deliver dose reminders. FCM does not store health or personal data — it only relays messages to Apple/Google for delivery to your device. This is necessary because iOS and Android both require a system push provider.

5. Google Sign-In

If you choose Google Sign-In, we receive only: email, name, and profile picture. We do not request additional Google account scopes. You can revoke access anytime from your Google account settings.

6. Data Encryption

• Passwords hashed with bcrypt (one-way, 2^12 rounds).
• Authentication tokens (JWT) stored on-device in Keychain (iOS) or EncryptedSharedPreferences (Android).
• The local health database is excluded from cloud backups (allowBackup=false on Android, no iCloud backup on iOS).
• Daily encrypted backups via GPG on our server.

7. Your Rights

• Access your data (in-app).
• Correct your data (Profile screen).
• Delete your account entirely (Settings → Delete account) — this wipes all your server-side data within 24 hours.
• Export your data as JSON (contact us).
• Lodge a complaint with your local data protection authority.

8. Children

The app is intended for adults (18+) or minors with parental supervision. We do not knowingly collect data from children under 13. If you discover your child created an account, contact us immediately for deletion.

9. Changes to This Policy

We may update this policy occasionally. Any material change will be announced inside the app at least two weeks before taking effect. Continued use after the update implies acceptance of the new version.