PRIVACY

Privacy Policy Last updated: April 21, 2026 Loud Unicorn LLC ("we," "us," "our") built PillBridge. This policy explains exactly what data PillBridge collects, why, and how it is handled. 1. What Data We Collect and Why Medication Data (core app functionality): - Medication names — the names of medications you add. Used to display your medication list and reminders. Stored on-device (SwiftData) and synced via Apple CloudKit for family pairing. - Dosages — amounts and units (e.g. "10 mg"). Used to show the correct dose in reminders and the daily checklist. Stored on-device and Apple CloudKit. - Medication schedules — times and days set for each medication, including multiple daily dose times. Used to schedule push notifications and share schedules with your connected family member. Stored on-device and Apple CloudKit. - Medication form and pill color — the type of medication (pill, liquid, inhaler, etc.) and pill color you select. Used for visual identification in the app. Stored on-device and Apple CloudKit. - Refill tracking — optional pills remaining count and refill date. Used to display refill reminders when supply is running low. Stored on-device and Apple CloudKit. Dose Log Data: - Medication log history — a timestamped record of each dose you mark as taken, missed, or skipped, including which specific dose time was logged. Used to show adherence history and notify your connected family member. Stored on-device and Apple CloudKit. - Dose notes — optional text notes you attach to individual dose logs (e.g. "taken with food," "felt dizzy"). Used for caregiver communication and personal records. Stored on-device only (SwiftData). Not synced to CloudKit. Health & Emergency Data: - Health card information — emergency data you enter: name, blood type, known allergies, medical conditions, and emergency contacts. Used to populate the Health Card feature for emergency reference. Stored on-device only (SwiftData). Never transmitted to CloudKit or our servers. Account & Pairing Data: - Display name — the first name you provide during family pairing. Used to identify you to your connected family member. Stored on-device and Apple CloudKit. - Pairing code and pairing status — used to establish and maintain the family connection. Stored on-device and Apple CloudKit. Apple Watch Data: - Today's dose list — medication names, dosages, scheduled times, and taken/missed status for the current day. Transmitted from the iPhone app to the Apple Watch via Apple WatchConnectivity. Stored temporarily on the Watch and replaced each time the iPhone pushes an update. Used to display the dose checklist on the Watch. - Mark-taken actions — when you mark a dose taken from the Watch, a message containing the medication ID and dose time index is sent to the iPhone app via WatchConnectivity. No health data is transmitted to any server in this flow. App Preferences: - Notification preferences — your chosen reminder times and notification on/off status. Stored on-device only via UserNotifications. - Text size preference — your chosen display text scale. Stored on-device only via UserDefaults. - Color scheme preference — your chosen light/dark/auto mode. Stored on-device only via UserDefaults. 2. What We Do NOT Collect - We do not collect your email address or phone number (beyond what you voluntarily enter in the Health Card) - We do not read your medication data on our servers — it lives on your device and your family member's device only - We do not have access to the content of your health card data - We do not use advertising SDKs or share data with ad networks - We do not track your location - We do not collect biometric data - We do not collect advertising identifiers such as IDFA or IDFV - We do not collect data through the Apple Watch beyond what is described in Section 1 3. Data Storage — Local Device and CloudKit All medication, dose log, and pairing data is stored locally on your device (via SwiftData and UserDefaults) and synced between your device and your family member's device exclusively through Apple CloudKit. CloudKit uses your personal iCloud account and your family member's iCloud account. Loud Unicorn LLC does not have access to your CloudKit data. This sync is private and governed by Apple's Privacy Policy (apple.com/privacy). Data NOT synced to CloudKit: health card information, dose notes, notification preferences, display preferences. 4. Third-Party Services - Apple CloudKit — device-to-device sync of medication and dose event data for the family pairing feature (Apple's privacy policy applies) - Apple StoreKit 2 — in-app subscription and tip processing (Apple's privacy policy applies) - Apple Push Notification Service (APNs) — delivers remote notifications to your connected family member when a dose is confirmed or missed - Apple UserNotifications — local push notifications for medication reminders (no data leaves your device) - Apple WatchConnectivity / WatchKit — transmits today's dose list to the Apple Watch and receives mark-taken actions back (all data stays within your device ecosystem) We do not integrate any analytics SDKs from third parties (no Firebase, no Amplitude, no Mixpanel). 5. Sensitive Health Data Medication and dose data is transmitted via Apple CloudKit to enable the family confirmation feature. This data is encrypted in transit and at rest by Apple. Loud Unicorn LLC does not operate any servers that receive, store, or process this data. PillBridge is not a covered entity under HIPAA and is not intended to serve as a HIPAA-compliant system of record. 6. Children's Data PillBridge is designed for seniors and their adult family caregivers. We do not knowingly collect personal information from anyone under 17. If you believe a minor has used the app, please contact us at maxthemoltbot@gmail.com. 7. Data Retention and Deletion Local data: stored on your device indefinitely until you uninstall the app. Uninstalling PillBridge permanently deletes all locally stored data. CloudKit data: stored in your personal iCloud account. To remove CloudKit data, go to iOS Settings > [Your Name] > iCloud > Manage Account Storage > PillBridge and delete the app's iCloud data. To unlink from your family member: use the Unlink button in Settings > Family Connection. This ends CloudKit sync between devices. Watch data: the dose list cached on your Apple Watch is cleared when you remove the Watch app or when the iPhone pushes a new dose list. 8. How to Delete Your Data 1. Tap Unlink in Settings to disconnect from your family member and stop CloudKit sync 2. Uninstall PillBridge to delete all local data 3. Remove PillBridge iCloud data in iOS Settings > iCloud > Manage Storage 4. Remove the Watch app to clear Watch-cached dose data For additional requests: https://didyu.app/contact 9. Security We use industry-standard practices including HTTPS for any network requests. Your medication data stays within Apple's CloudKit infrastructure and is protected by your iCloud account credentials. Health card data never leaves your device. 