MediCasa Privacy Policy
Effective date: November 5, 2026
Last updated: November 5, 2026
MediCasa is an app for organizing medicines at home (dose reminders, stock, purchases, expiry dates and a home shared with your family), developed by Renato Ferraz (“developer”, “we”). This Privacy Policy explains what data the app handles, where it is stored and how you can control it.
By using MediCasa, you agree to the practices described here. If you do not agree, do not use the app.
1. Summary
- MediCasa requires an account (email and password, Sign in with Apple or Google). Your medicines, reminders, doses, purchases and pharmacies are stored in your account on Firebase (Google) servers, so they sync across your devices and with the people in your home.
- Reading the box photo and the “What it’s for” description happen on your device, through Vision and Apple Intelligence. Box photos are not sent to any server.
- Premium subscriptions are sold and billed by Apple. We do not receive your payment details.
- We do not use analytics, cross-app tracking, ads or the advertising identifier.
- We do not sell or rent your data.
2. Data the app handles
Account data
- Name, email, phone number and, if you choose, nickname, gender, date of birth and profile photo.
- Account identifier and the sign-in provider used (email, Apple or Google).
- Language and app preferences (appearance, notifications, alarms, minimum stock and defaults).
Data you enter
- Medicines: name, active ingredient, form, unit, stock, batch, manufacturing and expiry dates, barcode and the “What it’s for” text.
- Reminders and doses: times, repetition, notes and the record of doses taken, skipped or snoozed, including pets’ medicines (with the pet’s name, if you enter it).
- Purchases and pharmacies: date, pharmacy, quantities, prices, discounts and pharmacy details (name, phone and address).
- Shared home: the home’s name and its members. The home’s medicines, reminders and purchases are visible to all of its members.
This data may reveal information about your health and your family’s. It is used only to make the app work and never for advertising.
Technical data
- Notification tokens (APNs and Firebase Cloud Messaging), to deliver alerts and sync alarms across devices.
- App integrity check (Firebase App Check), which confirms requests come from the genuine MediCasa app.
- As with any internet access, servers receive your connection’s IP address.
Data handled only on your device
- Camera and photos: used when you photograph the box, the batch or the barcode, or choose a profile photo. Box photos are read on the device and discarded; only the profile photo is uploaded (Firebase Storage), so it appears on your devices and to your home.
- Apple Intelligence: the “What it’s for” description and news translations are generated on the device by Apple’s model.
- Location: used only when you search for nearby pharmacies, through Apple’s map search (MapKit). MediCasa does not store your location.
- Alarms and notifications: scheduled by the system itself (AlarmKit and iOS notifications).
Data sent to UAPP
The app includes UAPPKit, the developer’s own component that shows the About, What’s New and Feedback screens. So your suggestions appear with your name and you can get a reply, the app sends UAPP your account identifier, name, email and profile photo. The text and images you send through Feedback also go to UAPP.
What the app does NOT collect
- Contacts, browsing history, Health app data or the advertising identifier.
- We do not track you across apps or websites.
3. Where data is stored
- Firebase (Google): Authentication (sign-in), Cloud Firestore (app data), Storage (profile photo), Cloud Functions (home operations, notifications and news) and Cloud Messaging (alerts). Access is protected by rules: each person reads and writes only their own data and that of the home they belong to.
- On-device cache: the app keeps a copy of the data to open quickly and work offline.
- Apple Watch and widgets: receive data from the iPhone through the direct device connection and a local App Group.
- UAPP: the developer’s servers, hosted by Supabase (section 2).
4. Sharing
- With your home: everything that belongs to the home is visible to its members. When you leave a home, you stop seeing its data; your own data stays in your personal space.
- With service providers: Google (Firebase) and Supabase (UAPP) process data on our behalf, only to run the app. Apple processes purchases through the App Store.
- Otherwise, we do not share data with third parties. We may disclose information if required by law or a valid court order.
Provider policies: Google/Firebase, Apple and UAPP.
5. Security
- Communication with the servers uses encrypted connections (HTTPS).
- Firebase stores data encrypted at rest.
- No storage method is 100% secure. Use a strong password and do not share access to your account.
6. Your rights and choices
- Access and correction: your data is visible and editable in the app (Profile, Medicines, Schedule, Purchases and Pharmacies).
- Account deletion: in Profile, tap Delete account. Your account, profile photo and personal data are deleted. Data that belongs to a shared home stays with its other members.
- Leaving a home: in Settings › Home, at any time.
- Revoking permissions: camera, photos, location, notifications and alarms can be turned off in the system Settings.
- UAPP data: to delete suggestions sent through Feedback, write to the email below.
Requests about personal data, including under Brazil’s General Data Protection Law (LGPD, Law No. 13,709/2018), are handled through the email below within the legal deadline.
7. Children
MediCasa is not directed at children. The account must be created by an adult, who may add medicines for children and pets in the home.
8. Changes to this policy
We may update this Privacy Policy when the app gains features that change how data is handled. The “Last updated” date above will be revised, and relevant changes will be announced in the app.
Versão em português