Poppit — Privacy Policy

Poppit stores your medication list, dosing schedules, dose history, and app preferences on your device. This data never leaves your device except as described below.

If you have iCloud enabled, Poppit syncs your medications and dose history to your private iCloud account so you can access them on all your Apple devices. This data is stored in your personal CloudKit private database — we cannot see it, and it is not shared with other users. If iCloud is not available, your data stays on-device only.

Poppit offers an optional AI feature that parses medication descriptions you provide via text, voice, or a photo of a medication label. When you use this feature:

• Your input (text, audio recording, or photo) is sent to our server, which forwards it to OpenAI for processing.
• Our server does not store your input — it is stateless and only relays the request.
• OpenAI processes the input and returns structured medication data. OpenAI’s API does not use your input to train their models. See OpenAI’s data usage policy for details.
• Audio recordings are temporary — they are deleted from your device immediately after processing.
• Using the AI feature is optional. The app shows you what is sent, and you can set up medications manually instead.

When you look up information about a medication, Poppit queries public APIs operated by the U.S. National Institutes of Health (RxNorm, MedlinePlus) and the FDA (OpenFDA). Only the medication name or drug identifier is sent — no personal or health information.

Poppit can send you local reminders to take your medications. These notifications are scheduled entirely on your device and are not sent through any external service. You can enable or disable reminders at any time in the app’s settings.

• We do not collect your name, email, or contact information.
• We do not require an account to use Poppit.
• We do not use analytics, crash reporting, or tracking SDKs.
• We do not serve ads or share data with advertisers.
• We do not integrate with Apple Health or HealthKit.
• We do not collect location data.

All network communication uses HTTPS. Your iCloud data is encrypted by Apple in transit and at rest. The OpenAI API key is stored on our server and is never exposed to the app.

You can delete individual medications or dose log entries within the app at any time. Deleting the app removes all local data. If you use iCloud sync, you can remove synced data through your iCloud storage settings.

Poppit is not directed at children under 13. We do not knowingly collect data from children.

We may update this policy from time to time. The effective date at the top of this page indicates when it was last revised.

If you have questions about this policy, contact us at privacy@hoagiecorps.com.