💊 MediStock

Privacy Policy

Last Updated: June 26, 2026

This Privacy Policy explains how Leandro Barreto / LND Tech ("we", "us", or "the Developer") handles information in the MediStock iOS app. By using MediStock, you agree to the practices described here.

1. Information Stored Locally on Your Device

MediStock collects and stores the following information locally on your device using Apple's SwiftData framework:

• Medication information: Names, descriptions, dosages, stock levels, schedules, prescription details, and notes you enter
• Pharmacy information: Contact details of your pharmacies (name, email, phone, address)
• User preferences: Notification settings, email template preferences, display settings, and optional patient name/date of birth used in refill emails

This local data is used to display and manage your medication inventory, calculate run-out dates, send local reminders, and draft pharmacy refill emails. We cannot access, view, or retrieve your local data remotely.

2. How We Use Your Information

Information stored on your device is used solely for:

• Displaying and managing your medication inventory
• Calculating when medications will run out
• Sending local notifications about low stock and daily reminders
• Drafting emails to your pharmacy (emails are opened in your default mail app at your request)

3. Data Storage

This means:

• Your data is protected by your device's security features (Face ID, Touch ID, passcode)
• There is no cloud synchronisation of your personal medication records
• If you delete the App, local data stored by MediStock is removed from your device
• Device backups via iCloud or iTunes may include App data according to Apple's policies

4. Anonymous Research Data Sharing (Optional)

4.1 Purpose

If you opt in, MediStock may send anonymised medication stock snapshots to a secure research database hosted on Google Firebase Firestore. The data is used for aggregated healthcare and supply-chain research — for example, understanding medication demand patterns and stock levels. It is not used for advertising or marketing.

4.2 What Is Transmitted

When the feature is enabled, the App may upload a snapshot containing the following fields for each active medication:

• Medication name (as you entered it)
• Formatted dosage summary and dosage amount
• Doses per day and daily consumption
• Whether the medication is taken as needed (isAsNeeded)
• Current stock level (rounded integer)
• Stock unit and package size
• Month and year when the medication was added (createdAtMonthYear) — exact date and time are never sent
• Month and year of expiry, if recorded (expiryDate) — exact expiry date is never sent

Snapshot metadata:

• Submission month and year (submittedMonthYear) — no exact upload timestamp is included in the payload

4.3 What Is NEVER Transmitted

The anonymous research upload explicitly excludes:

• Your name, email address, phone number, or any contact information
• User IDs, patient profile names, account identifiers, or device identifiers (IDFV, IDFA, etc.)
• Pharmacy names, addresses, or contact details
• Free-text fields such as notes, product descriptions, prescriber names, or prescription numbers
• Exact dates, times, or timestamps of medication events
• GPS or precise geolocation data

4.4 When Uploads Occur

While the feature is enabled, anonymised snapshots may be sent when you update medication stock levels, when you save relevant medication changes, and when you first enable the toggle. Disabling the feature immediately stops any future uploads.

4.5 How Data Is Stored

Anonymous snapshots are stored in Google Firebase Firestore in a collection called medistock_market_snapshots. Each upload receives a randomly generated document ID from Firebase that is not linked to your account or device in the App. Data is transmitted over HTTPS (encrypted in transit). Server-side rules restrict the App to creating new documents only — it cannot read, modify, or delete existing research records.

4.6 Legal Basis and Your Control

• Anonymous research sharing requires your explicit opt-in (GDPR Art. 6(1)(a) — consent)
• You may withdraw consent at any time by disabling "Share Anonymous Stock Data" in Settings → Research & Contribution
• Disabling the feature does not delete snapshots already submitted, as they cannot be linked to your identity. If you wish to request deletion of research data that may correspond to your contribution, contact us at support@lndtech.eu — note that we cannot identify which document belongs to you due to the anonymisation design

4.7 Data Recipients

Anonymous research data is processed and stored by Google Firebase (Firestore) on behalf of the Developer, in accordance with Google's Firebase Privacy Policy and Google Cloud Data Processing Terms. Aggregated datasets may be analysed by the Developer and shared with healthcare research partners in anonymised, non-identifiable form only.

