Privacy Policy
Effective September 27, 2026
This Privacy Policy explains how information is handled when you use Medsy.
Medsy is designed around a local-first approach: medication and health information you enter into the App remains on your device rather than being uploaded to a Medsy account or Medsy health-data server.
1. Who operates Medsy
Medsy is operated by Bernardo Ramada (“Medsy”, “we”, “us”, or “our”).
For privacy questions or requests, contact:
This Privacy Policy applies to Medsy's mobile application and related Medsy services.
2. Medication and health information stored on your device
Depending on how you use Medsy, the App may handle information such as:
- medication names;
- whether an item is a medication or supplement;
- dosage information;
- instructions and notes;
- schedules;
- reminder settings;
- dose history;
- adherence or completion state; and
- related information you choose to enter.
This information may constitute sensitive health information.
Medsy stores this information locally in Medsy's application storage on your device. Medsy's main application and its widget extension may access the shared local Medsy database so that relevant information can be displayed and updated.
Medsy does not operate an account system or Medsy cloud backend that receives or synchronizes this medication database.
Medsy does not receive or have remote access to your locally stored medication database.
We do not intentionally transmit your medication names, dosage, schedules, notes, dose history, adherence information, health reports, or notification content to RevenueCat.
Information you choose to enter is handled locally on your device so that the App can provide reminders, tracking, widgets, reports, and other features you request.
You can edit or delete locally stored medication information through the App. You can remove the locally stored Medsy database from your device by deleting the App, subject to copies that may separately exist in device backups.
3. Purchases and subscriptions
Medsy uses Apple's App Store and RevenueCat to provide, validate, restore, and manage purchases and subscription entitlements.
Medsy currently uses RevenueCat without a custom Medsy user account.
RevenueCat generates a random anonymous App User ID for the installation.
Depending on your use of paid features, RevenueCat may process information including:
- the anonymous RevenueCat App User ID;
- App Store purchase or receipt information;
- purchase history;
- product identifiers;
- subscription and entitlement status;
- renewal and expiration information;
- last-seen or activity information needed to operate the subscription service; and
- basic device, platform, locale, or similar technical information associated with subscription functionality.
Medsy does not provide RevenueCat with your name, email address, medication information, custom Medsy account identifier, advertising identifier, notification content, or health reports.
We use purchase and subscription information to:
- determine whether premium features should be available;
- validate and restore purchases;
- operate subscriptions;
- diagnose purchase problems;
- prevent or investigate purchase fraud; and
- understand subscription performance through RevenueCat's subscription analytics.
Apple separately processes billing, payment, App Store account, purchase, subscription, and refund information according to Apple's own privacy practices.
Based on Medsy's current implementation, purchase history is disclosed in Apple's App Privacy information as data used for App Functionality and Analytics, not linked to your identity and not used for tracking.
4. Notifications and Lock Screen information
Medsy schedules medication reminders locally on your device.
Medsy does not register your device for a Medsy-operated push-notification service, and notification content is not transmitted to a Medsy notification server.
Medication names and other reminder information may appear in notification titles or bodies.
Depending on your iOS notification-preview and Lock Screen settings, this information may be visible to anyone who can view your device without opening Medsy.
You can control notification permissions, Critical Alerts where applicable, Lock Screen visibility, and notification previews through iOS settings.
5. Device backups
Although Medsy does not operate cloud synchronization for your medication database, the local Medsy database is not excluded from Apple-controlled device backups.
As a result, Medsy information stored locally on your device may be included in an iCloud backup or another device backup managed through Apple, depending on your Apple and device settings.
Those backups are controlled by Apple and by your own backup configuration rather than by Medsy.
Deleting information from Medsy does not necessarily delete copies that may already exist in an independent Apple backup. Retention and deletion of those backups are governed by Apple's systems and your Apple account settings.
6. Backups, health reports, and system sharing
Medsy may allow you to generate backups, reports, or other files containing information from the App.
Those files are created locally and provided to Apple's system sharing interface.
You choose whether and where the file is sent, saved, or shared.
