Privacy Policy — MedSup

Last updated: September 14, 2026 — the startup permission now says what MedSup uses it for. Nothing about what MedSup collects changed; it is still nothing.

MedSup is a medication supply tracker. This policy explains what it does with your information. The short version: it does not collect any of it.

---

We do not collect your information

MedSup has no account, no server, and no analytics. It does not send your information anywhere, because there is nowhere for it to send it to.

Specifically, the app does not:

• create an account or ask you to sign in
• upload or transmit your information anywhere
• use analytics, crash reporting, advertising, or tracking of any kind
• share or sell anything to anyone
• contain any third-party service that receives your data

Nobody can see what you enter — including us. We have no way to access it.

What is stored, and where

Everything you enter stays on your own device, in the app’s private storage:

• Medications — name, strength, dosage, how often you take them, and how many you have
• Photos — any picture you take or choose to help you recognize a medication
• Your own notes — anything you write in a medication’s directions or notes field
• Pharmacy details — the name, phone number and website you enter
• Doctor’s details — the name and phone number you enter under Doctor, for whoever prescribed it. These are somebody else’s contact details, and the app also remembers them to fill in the next medication you add
• Dose history — which doses you marked as taken or skipped, and any dose you logged as needed, kept for about 13 months and then discarded, along with the streak counted from it
• Your settings — your first name if you give one, appearance, reminders, and how you prefer to track

This information is readable only by MedSup on your device. It is not placed in shared storage, and other apps cannot read it.

Permissions, and why they exist

Permission	Why
Notifications	To remind you to take a dose or refill. Reminders are created and scheduled entirely on your device; nothing is sent through any server.
Camera	Only if you choose to photograph a medication. The photo is saved on your device.
Photos	Only if you choose an existing picture instead of taking one.
Vibration	For the short buzz when you tap a button, and for reminders. Can be turned off in Settings.
Alarms & reminders	So a reminder arrives at the minute you set rather than whenever the system next decides to wake the app. Android asks for this one separately, on its own settings screen. Without it MedSup schedules no reminders at all and tells you why — a reminder that arrives an hour late is worse than none, because a missing one gets noticed and a late one just looks like the time you chose.

Every one of these is optional. Declining any of them leaves the rest of the app working.

Android’s own permission list shows a few more that MedSup never asks you for, because they are granted automatically or arrive with the libraries the app is built on:

• Internet access, and reading network state. Neither is used. MedSup makes no network requests — which has been checked on a device rather than assumed, by watching what the app’s own process sends and finding nothing at all. They come from the app framework and from a messaging library bundled with the notification support.
• Running at startup. Android discards scheduled alarms when the phone restarts. MedSup uses this to set your reminders up again afterwards.
• Keeping the phone awake. Arrives with the same notification support.
• Storage, on Android 12 and older only. From the file and photo-picking libraries. On Android 13 and later MedSup uses your phone’s own photo picker, which needs no permission at all.

Your phone’s own backup

MedSup does not back anything up. Your phone might, and you should know that before you decide what to put in it.

Android can include an app’s data in the device backup you have already set up, through Google Drive. If that is switched on, MedSup’s information is part of it. That copy sits in your Google account, under your own credentials, covered by Google’s terms. We cannot see it, cannot ask for it, and have no way to reach it.

You control this in your phone’s backup settings, not in this app. Turning the device backup off, or excluding MedSup from it, stops the copy being made.

Two things MedSup decides about that copy, rather than leaving them to the default:

• Your photos are excluded from it. They stay on the phone they were taken on. The trade is that a restore onto a new phone brings your medications and not their pictures, and that is deliberate: a photograph of a pill can be looked up as easily as a name can, so it should not be the part that travels in the clear.
• If you have set a PIN, what does travel is already encrypted, and your recovery code is the only thing that opens it on the new phone. That is the whole reason the recovery code exists and the reason it is worth writing down.

