Privacy Policy for MediTime
1. Introduction
ClearWave System ("we", "us", "our") operates the MediTime mobile application (the "App"). We respect your privacy and are committed to protecting the personal data and health information you share with us.
This Privacy Policy explains how MediTime collects, uses, stores, discloses, and protects your information when you use our mobile application and related services. By using MediTime, you agree to the collection and use of information in accordance with this policy.
2. Sensitive health data protection notice
MediTime helps you with medication scheduling, adherence tracking, prescription record-keeping, and emergency medical profiles.
Not medical advice. MediTime is a digital self-management tool. It is not a licensed medical provider and does not give medical advice, diagnosis, or treatment recommendations. Always consult a qualified healthcare professional about your health decisions.
3. Information we collect
A. Data you provide directly
- Account information: name, email address, and an optional profile picture when you create an account or sync across devices.
- Medication and health records: medication names, dosage forms, schedule times, inventory levels, refill reminders, taken/missed adherence logs, medical notes, allergies, blood type, and emergency contact details.
- Prescription and camera uploads: images of prescriptions and medicine packages, uploaded or captured with your camera, for Optical Character Recognition (OCR).
- Dependent profiles: profile data for family members or dependents you manage under your account.
B. Data collected automatically
- Push notification identifiers: Firebase Cloud Messaging (FCM) tokens used to deliver medication alarms and reminders.
- Device identifiers: an anonymous installation UUID and device hardware model, used to resolve multi-device sync conflicts.
- Usage and diagnostic data: app performance statistics, crash reports (Firebase Crashlytics), and feature usage metrics (Firebase Analytics) to improve stability and user experience.
4. How we use your information
We process your data only to provide and improve MediTime:
- Medication alarms and reminders: triggering local device alarms and push notifications for scheduled doses.
- Multi-device synchronization: backing up and syncing your medication profiles across your devices using Supabase cloud infrastructure.
- Prescription OCR: extracting medicine names and dosages from prescription photos using on-device ML Kit text recognition, with an optional Google Gemini AI fallback.
- Emergency medical card: formatting critical information (allergies, emergency contacts, blood type) for optional quick display in a medical emergency.
- App security and diagnostics: monitoring crash rates, fixing bugs, and securing system access.
5. App permissions and why we need them
| Permission | Android / iOS name | Purpose |
|---|---|---|
| Camera | android.permission.CAMERA / NSCameraUsageDescription | Take photos of paper prescriptions and medicine labels for OCR extraction. |
| Photos & storage | READ_MEDIA_IMAGES / NSPhotoLibraryUsageDescription | Select prescription images from your gallery for upload and OCR processing. |
| Notifications | POST_NOTIFICATIONS / iOS notification authorization | Deliver timely medication reminders and alarm alerts. |
| Exact alarms | SCHEDULE_EXACT_ALARM / USE_EXACT_ALARM | Trigger medication alerts at the exact scheduled minute on Android. |
| Full-screen intent & wake lock | USE_FULL_SCREEN_INTENT / WAKE_LOCK | Show loud full-screen medication alerts on Android when the screen is locked or idle. |
6. Third-party services and SDKs
MediTime uses selected third-party providers to power specific features. They process data only on our behalf under confidentiality obligations.
- Supabase Inc. (cloud database and authentication). Purpose: user authentication, encrypted cloud sync, and storage. Data shared: email address, encrypted medication records, profile details. Privacy policy.
- Google LLC / Firebase (messaging, analytics, Crashlytics). Purpose: FCM push delivery, anonymous crash logs, stability monitoring. Data shared: FCM tokens, crash stack traces, device OS version. Privacy policy.
- Google Generative AI / Gemini API (prescription OCR fallback). Purpose: text extraction for handwritten or complex prescriptions when on-device OCR is inconclusive. Data shared: prescription image frames, sent over encrypted API calls. Privacy policy.
- Google ML Kit (on-device text recognition). Purpose: instant on-device prescription scanning. Data is processed locally on your hardware; camera frames are not sent to an external server by ML Kit.
7. Data security and storage
- Local storage: your medication data is stored on your device in a structured SQLite database.
- Encryption in transit: all communication between MediTime and cloud servers (Supabase, Firebase, Gemini API) uses HTTPS/TLS encryption.
- Encryption at rest: cloud database tables and storage buckets are protected by row-level security (RLS) and full disk encryption.
- Biometric protection: the optional local app lock (fingerprint / Face ID) relies on your device's native hardware security.
8. Account deletion and your data rights
You keep full control over your personal and health data.
- In-app deletion: open Settings → Privacy & Account → Delete Account.
- Effect of deletion: once approved, all your cloud database records, prescription images, profiles, and authentication credentials are permanently erased. Local app data is removed when you uninstall the app or clear app storage.
Your legal rights (GDPR / CCPA / LGPD)
- Access and export: export your complete medication history in JSON or PDF format via Settings.
- Rectification: correct any incorrect medical entries directly in the app.
- Erasure: delete your account and records at any time.
9. Children's and family privacy
MediTime lets primary account holders create dependent profiles to manage medication schedules for family members or children in their care.
- MediTime does not knowingly collect personal data directly from children under 13 without verifiable parental or guardian consent.
- Primary account holders are responsible for, and have full oversight of, all dependent profile data created in the App.
10. Changes to this policy
We may update this Privacy Policy to reflect app updates or legal requirements. We will notify you of material changes by posting the new policy in the app, updating the "Last updated" date, and sending an in-app notice or push notification.
11. Contact us
For questions, concerns, or privacy requests:
- Developer: ClearWave System
- Email: clearwavesystems@gmail.com
- Website: clearwavesystem.github.io/meditime_flutter