PillProof
PillProof privacy policy
Last updated 14 September 2026.
PillProof records that a dose was taken, and is usually paid for by an adult child on behalf of a parent. This policy explains what is kept and who can see it.
In this version a dose is confirmed in the app, not by photographing the pill. Each confirmation records the time and which account confirmed it, so a carer confirming on someone's behalf is recorded as the carer rather than as the person taking the medication. One reference photograph per medication is stored, so the person taking it can see what the pill should look like.
The person tracked is usually not the person who signed up
This is the part that matters most, so it is here rather than at the bottom. If you set PillProof up for a parent, you are creating a record of another adult's medication and daily behaviour, and they are the subject of it.
They are an adult and it is their health information. Set this up with them, not for them. A person old enough to take their own medication is old enough to be told that the times they took it are being sent to somebody else, and the app is designed to be visible on their device rather than hidden on it.
If the person cannot meaningfully agree to that, the decision you are making is a legal one about capacity and authority, and it is not one this app can make or verify for you.
What is stored
- Your email address, and whether the subscription is active.
- The household, its members, and who is the recipient.
- The medications and schedules: names, doses and times.
- Each dose: whether it was confirmed, and when.
- The device pairing between the two phones, and attempts to pair.
Photographs of pills
Confirmation works by photographing the pill. Those images are of medication rather than of a person, and they are checked and kept against the dose record. They are not sent to a language model, are not used to identify anybody, and no face recognition of any kind exists in this app.
What is not stored
No password, because there is not one. Signing in is by a code sent to an email address. No location and no movement tracking of any kind, which is deliberate: this app tells you a dose was taken, not where somebody is. No diagnosis, no clinical notes, no insurance details and no payment card details.
Who can see it
Members of the household you set up, and nobody else using the app. Every table checks the signed in account against the household before returning anything. There is no clinician view, no pharmacy access and no sharing outside the household. We do not sell any of it and we do not send it to advertisers.
Who else is involved
Supabase hosts the database and sends the sign in codes. RevenueCat sits between the app and the app store and tracks whether your subscription is active, receiving the purchase events and an identifier for your account. Apple handles the payment itself; card details go to Apple and never to us.
Deleting it
Deleting the account removes the household, its members, the medications, schedules and every dose record, immediately and unrecoverably. The recipient can unpair their device at any time, which stops any further record being made.
Contact
PillProof is published by Jeffrey L Carrier.