Deleting your information

Deleting a medication removes it and its photo from your device. Settings → Clear all data removes everything at once — every medication, every dose you have logged, every photo, every reminder, and every setting — and returns the app to its first run. On the rare occasion the phone refuses to delete a photo file straight away, that file is queued and removed the next time you open the app, rather than being left behind. Uninstalling MedSup also removes everything the app stored there.

If your phone’s backup includes MedSup, a copy can outlive the uninstall and be restored later to a new device. Removing that copy is done through your phone’s backup settings, for the same reason as above: it is in your account, not ours.

There is no data for you to request, export, or have erased by us, because we never receive any.

What this does not protect against

Everything above is about keeping your information away from us and off the network. That is not the same as keeping it away from someone holding your phone, and it would be dishonest to let the two blur together:

• Without a PIN set, anyone who can unlock your device can open MedSup and read all of it — your medications and notes, photos, pharmacy and prescriber details, and dose history.
• Reminders can show a medication’s name on your lock screen or in your notification shade, where someone glancing at your phone could read it. This is true whether or not you set a PIN: reminders are handed to the operating system ahead of time so they can arrive when the app is closed, and they sit in its notification database with their text in them. Setting what reminders show to Hide names is the only thing that changes this, and it is what to use if that matters to you.
• Your information is kept in the app’s private storage, which other apps cannot read, and your phone encrypts that storage as it does all app data.

Setting a PIN encrypts what is stored

If you set a PIN under Settings → App lock, MedSup encrypts your medications, your dose history — both the doses you take on a schedule and the ones you log as needed — your streak, the pharmacy and prescriber the form offers to reuse, and its list of leftover photo files, before writing them down. The key is protected by your PIN and by your recovery code, and it exists only while the app is open — so those records cannot be read off the device without one of the two, by us or by anyone else.

Being exact about the limits, because a half-true claim here is worse than none:

• It only applies while a PIN is set. Without one there is no key, and everything is stored as it always was. Turning the PIN off decrypts everything back again, on purpose: it is the only way the app can still open your records once the key is gone.
• Your photos are not encrypted, and that is a decision rather than something waiting to be done. They stay as ordinary files in the app’s private storage, which other apps cannot read. They are saved under names like pill-mf3k2a-x7q1.jpg, with no medication name in them, and the record saying which photo belongs to which medication is inside what the PIN encrypts. So a photo on its own does not say what it is or whose it is. A picture of a labeled box still shows whatever is printed on the box, which is worth knowing before you take one.
• Your name and the end-of-day check-in time are not encrypted. The app needs them before it can ask for your PIN, to greet you and to draw the lock screen correctly.
• Your settings are not encrypted — appearance, haptics, how reminders arrive and what they show. They are not health information.
• If you forget both your PIN and your recovery code, the encrypted records cannot be recovered by anyone, including us. That is what the encryption means. The app will offer to start you over from empty, which is the only thing it can do.

App stores

You will have obtained MedSup from Google Play. Google collects its own information about downloads and devices under its own policy, which we do not control and have no access to. This policy covers only the app itself.

Children

MedSup is not directed at children under 13, and we do not knowingly collect information from anyone — of any age.

Medical disclaimer

MedSup is a tool for keeping track of medication supply. It is not medical advice. It does not know your prescription, cannot check whether medications interact, and cannot tell whether you have actually taken a dose. Always follow the label on your medication and the guidance of your pharmacist or doctor.

Changes to this policy

If this policy changes, the date at the top will change with it. Because the app collects nothing, we do not expect substantive changes unless the app itself gains a feature that handles information differently — in which case this page will say so before that feature ships.

Contact

MedSup is made by Shallot, an independent developer. Questions about this policy, or about privacy in the app, can be sent to:

cheekychamois@protonmail.com

We will reply to genuine questions about privacy. Note that we cannot help recover lost information, because we never had a copy of it.