Privacy

Privacy Policy

Last updated: 4 October 2026.

In one sentence. Your medications, doses, vital signs and appointments are stored on your phone. No account, no analytics, no ads. Some features need a connection — identifying a medicine from the barcode on the box, the subscription, invitations and, only if you turn it on, Guardian angel — and this page explains exactly what each one sends, to whom and why.

What stays on your device

Everything that defines how you use MeDiario lives on the phone in your hand, in a local database (Hive) inside the private storage the system gives the app:

Your medications — name, active ingredient, dose, schedule, notes and optional photos of the boxes.
Dose history — what you confirmed, what you skipped and when, and the adherence calculated from it.
Vital signs — blood pressure, pulse, oxygen, glucose and weight you record.
Medical appointments — date, doctor, place, notes and the optional photo of the referral slip.
Emergency card — whatever you choose to put on it.
Preferences — language, theme, Simple or Full mode, sounds.
Your subscription status — a local copy of the confirmation that Premium is active.

There is no MeDiario server that stores your medications, doses, vital signs, appointments or photos. There is no account and no sign-up.

What travels over the network, and when

MeDiario only connects to the internet for what is described below. Everything travels encrypted over HTTPS.

Identifying a medicine from the code on the box

When you scan a box, the app reads the code on the phone itself. If it is a Spanish national code, it looks that code up in the public database of the Spanish Agency of Medicines (AEMPS) at cima.aemps.es; if it is a modern GS1 code (GTIN), it looks it up in our service iap.sggyamg.com, which translates it using the official AEMPS catalogue. Only the code on the box is sent, without your device identifier; but, as with any internet connection, whoever receives it sees your IP address, and our server keeps the lookup (including the code) in its technical access logs. The answer is stored on the phone so the lookup is not repeated. If you do not scan boxes, there is no lookup.

To read the text on the box (and, on Android, barcodes), the app uses ML Kit, Google's recognition library, on the device: the image is not sent to any server and is discarded once read. ML Kit sends Google, on its own, diagnostic data about the SDK itself (performance, API usage and technical information about the app and the device), encrypted in transit, so that Google can maintain and improve the library. It does not include the image or the text read. Details in the ML Kit data disclosure.

Purchases and subscription

Payment for Premium is handled exclusively by the Apple App Store or Google Play (or by Stripe in the direct-download version, below): MeDiario never sees your card, IBAN or any banking data.

To confirm that your subscription is genuine and still active, the app talks to a service of ours at iap.sggyamg.com: when you open it, when you buy or restore, and from time to time to check it is still active. This involves:

The receipt or purchase identifier issued by the store, so that the server can check with Apple or Google that it is genuine.
A device identifier, which is how the server recognises your purchases, licences and invitations. It is a technical identifier and not an advertising identifier; the app does not ask for your name or email to create it (they only become tied to it if you turn on Guardian angel or buy the direct-download version, as explained below). On iOS it is a random code (UUID) created by the app itself. On Android, in new installations, it is calculated on the phone from the system identifier (ANDROID_ID) with a hash function (UUID version 5, based on SHA-1), so that reinstalling the app does not turn you into a different device; the ANDROID_ID itself never leaves the phone. If the app had already stored a random identifier, it keeps it.
That same identifier travels to Apple or Google with every purchase (as appAccountToken on iOS and obfuscatedAccountId on Android) so that the store links it to your subscription. That is how Apple and Google notify iap.sggyamg.com of changes to your subscription (start, renewal, cancellation, refund).

The server keeps, tied to that identifier, the notices from Apple or Google about your subscription and the status of the MeDiario licences linked to it. On top of that come the invitation code, the technical access logs and, only if you turn it on, Guardian angel, all explained below.

Like any web service, iap.sggyamg.com also keeps a technical log of every request it receives: the IP address, the date and time, and the request (method and address), which in some lookups includes the device identifier or the code of the box looked up. These logs rotate automatically: at most 5 files of 50 MB are kept and the oldest are overwritten. The server's entry proxy also keeps an access log (IP, date and request), which is kept solely for security and abuse prevention.

Direct-download version (Android, outside Google Play)

If you installed MeDiario from our website, Premium is paid through Stripe: the app asks iap.sggyamg.com for a payment page (sending the device identifier and the language) and opens it in your browser. You enter your card and email in Stripe, which handles the payment under its own privacy policy. Our server keeps your licence: the code, its expiry date, the email you gave Stripe (to send you the code, from our Gmail account) and the identifiers of the devices on which you activate it. The app checks the licence daily with iap.sggyamg.com and, once a day, checks mediario.sggyamg.com for a new version.

Inviting friends

Invitations are optional, but your code exists from the start: the first time you open the app, iap.sggyamg.com assigns you an invitation code and stores it tied to the device identifier, with the date it was created, so it is ready if you want to share it. If you use invitations, it also stores who invited whom and when, and whether the invited person subscribed or asked for a refund (Apple or Google tell it). With that it counts your valid invitations and, when you reach the goal, prepares the discount offer applied by the store. It does not store names, emails or contacts: you share the code however you like.

Guardian angel (optional)

Guardian angel emails a family member or carer. It is off until you enter that person's email in Settings, and you turn it off by leaving that field empty. When it is on, the app talks to iap.sggyamg.com like this:

When a dose is still unconfirmed two hours after it was due, the app sends your family member's email, your name (if you entered it), the name of the medicine and the time it was due. The server uses them only to send that email and does not store them in any database. The test alert in Settings sends the same, with the name of one of your medicines.
Once a day, when you open the app, it sends your family member's email, your name, the number of days of silence you chose, the language and the device identifier. The server stores these with the time of the last opening so it can alert your family member if that many days pass without the app being opened. When you turn the alert off, the app asks the server to delete them, which needs a connection. If there is none at that moment, or if you uninstall the app without turning it off, they may stay there (and your family member would get the inactivity alert): write to us and we will delete them.
The emails are sent from our Gmail account, so they pass through Google's servers, which handle them as the email provider, and a copy of the sent email may remain in that account.

The name of a medicine is health data. We process it only for this feature, which you turn on, and you can withdraw your consent at any time by turning it off. The email is received by the person you choose.

What we do not do

No analytics SDK — no Firebase, Google Analytics, Mixpanel, Amplitude, Sentry, Crashlytics or similar. The only exception is ML Kit's own diagnostics, described above.
No advertising identifier — we do not read or transmit the IDFA on iOS or the AAID on Android.
No third-party tracking SDKs of any kind.
No ads, neither in the app nor in notifications.
No account. No sign-up and no login.

System backup (iCloud / Google)

Your phone's system may include MeDiario's data in your iCloud or Google backup, depending on the device settings. That is an Apple or Google feature, not ours: the data goes to your account, never to our servers, and Apple or Google manage it under their own policies. On Android, photos of medicines and referral slips are excluded from the cloud backup.

Permissions

The permissions the app may ask for, and why:

Notifications — essential for dose alarms and appointment reminders. They are local: the phone itself schedules them; they do not come from a server.
Exact alarms and start-up (Android) — so that the alarm rings at its exact time and is rescheduled after the phone restarts.
Battery optimisation (Android) — optional; if you allow it, the system does not delay alarms to save battery.
Camera — to scan the medicine box, take photos of boxes and referral slips, and scan a QR code (invitations or moving to another phone). The image is processed on the device.
Photos — optional; to pick or save photos of your medicines. They are kept only in the app's storage.
Calendar (iOS) — optional; only to add an appointment to the phone's calendar when you ask. From then on, your calendar manages it.
Health (iOS) — optional and read-only, as explained below.

Health data

The medicines you take, their schedules, your dose history, your vital signs, your appointments and the photos are health data (a special category under Art. 9 GDPR). They are stored on your phone and we do not upload them to any server, with two exceptions explained above: the code on the box you scan reaches the AEMPS or our server, without your identifier; and, only if you turn on Guardian angel, the name of the medicine of each missed dose travels to our server to alert your family member.

On iPhone, MeDiario can read from Apple Health (HealthKit) the latest blood pressure, pulse, oxygen (SpO₂), glucose and weight readings to fill in the vital-signs form, but only if you tap "Import from Health" and grant permission. It is read-only (we do not write to Health) and happens inside the phone: the imported value is stored locally like any other reading and is not sent to any server. You can revoke the permission in Settings → Health → MeDiario. On Android, vital signs are entered by hand.

Summary for Data Safety / App Privacy

For the transparency forms of Google Play (Data Safety) and the App Store (App Privacy), here is the explicit summary. "Linked" means tied to the device identifier, which is what Apple considers linked to the person:

Health information (medicines, doses, vital signs, appointments, photos). Collected: on the device. Transmitted: only the name of the medicine and the time of a missed dose, if you turn on Guardian angel; it is sent to our server to send the email and is not stored there. Shared: with the person you choose as the recipient of the alert.
Email address and name. Collected: only if you turn on Guardian angel (your family member's email and your name, if you enter it; linked) and, in the direct-download version, the email you give Stripe (linked to your licence).
Device identifier (random UUID, or derived with a hash from the ANDROID_ID in new Android installations). Collected: yes, on iap.sggyamg.com and by Apple or Google, to validate purchases, licences, invitations and Guardian angel. Linked: yes. Advertising: NO.
Purchase history (start, renewals, cancellation and refunds notified by Apple or Google). Collected: yes, on iap.sggyamg.com. Linked: yes. Shared with third parties: NO.
Invitation code (assigned the first time you open the app) and, if you use invitations, who invited whom. Collected: yes, on iap.sggyamg.com. Linked: yes.
Technical access logs (IP, date and request, sometimes with the device identifier or the code of a box). Collected: yes, on the server, for its operation and security. Shared with third parties: NO.
ML Kit diagnostics. Collected: yes, by Google, to maintain the SDK. Image or text read: NO.
Payment data. Collected by MeDiario: NO. Handled by Apple, Google or Stripe.
Advertising identifiers (IDFA, AAID). Collected: NO.
Precise or approximate location. Collected: NO (the IP is only kept in the technical logs).
Contacts, SMS, calls, clipboard. Accessed: NO.
Analytics and crash reports. Sent to a third party: NO, except ML Kit diagnostics.

Your rights (GDPR / LOPDGDD)

You have the right to know what personal data is processed about you. What leaves your phone is described above: on iap.sggyamg.com, tied to the device identifier, the notices from Apple or Google about your subscription, the status of your licences, the invitation code assigned to you the first time you open the app and, if you use invitations, the invitation data; the licence of the direct-download version, if you bought it; the Guardian angel data, if you turn it on; and the technical access logs, which also record box-code lookups. In addition, Apple, Google or Stripe process your purchase data, and ML Kit sends its diagnostics to Google.

What is on your phone you delete yourself: clearing the app's data or uninstalling it removes medicines, doses, vital signs, appointments, photos and the local copy of the subscription. On iPhone, the app may also store in the system keychain (Keychain) a random key whose only purpose is to protect that local copy against tampering: it contains no data about you and the app does not send it to our server, but the system may keep it after the app is uninstalled. On Android, if the app stores it, it is deleted with the app and left out of the backup. To turn off Guardian angel and delete its data from the server, leave the family member's email empty in Settings. To access the data the server keeps tied to your identifier, ask us to delete it, or for anything about your purchase, write to us. Remember to cancel the subscription through Apple or Google before uninstalling if you do not want it to renew.

For privacy questions or to exercise your rights of access, rectification, objection, erasure or portability: apps.sggyamg [at] gmail [dot] com. You have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD).

Minors

MeDiario is designed for adults managing their own medicines or those of a family member. It is not aimed at children under 14 and we do not knowingly collect data from minors.

About this website

This site (mediario.sggyamg.com) uses no cookies or analytics. It only stores in your browser's localStorage the language you choose, to remember it next time. Like any web server, the one serving this site keeps a technical access log (IP address, date and page requested), which is kept solely for security and abuse prevention.

Changes to this policy

If we change this policy, we will update the "Last updated" date above and publish the new version at this URL. Any substantial change (a new third-party integration, a new piece of data collected) will be announced in the release notes of the corresponding app version before it applies.

Contact

Questions, complaints or "this doesn't work the way it says here":

apps.sggyamg [at] gmail [dot] com

This policy is published by sggyamg, developer of MeDiario, based in Madrid, Spain.

Language

The Spanish version is the original and binding version of this Privacy Policy. Versions in other languages are translations provided for convenience only; in the event of any discrepancy or conflict of interpretation, the Spanish version shall prevail.