Privacy Policy

01Who is responsible for your data

This privacy policy applies to Pharmela: My Medicines, the patient app, its patient web experience and related pages on pharmela.com. It explains how we handle your account, medicine cabinet and information you choose to share through the patient app.

Pharmela Pro is the separate pharmacist/doctor app. This policy explains what happens to your patient information when you share it with a recipient using Pharmela Pro. It does not cover the separate processing of professionals’ own account and workspace information in Pharmela Pro.

“We”, “us” and “our” mean this company, which determines why and how personal data is processed for Pharmela: My Medicines.

02The information we process

The information involved depends on the features you use.

Most information comes from you or your use of the service. Review information also comes from the recipient with whom you choose to share. Infrastructure providers process technical information when serving requests.

03Why we use your information

• To provide sign-in, maintain your profile and deliver service emails.
• To save and display your medicine cabinet and support catalogue search and scanning.
• To enable sharing, reviews and delivery of results that you choose to allow.
• To operate the service, investigate errors, prevent misuse and control access.
• To answer support and privacy requests and meet applicable legal obligations.

Legal grounds

The grounds for processing are performance of the requested service for account administration (GDPR Article 6(1)(b)); explicit consent for health-related cabinet information and its voluntary sharing (Articles 6(1)(a) and 9(2)(a)); legitimate interests in service security and abuse prevention where justified (Article 6(1)(f)); and applicable legal obligations (Article 6(1)(c)).

You can decline to save a cabinet or choose not to share it. Features that require that information will then be unavailable. Accepting general terms does not replace consent to process health information.

04Camera access and device storage

The patient web app asks for camera permission when you open the medicine-code scanner. Camera frames are decoded on your device; the current patient web scanner does not upload or store the camera images. The decoded package code is used to find a medicine. You can enter a code manually instead and can withdraw camera permission in your device or browser settings.

The patient web app uses cookies to maintain sign-in and language preferences. The homepage remembers your language using local storage and loads fonts from Google Fonts, which receives the technical request information needed to serve those fonts.

This privacy page uses no analytics scripts, external fonts, cookies or local storage. Its hosting provider still processes the requests needed to deliver it.

05Sharing your cabinet

Creating an account does not give another user access to your cabinet. Sharing starts when you create a sharing code and a recipient using Pharmela Pro claims it. The code can be claimed once and expires after 15 minutes if unused. Access to your current cabinet lasts for up to 60 minutes after it is claimed, unless revoked earlier.

The receiving participant can view the shared medicines, supplements, manual entries and the notes included in the shared view. A review can preserve a copy of the cabinet as it appeared at that time. Authorised active members of the receiving workspace may have access to that saved review, so the recipient may be more than one person.

The current sharing consent also includes receiving a pharmacy response in the application. You can change the response permission using the available sharing controls. Only results explicitly sent to you appear in your patient view; private review notes and unsent drafts are not included.

Revoking live access or allowing a code to expire does not erase an existing review, sent result or a copy already made by a recipient. Contact us about deletion of retained information.

The current patient/Pharmela Pro sharing service is an open beta. Selecting the pharmacist role in Pharmela Pro does not verify a participant’s professional qualifications, and a workspace name does not establish a licensed pharmacy. Share only with someone you know and choose to trust.

06Service providers and other recipients

Providers process information needed to run their part of the service:

• Supabase: account authentication, database storage and associated infrastructure.
• Vercel: hosting and delivery of the patient web application and the Pharmela Pro service used to receive shared patient information.
• Resend: account-related email delivery and delivery information.
• Google Firebase Hosting: hosting and delivery of pharmela.com, including this page.
• Google Fonts: font delivery on the homepage.

Information is also made available to the recipients you choose through the sharing feature and to authorised people handling support, privacy or security matters. Where legally required, information may be disclosed to a competent authority.

The primary database region is Frankfurt, Germany. Providers may also process information outside the European Economic Area. Contact us for details of the processing locations and applicable transfer safeguards for your data.

07How long information is kept

Account and cabinet information is stored to keep your profile, current medicine list and change history available. Shared reviews and results are stored separately from temporary access to your current cabinet; ending a share does not remove those saved records.

You can remove entries from your current cabinet yourself. This does not by itself erase their history or copies saved in reviews. Signing out, uninstalling the app or allowing a sharing code to expire does not close your account or erase associated information. You can request account closure and erasure of retained information using the contact details in section 10.

Current beta retention limits: a fixed retention schedule for cabinet history, saved reviews, consent/access records, technical logs, support correspondence and backups has not yet been finalised. Saved reviews are not automatically erased after a fixed period. Do not assume that removing an entry or ending a share erases historical records or backup copies.

Any continued retention must have a specific lawful purpose, such as meeting an applicable legal obligation or handling a security incident or legal claim. A technical limitation alone is not a lawful reason to refuse erasure. Contact us for information about the records associated with your account, their retention and your deletion request.

08How information is protected

The service uses HTTPS for information sent between your browser and the service. Account authentication and access controls restrict access to private cabinet information. Sharing uses time-limited codes and revocable access. Administrative access is restricted to authorised functions and roles.

No system can guarantee absolute security. Keep sign-in links, passwords and sharing codes private, and sign out after using a shared device. Send a suspected security or privacy incident to kalin@pharmela.com without including passwords, sign-in codes or unnecessary health details.

09Your choices and privacy rights

Depending on the circumstances and the applicable law, you may request access to your data, a copy, correction, erasure, restriction of processing or a portable copy. You may object to processing based on legitimate interests and withdraw consent for processing based on consent. Withdrawal does not change the lawfulness of processing that took place before it.

To exercise a right or ask a privacy question, contact kalin@pharmela.com. We may request only the information reasonably needed to verify your identity. Do not send passwords or authentication codes.

The GDPR generally requires a response within one month. Where an extension is legally permitted because of complexity or the number of requests, you must be informed within that first month, with reasons.

You may complain to Bulgaria’s Commission for Personal Data Protection or another competent supervisory authority. You do not have to finish a complaint with us before contacting an authority.

10Manage and delete your data

Manage your cabinet in the app

You can remove medicines, supplements and manual entries from your current cabinet, and edit or clear their notes, using the controls in Pharmela: My Medicines. You do not need to email us to make these changes. Removing an entry from the current cabinet does not by itself erase its retained history or an existing shared review.

Account deletion and other privacy requests

You can also contact kalin@pharmela.com with the subject “Pharmela: My Medicines — account and data deletion”. Use your account email where possible and state whether your request concerns the whole account or particular data. An email application is not required: you can copy the address into any email service.

Pharmela: My Medicines and Pharmela Pro can use the same identity, so deleting the whole account affects both roles if you use both applications. A request to stop sharing is different from a request to erase saved data.

11Automated processing

Pharmela: My Medicines compares medicine information to identify possible shared active ingredients and displays source-based catalogue summaries. These features support organising information and discussing it with a qualified professional; they do not diagnose, recommend treatment or make decisions with legal or similarly significant effects on you.

AI may be used to prepare general medicine-catalogue summaries from medicine reference materials. This does not require your personal cabinet. The current patient web beta does not send individual patient cabinets to an AI model for personalised advice.

12Updates and contact

We will update this policy when our data practices change and show the new effective date. We will provide appropriate notice and obtain fresh consent where required before introducing the relevant new processing. A change to this page does not itself authorise a new use of health information.

For questions about Pharmela: My Medicines or this policy, write to kalin@pharmela.com.