Last updated: 2026-05-28
TL;DR: Your medication data stays on your device by default. We don't have an account system, we don't operate any servers, we don't track you, and we never see your data. Optional iCloud sync uses your own Apple account — Apple operates it, we have no access.
Nothing reaches us. We don't operate any servers. All medications, dose history, photos, and settings are stored on your iPhone (and optionally your Apple Watch). If you opt in to iCloud sync below, your data is mirrored to your own Apple iCloud account — see the section below for what that means.
If you enable iCloud backup in Settings → Data, your data is stored in your private Apple iCloud container. Apple operates this — we have no access to it. Disabling iCloud removes the data from iCloud and keeps it local-only.
If you tap Settings → Family Share → Start sharing, Pillkin creates a private CloudKit share owned by your Apple ID. The share runs entirely on Apple's iCloud infrastructure — we do not operate any servers and have no access to the contents. Family Sharing requires that iCloud backup (above) is turned on.
Your personal preferences (theme, language, biometric-lock setting, notification sound) are not shared — they stay local to each device.
Only the people whose Apple ID you invited via the system share sheet. The share is private
(publicPermission = .none) — there is no public link. Apple delivers the invitation
through Messages, Mail, or whatever channel you pick.
Pillkin registers a silent CloudKit push subscription with Apple, so changes made on any device propagate to the others within a few seconds without anyone keeping the app open. The pushes carry no payload — your device just learns "something changed" and pulls the new records from Apple's iCloud over your existing connection. No personal data passes through us.
If two people edit the same medication at the same time, Pillkin merges field-by-field based on each field's last-edit timestamp. Each side's changes are preserved when they touched different fields; on the rare case of editing the same field, the most recent edit wins.
When you accept a family share, Pillkin schedules local reminders on your device for the medications the owner shared with you. These reminders fire locally — they do not require an internet connection. Editing the owner's medications also re-schedules them on every joined device automatically.
The owner can tap Stop Sharing to revoke access for everyone, or remove individual participants. A participant can tap Leave Share on their own device. When the share ends from either side, Pillkin deletes the shared medications and dose history from your device automatically and cancels their reminders. Your own personal medications are not affected.
If you grant access, Pillkin reads your medication dose history from Apple Health to show it alongside your reminders. Access is per-medication and you control it in the Health app. Pillkin does not write to Apple Health, and this data never reaches us.
Local notifications are scheduled on your device. They do not require a network connection and do not contact our servers.
Pillkin does not bundle any third-party analytics or crash reporting SDK. If you have enabled iOS Analytics & Improvements in your system Settings, anonymized crash reports may be sent to Apple — we may view those in Xcode Organizer but they contain no personal data.
Open Settings → Data → "Delete all data." You will be asked to confirm twice. The deletion is immediate and permanent — neither we nor Apple can recover it.
Pillkin is not directed at children under 13. We do not knowingly collect data from children because we do not collect data from anyone.
Questions? Email support@raghubs.com.