Privacy Policy

Introduction

Home Med Cabinet is a medication management app developed by Vibe Solutions AI, an independent studio based in Zapopan, Jalisco, Mexico. The app helps you track your medications, monitor expiry dates, manage shopping lists, organize storage locations, coordinate family medication needs, and access AI-powered assistance.

Home Med Cabinet is available on Apple App Store (iOS/iPadOS) and Google Play Store (Android).

This Privacy Policy explains what information we collect, how we use it, and what choices you have. We believe in transparency and plain language, so we have kept this document as straightforward as possible.

The information in this Privacy Policy aligns with our declarations in the Google Play Data Safety section and the Apple App Privacy labels.

Information We Collect

Information You Provide

Home Med Cabinet lets you enter and manage health-related information including medication names, dosages, expiry dates, storage locations, and shopping lists. This information is entered voluntarily by you and is stored on your device.

The app also allows you to store prescription information, including doctor names, patient names, diagnoses, medical notes, and photos of prescriptions. Prescription data is stored exclusively in the app's local database and local file storage on your device. Prescription data is not synced to the cloud, is not transmitted to our servers, and is not backed up externally. If you delete the app, all prescription data — including photos — is permanently removed.

You may create family member profiles using first names only. These names are stored locally on your device and are not transmitted to our servers.

The app does not require you to create an account. You do not need to provide your name, email address, or any other personal identifiers to use the core features of the app.

Device Identifier

When you first launch the app, a random anonymous identifier (UUID v4) is generated on your device. This identifier is not linked to your name, email address, phone number, Apple ID, or Google Account. It is used solely to associate your support tickets and medicine contributions with a single device. We cannot use this identifier to determine who you are.

Device and Usage Information

We may collect limited device information such as your device model, operating system version, app version, preferred language, and platform (iOS or Android). This information helps us improve app stability, fix bugs, and understand which devices and configurations to prioritize.

Text Recognition (OCR)

The app uses optical character recognition (OCR) to extract text from photos of medicine packages and prescriptions. How this works depends on your subscription:

Free users: All text recognition is performed entirely on your device using on-device machine learning (Google ML Kit). No images or extracted text are transmitted to any server. Processing happens without any network connection.

Premium users: Premium subscribers may use enhanced cloud-based text recognition for improved accuracy. When you use this feature, the photo is sent to our secure server, processed via the Google Cloud Vision API, and the extracted text is returned to your device. Photos are not stored on our server or by Google after processing. You can always choose to use on-device recognition instead of cloud-based recognition, regardless of your subscription.

This applies to both medicine package photos and prescription photos.

Medicine Contributions

When you add a medicine that is not yet in our shared catalog, you may contribute the medicine name, barcode, and manufacturer information to our community database. This contribution contains no personal data — it only includes information about the medicine product itself. Contributions are associated with your anonymous device identifier for moderation purposes.

iCloud Sync (iOS Only)

If you have iCloud enabled on your iOS device, your medication inventory data (names, dosages, expiry dates, storage locations, shopping lists) may be synced via Apple iCloud to your other Apple devices. This sync is handled entirely by Apple and governed by Apple's Privacy Policy. We do not have access to your iCloud data.

Prescription data (doctor names, patient names, diagnoses, photos) is not included in iCloud sync and remains exclusively on your device.

AI-Powered Features (Premium)

The app includes AI-powered features for Premium subscribers:

Medicine Wiki: The app may send generic medicine names (International Nonproprietary Names / INN) to Anthropic's Claude API to generate educational content about medications. Only the medicine name is sent — no personal data, no prescription details, and no information about you or your health conditions.

Text-to-Speech: The app may send medicine INN names to OpenAI's text-to-speech API to generate audio pronunciations. Only the medicine name text is sent. Generated audio is cached for up to 30 days in our cloud storage to avoid repeated processing.

How We Use Your Information

We use the information described above to:

• Provide and maintain the app's core functionality
• Improve app performance, stability, and user experience
• Diagnose and fix technical issues
• Understand aggregate usage patterns (not individual behavior)
• Deliver AI-powered assistance features (Premium)
• Manage and verify Premium subscriptions
• Respond to your support requests

Data Sharing and Third Parties

We do not sell your personal data. Ever.

We do not share your data with third parties for advertising or marketing purposes.

The app does not contain any advertising SDKs or display any advertisements.

We work with the following third-party service providers, each of which processes only the minimum data necessary for its specific function:

Service	Data Processed	Purpose	Their Privacy Policy
RevenueCat (USA)	Anonymous device identifier, purchase receipts	Subscription management and Premium status verification across iOS and Android	RevenueCat Privacy
Google ML Kit (on-device)	Camera frames	Barcode scanning and on-device OCR text recognition. Processed entirely on your device — no data is transmitted	Google ML Kit
Google Cloud Vision (USA)	Medicine package photos (Premium only)	Cloud-based OCR for enhanced text recognition. Photos are processed transiently and not stored	Google Privacy
Supabase (USA)	Anonymous device identifier, medicine contributions, support tickets	Backend database for shared medicine catalog and support system	Supabase Privacy
Resend (USA)	Email addresses from support tickets	Transactional email delivery for support replies	Resend Privacy
OpenAI (USA)	Medicine INN names (text only, Premium)	Text-to-speech audio generation for Medicine Wiki	OpenAI Privacy
Anthropic (USA)	Medicine INN names (text only, Premium)	Medicine Wiki content generation and INN normalization	Anthropic Privacy
Apple (USA, iOS only)	Purchase transactions, iCloud data if enabled	App distribution, in-app purchases, and optional cloud sync	Apple Privacy
Google (USA, Android only)	Purchase transactions	App distribution and in-app purchases via Google Play Billing	Google Privacy

We do not share your medication data or health information with advertisers, data brokers, or any other third parties.

Subscriptions and Payments

Home Med Cabinet offers a version available at no cost and a Premium subscription.

On iOS: Premium subscriptions are processed through Apple In-App Purchases. Payment is handled entirely by Apple. We do not receive or store your credit card or payment details.

On Android: Premium subscriptions are processed through Google Play Billing. Payment is handled entirely by Google. We do not receive or store your credit card or payment details.

Subscription status is managed through RevenueCat, which receives only your anonymous device identifier and purchase receipts to verify your Premium status across platforms.

For details on managing or canceling subscriptions, refer to Apple's or Google's support documentation for your platform.

Data Storage and Security

Your medication data is stored locally on your device. If you use iCloud sync (iOS), a copy is stored in your personal iCloud account under Apple's security infrastructure. We do not maintain servers that store your medication inventory or health information.

All data transmitted between the app and our servers is encrypted using TLS/HTTPS.

We take reasonable measures to protect any data we do process, but no method of electronic transmission or storage is 100% secure. We encourage you to use your device's built-in security features such as passcode, biometric authentication (Face ID, Touch ID, or fingerprint), or screen lock.

Data Retention

Data Type	Where Stored	Retention Period
Medication inventory, prescriptions, family members	Your device only	Until you delete the data in-app or uninstall the app
iCloud synced data (iOS)	Apple iCloud	Until you remove it via iCloud settings
Anonymous device identifier (backend)	Supabase	Until you request deletion
Medicine contributions to shared catalog	Supabase	Indefinitely — contributions are anonymized and become part of the shared community database
Support tickets and messages	Supabase	Until your request is resolved; may be retained up to 12 months for quality assurance, then deleted
Cloud Vision image processing	Google servers	Not stored — processed transiently during the OCR request
Medicine Wiki audio cache	Supabase Storage	30 days (automatic expiration)
Anonymized analytics data	Our systems	Up to 24 months

Data Deletion

You have the right to request deletion of any data we hold about you. Here is how:

Local data (on your device): Delete individual medications, prescriptions, or family members within the app. Alternatively, uninstalling the app removes all local data permanently.

Backend data (on our servers): To request deletion of your anonymous device identifier, associated medicine contributions metadata, and support tickets, you can:

1. In the app: Go to Settings → Support → create a ticket requesting data deletion
2. By email: Send a request to support@vibe-solutions.ai

Include your anonymous support code (found in Settings) so we can locate your records.

What gets deleted: Your device identifier record, associated support tickets, and the link between your identifier and any medicine submissions.

What cannot be deleted: Medicine data (name, barcode, manufacturer) that has already been merged into the shared community catalog. This data is fully anonymized and cannot be traced back to you.

