Privacy Policy
Last updated 24 October 2026
Draft: the operator's name and contact details haven't been filled in yet.
MediMinder helps you remember your medication and lets people you trust see how you're getting on. That means we handle health information, which UK data protection law treats as special category data. This policy explains what we collect, why, who sees it, and your rights.
Who we are
MediMinder is run by [operator name]. We are the data controller for your information under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. You can contact us about anything in this policy at [contact email].
What we collect
| Information | Examples |
|---|---|
| Account | Your name, email address and password (stored only as a secure hash). Sign-in sessions, including IP address and browser type. |
| Health information | Medications, doses, reminder schedules, whether each dose was taken, skipped or missed, symptoms, and medication stock. Anything optional you add to your profile, such as date of birth, allergies, conditions or an emergency contact. |
| Care circle | The names and email addresses of people you invite, who has access to your information, and a record of when a caregiver viewed it. |
| Activity record | Who signed in, viewed or changed information on your account, and when. It holds account ids and times, not your health details. |
| Contact preferences | Your notification settings, your phone number if you turn on WhatsApp, and the browser details needed to send push notifications. |
| Label photos | If you use "Scan the label", the photo you take. It is used once to read the label and isn't stored by us. |
| Messages | Replies you send to our WhatsApp number, such as "Taken". |
| Technical | Server logs and error reports used to keep the service secure and working. |
We don't use advertising trackers, and we never sell your information.
Why we use it, and our lawful basis
- To provide MediMinder, for example to show your schedule, send reminders and work out adherence. Lawful basis: contract (Article 6(1)(b)).
- To process your health information. Lawful basis: your explicit consent (Article 9(2)(a)), which you give when you create an account. You can withdraw it at any time by deleting your account; we can't provide the service without it.
- To share with your caregivers. We only do this because you invite them, and only for as long as you keep them. Same consent as above.
- To keep the service secure and safe, for example by limiting sign-in attempts, keeping logs, investigating errors and keeping the activity record. Lawful basis: legitimate interests (Article 6(1)(f)).
- To send service emails, such as verification, password resets and alerts you've turned on. We don't send marketing unless you opt in.
Who can see your information
- Caregivers you invite. They can read your medications, doses, symptoms and calendar, and they get missed-dose alerts. They can't change anything. You can remove a caregiver at any time in Settings > Caregivers. (If a family member set MediMinder up for you, see below.)
- Our staff, only when it's needed to help you or keep the service running. Support staff can see account details, such as your email address and WhatsApp number, but never your medicines, doses or symptoms. They must give a reason before opening an account, and every look is recorded.
- Service providers who process data for us under contract:
- our hosting provider (servers and database, located in the EU);
- Resend (email delivery, US);
- Stripe (payments, only if you subscribe). Stripe holds your card details; we never see them;
- Meta Platforms (WhatsApp messages, only if you turn WhatsApp on);
- Anthropic (US), which reads label photos when you choose to scan a label. It processes the photo only to return the text to us and doesn't use it to train its models;
- your browser's push service (Google, Apple or Mozilla), which delivers push notifications but can't read their content because it is encrypted;
- an error-monitoring service, which receives technical error reports with personal details removed.
- Authorities, if the law requires it.
Alerts sent to caregivers by email or WhatsApp say that a dose wasn't logged, but leave out the name of the medication. Weekly summary emails only contain counts of doses taken, skipped and not logged. Reminders sent to you do include the medication name, unless you turn on "Keep medicine names out of messages" in Settings > Notifications.
If a family member set MediMinder up for you
A caregiver can add you without you needing an account. They give us your first name, your WhatsApp number and your medicines and reminder times. We then send you one WhatsApp message asking if that's OK, and we send nothing else unless you say yes.
- Lawful basis: your explicit consent (Article 9(2)(a)), which you give by replying yes. Reply STOP at any time to withdraw it. Your reminders then stop, and we tell your caregiver.
- Who can see it: the caregiver who set it up, and any family members they invite to help. They can see your medicines and whether you've logged each dose, and they're told if you don't reply to a reminder or a medicine is running low. Some of them can also change your medicines and reminders, and log a dose as taken after checking with you. We record who did it.
- How long we keep it: until your caregiver removes you, or you ask us to delete it. If you say no, or don't reply within 7 days, nothing more is sent.
- To use your rights, contact us at the address below. You don't need an account.
International transfers
Some providers are based outside the UK, in the EU or US. Where that happens, we rely on UK adequacy regulations or the International Data Transfer Addendum (or the UK Extension to the EU-US Data Privacy Framework) so that your information stays protected.
How long we keep it
- Your account and health information: until you delete your account. Deleting it removes everything straight away from the live service, and from backups within 30 days.
- Unaccepted caregiver invites expire after 7 days, and are deleted 30 days after that.
- The activity record: 8 years, including after you delete your account, so safety and security questions can still be answered. Once your account is deleted it no longer links to you.
- Server logs and error reports: up to 30 days.
Your rights
You have the right to:
- get a copy of your information (Settings > Export gives you everything as a file);
- correct it;
- delete it (Settings > Privacy > Delete account);
- take it to another service (data portability);
- object to or restrict how we use it;
- withdraw your consent at any time.
To use any of these, use the settings above or email [contact email]. We'll respond within one month. If you're unhappy with how we handle your information, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Cookies
We only use cookies that are needed to keep you signed in. See the cookie policy.
Children
MediMinder is for people aged 16 and over. A parent or carer can manage medication for a younger person from their own account.
Security
Information is encrypted in transit. Passwords are hashed, and you can turn on two-step sign-in. Access to the database is restricted, and caregivers only see the information of people who invited them. No system is perfectly secure: if we become aware of a breach that puts you at risk, we'll tell you and the ICO as the law requires.
Changes
If we change this policy in a way that affects you, we'll tell you in the app or by email, and ask for your consent again where needed.