Depending on your choice, a file may be transferred to services such as Mail, Messages, AirDrop, Files, iCloud Drive, another storage provider, another application, or another person.
Once you choose to transfer a file to a third party, that recipient or service may process the file under its own privacy practices.
Health reports and exported files may contain sensitive information. You should review the contents and intended recipient before sharing them.
7. Support communications
If you contact Medsy support, we receive the information you choose to include in your message, such as your email address, message content, and attachments.
Please avoid including medication, medical, or other sensitive health information unless it is genuinely necessary to resolve your request.
If you deliberately include health information in a support request, we handle it only as reasonably necessary to understand and respond to that request and in accordance with applicable data-protection law.
Your email provider and the service used by Medsy to receive support email may also process normal email metadata and message contents.
Apple or RevenueCat may provide or process limited purchase information where necessary to investigate a subscription or purchase issue.
8. Website and technical request information
If you open Medsy's Terms, Privacy Policy, website, or other web content, your device makes an ordinary internet request to getmedsy.com and the infrastructure used to deliver the website.
As is typical for websites, hosting and network infrastructure may process standard technical information needed to deliver, secure, and troubleshoot the service, such as:
- IP address;
- browser or device information;
- requested page;
- request date and time; and
- related server or security-log information.
Medsy does not use third-party advertising trackers in the App and does not sell personal information for advertising purposes.
9. Purposes and legal bases for information Medsy receives
Where applicable data-protection law requires a legal basis, the applicable basis depends on the information and processing involved.
This section principally concerns information that Medsy or its service providers actually receive, such as subscription information, support communications, and ordinary website technical information.
Purchases and subscriptions
Purchase and subscription information is processed as necessary to provide purchased functionality, administer subscriptions, validate entitlements, restore purchases, and perform our agreement with you.
We may also process limited subscription and technical information for legitimate interests in operating Medsy, maintaining the integrity of purchases, preventing fraud, troubleshooting problems, and understanding subscription performance.
Support
We process support communications as necessary to respond to your request and for legitimate interests in providing support, improving Medsy, and maintaining appropriate records of issues and communications.
Website operation and security
Standard website and server information may be processed for legitimate interests in delivering, maintaining, securing, and troubleshooting the website.
Legal obligations and claims
We may process information where necessary to comply with applicable law or to establish, exercise, or defend legal claims.
Where applicable law gives you a right to object to processing based on legitimate interests, you may contact us to exercise that right.
10. Who receives information
Depending on how you use Medsy, information may be processed by or disclosed to the following categories of recipients.
Apple
Apple provides the App Store, StoreKit purchase functionality, subscription management, device operating system, system sharing, device backups, and other platform services.
Apple independently controls certain information it processes through those services.
RevenueCat
RevenueCat processes anonymous installation identifiers and purchase/subscription information to provide subscription infrastructure, entitlement validation, purchase restoration, and related subscription analytics.
Medication and health information from Medsy's local database is not intentionally sent to RevenueCat.
Medsy's current RevenueCat configuration does not use advertising or attribution integrations.
Email and support providers
If you contact us, the providers used to send and receive email may process your communication.
Website hosting and infrastructure providers
Providers used to host, deliver, secure, or maintain getmedsy.com may process normal technical request and server-log information.
Services and people you choose
When you export or share information, the recipient or service you select receives the information you choose to share.
Legal and regulatory recipients
We may disclose information where we reasonably believe disclosure is required by applicable law, a binding legal process, or to establish, exercise, or defend legal rights.
We do not sell your medication information or provide it to advertisers.
11. International processing
Some service providers used in connection with Medsy may process information in countries other than the country where you live.
RevenueCat uses infrastructure in the United States for customer data.
Where applicable data-protection law requires safeguards for an international transfer, we rely on appropriate mechanisms provided by the relevant service provider, such as recognized contractual safeguards, adequacy mechanisms, or another legally permitted transfer mechanism.
Apple may also process information internationally according to its privacy policy and applicable safeguards.
Other infrastructure, email, or services that you deliberately choose when sharing information may process information in other countries according to their own practices.
12. Retention
Different information is retained for different periods.