5. App Feedback (Optional)

If you choose to send feedback through Settings → Send App Feedback, the App transmits the following information to Firebase Firestore (medistock_feedbacks):

• Your star rating (1–5)
• The feature you selected as most important to your routine
• Any suggestions you type in the open feedback field (up to 2,000 characters)
• Your device language/locale setting (e.g. en-US)
• A server timestamp of submission

Feedback is voluntary and is not linked to your account or device identifiers in the payload. Please do not include personal or medical identifying information in free-text suggestions. Feedback submissions are create-only on the server — the App cannot read other users' feedback.

6. Data Sharing

We do not sell or rent your data. The only circumstances under which data may leave your device are:

• Pharmacy emails: When you choose to draft or send a refill email, your email app opens with content you control. MediStock does not send email on your behalf automatically.
• Anonymous research: Only if you opt in (see Section 4)
• App feedback: Only when you voluntarily submit the feedback form (see Section 5)
• Device backups: If you back up your device via iCloud or iTunes, App data may be included according to Apple's policies

7. Advertising

Some versions of MediStock may display advertisements served by Google AdMob. When ads are shown, Google AdMob may collect certain device information and use advertising identifiers in accordance with Google's Privacy Policy. This is standard for ad-supported apps on the App Store.

The Developer does not receive personal medication data through AdMob. You can support development through optional in-app tips via Apple StoreKit, which is processed by Apple under Apple's privacy policies.

8. Third-Party Services

MediStock may integrate with the following third-party services:

• Google Firebase Firestore: For optional anonymous research snapshots and voluntary app feedback, subject to Firebase Privacy Policy
• Google AdMob: For displaying advertisements when the ad-supported version is active, subject to Google's privacy policies
• Apple StoreKit: For optional tip/donation in-app purchases, subject to Apple's privacy policies

MediStock does not integrate behavioural analytics SDKs beyond the services listed above. Firebase may process standard request metadata (such as IP address) as part of Google's infrastructure; see Google's policies for retention details.

9. Notifications

MediStock uses Apple's local notification system to remind you about low medication stock and daily medication reminders. These notifications are processed entirely on your device and do not require internet access.

10. Data Security

Your data is protected by:

• Apple's built-in device encryption and iOS app sandboxing
• Local-first storage of personal medication records
• HTTPS encryption when optional research or feedback data is transmitted

11. Data Retention

Local App data remains on your device while you use MediStock and is removed when you delete the App (subject to your device backup settings). Anonymous research snapshots and feedback submissions stored in Firebase are retained for research and product improvement purposes in aggregated form. Because research snapshots are anonymised, we generally cannot locate or delete a specific user's contribution after submission.

12. Your Rights

You have control over your data:

• Access and modification: All local records are visible and editable within the App
• Deletion: You can delete individual medications, pharmacies, or uninstall the App to remove local data
• Consent withdrawal: You can disable anonymous research sharing at any time in Settings

If you are located in the European Economic Area (EEA), you may have additional rights under GDPR, including the right to object to processing and the right to lodge a complaint with a supervisory authority. Contact support@lndtech.eu for privacy requests.

13. Children's Privacy

MediStock is not directed at children under 13. We do not knowingly collect personal information from children under 13. Parents or guardians should supervise use of the App and review optional research sharing settings before enabling them for minors.

14. App Store Privacy Labels

Apple's App Privacy nutrition labels for MediStock reflect the data types collected when optional features are used — including Health data in anonymised research snapshots when you opt in, and Other User Content when you voluntarily submit feedback. Local medication data that never leaves your device is not "collected" in the App Store sense. See Apple's App Privacy Details for how labels are defined.

15. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be reflected on this page with an updated revision date. Continued use of the App after changes constitutes acceptance of the revised policy where permitted by law.