10. Changes to This Policy We will notify you of material changes via an in-app notice. Continued use of PillBridge after the effective date of changes constitutes acceptance of the updated policy. 11. Contact Loud Unicorn LLC Arizona, USA https://didyu.app/contact ──────────────────────────────────────── GDPR — Your Rights (EU/EEA Users) Last updated: April 21, 2026 This section applies to users in the European Union (EU) and European Economic Area (EEA) under the General Data Protection Regulation (GDPR). Note on Health Data (Article 9 GDPR): Medication and health-related data may qualify as special-category data under GDPR Article 9. PillBridge stores this data on your device and syncs medication names, dosages, schedules, and dose confirmation status via Apple CloudKit for the family pairing feature. Loud Unicorn LLC does not operate servers that process this data — it is handled by Apple under their iCloud Terms and Privacy Policy. 1. Data Controller Loud Unicorn LLC is the data controller for personal data processed through PillBridge. Contact: maxthemoltbot@gmail.com 2. Legal Basis for Processing We process personal data under the following legal bases (GDPR Article 6): Contractual necessity (Art. 6(1)(b)): Processing your medication data, dose logs, and pairing data is necessary to provide the core PillBridge service — medication tracking and family confirmation. Explicit consent for special-category data (Art. 9(2)(a)): Where you actively enter medication and health-related data, your use of the app constitutes explicit consent to that data being stored locally on your device and, where applicable, synced to your family member's device via CloudKit for the purpose of using PillBridge. Legitimate interest (Art. 6(1)(f)): We do not use legitimate interest as a basis for processing health data. Any legitimate interest basis is limited to anonymized technical diagnostics only. 3. Your Rights Under GDPR Right of Access (Art. 15): You have the right to know what personal data we hold about you. Your medication and health data is stored on your device — we do not hold copies of it on our servers. You can view all data directly in the app. Right to Rectification (Art. 16): You can correct your data at any time by editing medications, dose logs, or your display name in the app. Right to Erasure / "Right to be Forgotten" (Art. 17): You can delete all your personal data by: (1) tapping Unlink in Settings to stop CloudKit sync, (2) uninstalling the app to delete local data, (3) removing iCloud data via iOS Settings > iCloud. Right to Restriction of Processing (Art. 18): You can restrict data processing by disabling CloudKit sync (by unlinking) while keeping the app installed for local use only. Right to Data Portability (Art. 20): You can export your medication history as a PDF from the History tab. For additional data export requests, contact maxthemoltbot@gmail.com. Right to Object (Art. 21): You have the right to object to processing based on legitimate interest. Contact gdpr@loudunicorn.com to exercise this right. Right to Withdraw Consent: Where processing is based on consent, you can withdraw it at any time by stopping use of the relevant feature or uninstalling the app. Withdrawal does not affect the lawfulness of processing carried out before withdrawal. 4. How to Exercise Your Rights Email: maxthemoltbot@gmail.com Response time: We will respond to verified requests within 30 days of receipt. For complex requests, we may extend this by an additional 60 days with notice. 5. Supervisory Authority If you believe your data protection rights have been violated, you have the right to lodge a complaint with the supervisory authority in your EU/EEA member state of residence. 6. International Data Transfers PillBridge stores data locally on your device. CloudKit sync is governed by Apple's EU data transfer framework (Apple's GDPR commitments and Standard Contractual Clauses apply). Loud Unicorn LLC does not independently transfer personal data outside the EU/EEA. 7. Contact GDPR inquiries: maxthemoltbot@gmail.com General inquiries: https://didyu.app/contact Loud Unicorn LLC, Arizona, USA ──────────────────────────────────────── CCPA — Your Rights (California Residents) Last updated: April 21, 2026 This section applies to California residents under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA). 1. Categories of Personal Information Collected In the past 12 months, PillBridge has collected the following categories of personal information: - Identifiers: display name, iCloud record ID (managed by Apple) - Health and medical information: medication names, dosages, schedules, dose logs - Device and usage information: device model, iOS version (for crash diagnostics only, not linked to identity) 2. How We Use Personal Information Personal information is used solely to provide app functionality — medication tracking, reminders, and family pairing. We do not use it for advertising, profiling, or any purpose beyond what is described in this policy. 3. Sharing Personal Information We do not sell personal information. We do not share personal information with third parties for cross-context behavioral advertising. Medication data is transmitted through Apple CloudKit only for the purpose of enabling the family pairing feature. 4. Your Rights Under CCPA/CPRA - Right to Know: You have the right to know what personal information we collect, use, and disclose. This policy constitutes our disclosure. For a specific request, visit https://didyu.app/contact. - Right to Delete: You can delete your personal information by uninstalling the app and removing iCloud data as described in Section 8 above. - Right to Correct: You can correct inaccurate personal information directly in the app at any time. - Right to Opt Out of Sale or Sharing: We do not sell or share personal information for advertising purposes. No opt-out is required. - Right to Non-Discrimination: We will not discriminate against you for exercising any CCPA rights. 5. Contact for California Requests Email: maxthemoltbot@gmail.com Subject line: CCPA Request We will respond to verified requests within 45 days. For complex requests, we may extend by an additional 45 days with notice.