Timeline: We will process deletion requests within 30 days of receipt.

Platform-Specific Information

iOS (Apple)

• The app is distributed through the Apple App Store
• In-app purchases are processed through Apple's payment system
• iCloud sync is available for medication inventory data (opt-in via your device settings)
• On-device processing uses Google ML Kit (bundled within the app)
• The app does not integrate with Apple HealthKit or Health Records

Android (Google Play)

• The app is distributed through the Google Play Store
• In-app purchases are processed through Google Play Billing
• Backup/restore functionality allows you to save and load your data using local backup files (.hmcbackup format)
• On-device processing uses Google ML Kit (bundled within the app)
• The app does not integrate with Health Connect or Google Fit

Android Permissions

The Android version of the app requests the following permissions. Each permission is used only for the purpose described:

Permission	Why We Need It
Camera	To scan medicine barcodes, photograph medicine packages for OCR recognition, and photograph prescriptions. This is a core feature of the app.
Internet	To communicate with our backend for medicine catalog lookups, subscription verification, support tickets, and AI-powered features (Premium).
Read photos and media	To let you attach an existing photo from your gallery to a medicine or prescription, instead of taking a new one.
Storage access	To save and load backup files (.hmcbackup) so you can back up your medicine data or transfer it between devices.
Notifications	To send you local reminders about expiring medications and low-stock alerts. These notifications are generated on your device — we do not send push notifications from our servers.
Google Play Billing	To process Premium subscription purchases through Google Play.
Schedule exact alarms	To schedule medication reminders at the exact times you choose.

You can manage these permissions at any time through your device's Settings → Apps → Home Med Cabinet → Permissions.

Support Communications

When you contact us through our support portal at vibe-solutions.ai/support, we collect your email address, the content of your message, and an anonymous support code. This information is stored in our cloud database (Supabase) and is used solely to respond to your inquiry. Support data is not linked to your in-app medication data. Support requests are processed through our email delivery provider (Resend) when we reply. Support data is retained only as long as necessary to resolve your request (up to 12 months), after which it may be deleted.

Your Rights

For All Users

Regardless of where you live, you can:

• Delete all your local data at any time by removing items in the app or uninstalling it
• Request deletion of backend data (see Data Deletion section above)
• Contact us with questions about your data at privacy@vibe-solutions.ai

European Economic Area (GDPR)

If you are located in the European Economic Area, you have the right to:

• Access your personal data that we hold
• Correct inaccurate personal data
• Delete your personal data (see Data Deletion section)
• Port your data to another service
• Restrict or object to processing of your data
• Withdraw consent at any time where processing is based on consent

Since we store minimal data on our end (only an anonymous device identifier and voluntary support communications), most of these rights are exercised directly through your device. For any requests, contact us at privacy@vibe-solutions.ai.

Our legal basis for processing data is:

• Legitimate interest — for app functionality, analytics, and bug fixing
• Contract performance — for delivering Premium subscription features
• Consent — for optional features like cloud OCR and AI-powered content

California (CCPA/CPRA)

If you are a California resident, you have the right to:

• Know what personal information we collect and how it is used
• Request deletion of your personal information
• Opt out of the sale or sharing of your personal information
• Not be discriminated against for exercising your privacy rights

We do not sell or share personal information as defined by the CCPA/CPRA. To exercise your rights, contact us at privacy@vibe-solutions.ai.

Mexico (LFPDPPP)

As a company based in Mexico, we comply with the Ley Federal de Protección de Datos Personales en Posesión de los Particulares (LFPDPPP). You have the right to access, rectify, cancel, or oppose the processing of your personal data (ARCO rights). To exercise these rights, send a request to privacy@vibe-solutions.ai. We will respond within 20 business days as required by law.

The personal data we process is limited to anonymous device identifiers and voluntary support communications. We do not collect sensitive personal data as defined by the LFPDPPP.

Children's Privacy

Home Med Cabinet is designed for adults aged 18 and over. We do not knowingly collect personal information from children under 13 (or under 16 in the European Economic Area). If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@vibe-solutions.ai and we will take steps to remove that information.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, support new platforms, or comply with legal requirements. When we make changes, we will update the "Last updated" date and version number at the top of this page. We encourage you to review this policy periodically.