Privacy Policy — Thuốc ơi

1. Who controls your data and scope

This policy explains how Tuấn Điệp (“we”) handles data when you use Thuốc ơi. The app is not designed to replace healthcare services, and we do not use health data for advertising or sell it.

For questions or to exercise a privacy right, contact tuandiep98usa@gmail.com. This policy applies to the Thuốc ơi app and its legal-document website.

2. Data we process

Depending on the features you use, we may process:

Health data and content you provide: prescription images, prescription text, medication names, doses, instructions, schedules, reminders, appointments, notes, and related information. This is sensitive data.
Account and technical data: account or session identifiers needed to sync, restore, and secure access; app settings such as language, appearance, and reminder choices.
Family sharing data: data you deliberately share with Family members or groups using the permissions in the app.
Subscription-entitlement data: status and information needed to verify, sync, or restore a subscription. We do not receive or store payment-card numbers.

Notifications and alarms are created to remind you on your device. Notification content is limited to help protect privacy on the lock screen.

3. How we collect and use data

We receive data when you enter it, capture or select a prescription image, confirm information, turn on reminders, use sync or Family, or purchase and restore a subscription. We use it to:

create and operate your prescriptions, schedules, reminders, appointments, and chosen settings;
process a prescription image when you request a scan, show results for your review, and generate schedule suggestions;
sync, restore, and secure data, and carry out your Family-sharing choices;
verify entitlements, prevent misuse, and support users; and
comply with legal obligations, resolve disputes, or protect the safety of users and the service.

You control camera, photo-library, notification, and alarm permissions in your device. We request them only for the relevant feature. For iOS AlarmKit, the app may use local-network permission to support alarms through the operating-system mechanism.

We share data only in these circumstances:

Supabase: provides authentication, database, sync, and related infrastructure for data needed by online features.
DeepSeek: receives prescription images and content when you actively request AI scanning or analysis, to return OCR/extraction results and schedule suggestions. We do not send prescription images to DeepSeek when you do not use that feature.
RevenueCat: helps verify and sync subscription entitlement status.
Apple or Google: process payment, renewal, cancellation, and subscription transactions under their platform policies.
Family members: receive only data that you choose to share and that their group permissions allow.
Authorities or lawful recipients: where required by law or needed to protect rights, safety, or the service.

These providers may process data in countries other than yours under their own terms and policies. We require processors to use data only to provide services to us or as required by their legal obligations.

5. Storage, security, and retention

Data may be stored on your device and, when you use online features, in Supabase infrastructure. We use reasonable technical and organisational measures to limit unauthorised access, but no transmission or storage method is absolutely secure.

When you delete your account in the app, the system immediately deletes deletable account data on the server and your device, including prescription data, reminders, backups, scan history, and your Family data. If you email a deletion request, we will process it within 30 business days after verifying ownership.

Entitlement status for an active subscription may be retained until the subscription period ends so you can restore access after reinstalling the app. Apple, Google, and other providers retain payment and transaction records under their own policies and obligations.

6. Your rights and choices

Subject to applicable law, you may request access to, correction of, deletion of, restriction of, or objection to some processing of your data; withdraw consent; or request a copy of your data. You can also remove data, change Family sharing, turn off device permissions, or delete your account in the app.

To request deletion when you cannot use the app, visit the account-deletion page or email us. We may request reasonable information to verify your identity before acting on the request.

7. Children

Thuốc ơi is not directed to children, and we do not knowingly collect personal data from children without required parent or guardian consent. If you believe a child has provided data contrary to this policy, contact us so we can review and address it.

8. Changes to this policy

When we change how data is handled or change this policy, we will publish a new version and effective date on this page. Review the version and effective date before continuing to use the app.

9. Contact

Tuấn Điệp
Privacy and support email: tuandiep98usa@gmail.com