Privacy Policy

Effective date: August 25, 2026 · Last updated: August 25, 2026

Pop ("Pop," "we," "us," or "our") provides a mobile application that helps you track your medications and build adherence habits (the "App"). This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have.

By using Pop, you agree to the collection and use of information as described here. If you don't agree, please don't use the App.

1. Information We Collect

Account information

If you create an account, we collect:

• Contact info: your email address and/or phone number (used for sign-in), and optionally a display name and profile photo you choose to upload.
• Authentication data: if you sign in with Apple or Google, we receive the basic profile information those services provide (name, email) to create your account. We don't receive or store your Apple/Google password.

You can also use Pop as a guest, without creating an account. In guest mode, your data is identified only by a random device identifier and stays local to your device unless you later choose to create an account.

Health-adjacent information

Pop's core purpose is medication tracking, so we collect:

• The medications you add (name, dose, schedule/times, days of week, and any notes you enter)
• Whether you've marked each scheduled dose as taken, missed, or pending, and when
• Your resulting adherence streaks and daily summaries
• The daily time-of-day schedule you set for yourself (e.g., "breakfast," "bedtime")

We treat this information as sensitive. We do not sell it, use it for advertising, or share it with data brokers. See Section 4 for the only ways it's shared.

Information shared through Pop Circle

Pop Circle is an optional, opt-in feature that lets you connect with another Pop user so you can each see the other's daily medication-adherence status. A connection is only created after both people explicitly agree — nobody can see your data through Pop Circle without your consent, and you can remove, block, or report a connection at any time from within the app. A connection only ever receives your display name, profile photo, and daily medication-adherence status — never your email, phone number, or any other account information, which our backend access controls enforce directly, not just something the app's screens choose not to display.

Subscription and purchase information

If you subscribe to Pop Pro, purchases are processed by Apple's App Store (or Google Play) — we never see or store your payment card details. We use RevenueCat to manage subscription status, which receives your purchase receipt data and an anonymous app-generated user ID to determine your entitlement.

Information collected automatically

• Notifications: if you enable medication reminders, we store a device push token so we can deliver them.
• Diagnostic/technical data: basic device and app version information may be included in error logs to help us fix bugs. As of this writing, Pop does not integrate any third-party analytics or crash-reporting SDK, and does not use advertising identifiers or cross-app tracking.

2. How We Use Your Information

We use the information above to:

• Provide the core App functionality (tracking your medications, computing adherence, sending reminders)
• Sync your data across your devices and back it up if you have an account
• Power the Pop Circle feature, only for connections you've explicitly agreed to
• Process and validate your Pop Pro subscription
• Respond to support requests you send us
• Maintain the security and integrity of the App (e.g., rate-limiting abuse)

We do not use your medication or health-adherence data to serve ads, and we do not sell your personal information.

3. Where Your Information Is Stored

Pop is local-first: your data is stored on your device first (so the App works offline), and — if you have an account — synced to secure cloud storage provided by Google Firebase (Firestore, Authentication, and Cloud Storage), hosted on Google Cloud infrastructure. Data in transit is encrypted (HTTPS/TLS).

4. Who We Share Information With

We share information only with:

• Service providers who help us run the App: Google Firebase (cloud database, authentication, file storage, and push infrastructure) and RevenueCat (subscription management). These providers are contractually restricted from using your data for anything other than providing services to us.
• Apple / Google, to process App Store / Play Store purchases.
• Another Pop user, only via Pop Circle, and only after mutual consent — see above.
• Law enforcement or legal authorities, only if required by law, or to protect the rights, property, or safety of Pop, our users, or others.

We do not share your information with data brokers or advertisers, and we do not sell your personal information.

5. Your Choices and Rights

• Access & correction: you can view and edit your medications, schedule, and profile directly in the App at any time.
• Clear your data: Settings → My Account → "Clear My Data" wipes your medication and tracking history while keeping your account.
• Delete your account: Settings → My Account → "Reset App & Delete Account" permanently deletes your account, all associated medication/tracking data, Pop Circle connections, and profile photo from our systems, and clears all local data on your device. This action cannot be undone.
• Pop Circle: you can remove, block, or report any connection at any time; blocking prevents that person from reconnecting with you.
• Notifications: you can disable medication reminders at any time in Settings or in your device's system notification settings.

If you're in a region with additional statutory privacy rights (e.g., the EU/UK GDPR, California's CCPA/CPRA), you may also have rights to request a copy of your data or object to certain processing — contact us at the email below and we'll respond within the timeframe required by applicable law.

6. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we delete your data as described in Section 5, except where we're required to retain limited records (e.g., transaction records) for legal or accounting purposes.

7. Children's Privacy

Pop is not directed at children under 13 (or the relevant minimum age in your region), and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we'll delete it.

8. Security

We use reasonable technical and organizational measures to protect your information, including encrypted data in transit, access-controlled cloud infrastructure, and security rules that restrict who can read your data to you and, for Pop Circle, a connection you've explicitly approved. No method of transmission or storage is 100% secure, and we can't guarantee absolute security.

9. Medical Disclaimer

Pop is a personal organization tool, not a medical device and not a substitute for professional medical advice, diagnosis, or treatment. Always consult your doctor or pharmacist about your medications. See our Terms of Use for the full disclaimer.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we'll notify you in the App or by other reasonable means before the change takes effect. The "Last updated" date above reflects the most recent revision.

11. Contact Us

Questions about this Privacy Policy or your data? Email us at support@joinpop.app.