Privacy Policy

Who we are

MedLumi is made by NaiTech Ventures LLC ("we", "us"). Questions about this policy: privacy@medlumi.org.

On your phone by default

Your medications, dose history and settings are stored on your device. You can use MedLumi without creating an account. Settings such as your text size and your pill planner day are saved on your device too.

If you create an account

An account lets you back up and sync between devices. We then store your email, first name, time zone, medications, dose log, as-needed log, points and settings on servers run by our database provider, Supabase, in the United States. Access rules mean you can read only your own data. If you delete your account in the app, your account and its data are removed from our database.

Care Circle (optional, Premium)

• Nothing is shared until you invite someone and they accept. You can pause or remove them at any time, and they can leave at any time.
• Family members see your first name and the alerts sent to them. They never see your medication list or history.
• To send alerts, your phone uploads the times of your upcoming scheduled doses. As-needed medications are never uploaded.
• An alert says a dose "hasn't been logged." It includes the medication name only if you chose that level. Alerts are delivered through Expo's notification service, so the alert text passes through their servers.
• Alerts can be late or fail to arrive. Do not rely on them as a safety system.

Scanning

• Barcode: the camera is used only while the scan screen is open. Only the barcode number is sent, to the U.S. FDA's public drug directory, to look up the name and strength.
• Label photo: one photo is sent through our server to an AI service to read the medication name, strength and form. We do not store the photo or the text on it. We keep only a timestamp to count your free scans. Please keep patient details, such as your name and address, out of the photo.

Sharing or printing your list

The medication list is made on your device. It only leaves your phone when you choose to share or print it, and you decide who receives it. We don't see it.

Other services we use

• Expo: delivers notifications, using a token for your device.
• RevenueCat, Apple and Google: handle Premium subscriptions and payments. We receive your purchase status, not your payment details.
• Email delivery: sign-in and password codes are sent by an email service on our behalf.

What we don't do

• We do not sell your personal information.
• We do not show ads based on your health information, and we do not give advertisers your medication data.
• Rewards and Premium never change your reminders or logging.

How long we keep data

We keep your data while your account is open. When you delete your account we remove it from our database. Copies in routine backups may remain for a short period before they are overwritten.

Children

MedLumi is not directed to children under 13, and we do not knowingly collect their information. If you manage someone else's medications, such as a child's, do so as their parent or guardian.

Changes to this policy

If we change this policy in a meaningful way, we will tell you in the app before the change takes effect.

Your choices

You can view, change or delete your data in the app, and delete your account at any time. To ask for a copy of your data or to ask a question, write to privacy@medlumi.org.