Local medication information
Medication and health information stored locally by Medsy remains on your device until you delete the relevant information or remove the App, subject to copies that may remain in independent device backups.
Because Medsy does not maintain a server copy of this database, we cannot remotely recover or delete it.
Apple backups
Information included in Apple-controlled backups remains subject to Apple's retention practices and your device or Apple account settings.
Medsy cannot independently delete data held in your Apple backups.
Subscription information
Purchase and subscription information processed through Apple and RevenueCat is retained for as long as reasonably necessary to administer purchases and subscriptions, prevent fraud, resolve billing issues, comply with applicable financial or legal obligations, and establish or defend legal claims.
Apple and RevenueCat may also retain information under their own applicable legal obligations and retention policies.
Support communications
Support communications are retained only for as long as reasonably necessary to respond to the request, maintain useful support records, address recurring issues, satisfy legal obligations, or establish or defend legal claims.
Website technical information
Website infrastructure logs may be retained for periods reasonably necessary for security, abuse prevention, troubleshooting, and service operation, subject to the settings and retention practices of the relevant infrastructure providers.
13. Security
Medsy is designed to minimize the amount of sensitive health information transmitted away from your device.
We use reasonable technical and organizational measures appropriate to the information we process.
However, no device, storage method, software application, backup system, or internet transmission method can be guaranteed to be completely secure.
You are responsible for protecting access to your device, Apple account, exported files, and any destination to which you choose to share Medsy information.
14. Your privacy rights
Depending on where you live, you may have legal rights concerning personal information, including rights to:
- request access;
- request correction;
- request deletion;
- request restriction of processing;
- object to certain processing;
- receive certain information in a portable format; and
- lodge a complaint with an appropriate data-protection authority.
These rights may be subject to conditions and exceptions under applicable law.
Local Medsy information
Because the medication database remains on your device and Medsy does not maintain a remote copy, you can generally exercise control over that information directly in the App by viewing, editing, or deleting it.
We cannot remotely access, correct, retrieve, or delete health information that exists only on your device.
RevenueCat-related information
If you want to make a privacy request concerning information processed through Medsy's RevenueCat implementation, contact us at support@getmedsy.com.
Because Medsy uses anonymous RevenueCat identifiers rather than Medsy user accounts, we may need information from the relevant device or installation in order to identify the appropriate record and verify the request.
Apple information
Apple independently controls information held through your Apple Account, App Store, payment services, and Apple-controlled backups.
Requests concerning information controlled independently by Apple should be made through Apple's privacy tools or support channels.
Complaints
Depending on the laws applicable to you, you may have the right to lodge a complaint with an appropriate data-protection supervisory authority.
You can contact us first at support@getmedsy.com and we will try to address your concern.
15. Automated decision-making
Medsy does not use the information described in this Policy to make automated decisions that produce legal effects or similarly significant effects concerning you.
Medsy does not use your medication information to independently diagnose you, determine treatment, or decide what medication you should take.
16. Children
Medsy is not directed to children under 13.
Where a minor uses Medsy and applicable law requires parental or guardian involvement, Medsy should be used only with that involvement and authorization.
A parent, guardian, or other authorized adult may use Medsy to organize information for a child or dependent where they have appropriate authority to do so.
17. Information about another person
If you enter information relating to another person, you are responsible for ensuring that you have appropriate permission or authority to handle that information through Medsy.
Do not enter another person's health information if you are not authorized to manage it.
18. No advertising tracking or sale of personal information
Medsy does not currently include third-party advertising SDKs or advertising trackers.
Medsy does not sell your medication or health information.
Medsy does not use your medication or health information for third-party targeted advertising.
If these practices materially change in the future, this Privacy Policy and applicable platform privacy disclosures will be updated where required by law.
19. Changes to this Privacy Policy
We may update this Privacy Policy when Medsy, our service providers, or applicable legal requirements change.
The effective date at the top identifies the current version.
If we make a material change to how sensitive information is handled, we may provide additional notice or request renewed acknowledgement where required by law.
20. Contact
Medsy is operated by Bernardo Ramada.
For questions, privacy requests, or concerns about this Privacy Policy: