Who is responsible for the app and website
The app publisher and controller of personal data processed through website operations and correspondence is CRAFTWEB sp. z o.o., Osiedle Pod Wiatrakami 9, Lednogóra, 62-261 Łubowo. KRS: 0001039024, NIP: 7842535739, REGON: 525423100. Contact: hello@craftweb.pl.
The app doesn't send us your data
Lekobudzik works locally. You don't create an account. The app makes no network requests and has no backend operated by us, analytics, ads or tracking. We don't collect data from the app and can't access its local database, medications, history or photos.
Diagnostic exports you choose to share, Apple Calendar and system backups are separate mechanisms. They are described below.
What is stored on your phone, and for how long
- Medications and schedules: names, optional notes, scheduled times and whether a medication is active.
- Dose history: scheduled time, status, time recorded as taken, snooze count and technical references to a photo or calendar entry. Deleting a medication doesn't delete its history.
- Dose photos: files are kept for 30 days from the time the dose is recorded as taken. The app deletes older photos during data cleanup, including when you open the app. This doesn't automatically delete the history entry itself or any backups.
- Package photo: an optional photo attached to a medication. It stays until you replace it, remove the photo or delete the medication. The 30-day retention period for dose photos doesn't apply to it.
- Settings and diagnostics: app settings and the most recent 500 event log entries, including time, category and message. Older entries are replaced. Messages are also written to the iOS system log.
Photo files are saved in the app's private directory with system data protection until the first device unlock after startup. They aren't added to the Photos library.
Permissions and their purpose
- Alarms: scheduling system alarms to remind you when medication is due.
- Camera: fresh photos to confirm doses and an optional package photo. We don't request access to your photo library.
- Calendar, optional: full access lets the app create a separate "Medications" calendar and record doses taken. Write-only access doesn't allow the app to create this calendar. The app reads calendar configuration, but doesn't use your events to determine doses.
You can change permissions in iOS Settings. Reminders won't work without alarm permission, and you can't record a dose as taken without camera access. Denying calendar access doesn't block other features.
Apple Calendar and backups
Exporting to Apple Calendar is optional. Each entry includes the medication name, scheduled and actual times taken, and snooze count. The app prefers an iCloud calendar account; if none is available, it uses the source of your default calendar. Depending on account settings, entries may sync with other devices and be processed by the account provider.
The app doesn't provide its own cloud sync or backups. Photo files aren't excluded from system backups. App data may therefore be included in an iCloud backup or a computer backup made with Finder or iTunes, depending on your Apple settings. You manage and delete backups using Apple's tools. We can't access them.
Exporting diagnostics
Choose "Settings", "Diagnostics", then "Export diagnostics". The app prepares a text file with the log, device model, iOS version and app version. The file may contain information about doses and errors. It doesn't include attached photos.
Sharing happens only when you choose to use the system share sheet. You select the recipient and service. Opening Diagnostics alone doesn't send us anything. Review the file before sending it and share only what is needed to investigate the problem.
How to delete data
To remove a package photo, edit the medication, tap "Remove photo" and save the change. Deleting a medication deactivates it but keeps its dose history.
To delete the local database, photos and diagnostic file, delete the app in iOS. Removing the Home Screen icon or offloading the app while keeping its documents and data is not enough. The app has no button to delete all data at once.
Delete the "Medications" calendar and its entries separately in Apple Calendar. If you still use the app, turn off export first so the calendar isn't recreated. Separately delete any backups and diagnostic files shared with other services. iOS manages its own system logs.
The website
The website doesn't set its own cookies or use analytics or tracking scripts. Fonts and graphics are served locally. Server logs may include your IP address, date and time, requested URL and browser identifier (user agent). We retain them for up to 14 days for security and troubleshooting.
The legal basis for processing logs is our legitimate interest in protecting and maintaining the website (Article 6(1)(f) GDPR). Our hosting provider may have access when acting on our behalf.
If we provide a YouTube video, the player loads only after you select "Play video". It uses youtube-nocookie.com. Clicking connects to YouTube, which receives information including your IP address and browser details and may use its own data storage mechanisms. Playback is not anonymous. Without a click, the website doesn't connect to YouTube.
Email contact
If you email us, we process your email address, message and any attachments you choose to send solely to reply and handle your request, for as long as needed to resolve it. The legal basis is our legitimate interest in handling correspondence (Article 6(1)(f) GDPR). Our email provider may process this data. We don't use correspondence for marketing.
Providing data is voluntary, but we can't reply without a return address. Don't send medication photos, treatment details or other health data unless they are needed to resolve the problem.
Your rights
For data we process as controller, you may request access, correction, deletion and restriction of processing, and object to processing based on legitimate interests. The right to data portability applies where its statutory conditions are met. We don't use profiling or automated decisions that produce legal effects.
Send your request to hello@craftweb.pl. We can't read or remotely delete data stored only on your phone. You may also lodge a complaint with the Polish Data Protection Authority (UODO) or the supervisory authority in your country of residence.
Children
The app doesn't collect age information or create children's accounts. It is not a service for supervising a child's treatment. A guardian and a doctor or pharmacist should guide medication use and the use of reminders.
Changes to this policy
Changes to the app or website may require updates to this document. We publish the current version at this address with its effective date. You can send privacy questions to the support address above.
In case of discrepancies between language versions, the Polish version takes precedence.