Privacy Policy for ShelfMed
Published by ReederDevelopments • Package: com.reederdevelopments.shelfmed
1 Introduction
ReederDevelopments respects your privacy. We built ShelfMed with a privacy-first, local-first architecture. This Privacy Policy outlines how your information is handled, collected, and protected when using the ShelfMed mobile application.
2 Data Storage & Medical Privacy (Zero Cloud Policy)
ShelfMed operates without central cloud servers or remote databases storing your personal health information.
-
Local Storage: All personal details, family profiles, medicine cabinet inventories, and consumption logs remain stored locally on your device using an encrypted local database.
-
No Server Access: We cannot view, access, store, or sell your medical cabinet data or history.
3 Device-to-Device Synchronization & Encryption
ShelfMed supports household synchronization between devices without uploading unencrypted data to external servers.
-
Local Network Sync: Devices connected to the same local Wi-Fi network communicate directly with each other using peer-to-peer protocols (mDNS/Bonjour).
-
Remote Relay: When devices are on separate networks (e.g., cellular data), data payloads pass through a WebSockets routing relay to locate your family device.
-
End-to-End Encryption (E2EE): All sync payloads are encrypted on-device using an AES-256 key before transmission. The relay server cannot read or decrypt your synchronization data.
4 Third-Party Services
ShelfMed integrates with specific third-party SDKs and APIs to provide application functionality:
-
Google AdMob: Serves advertisements within the app. AdMob may collect device identifiers and usage metrics to serve ads. View Google's Privacy & Terms.
-
Google ML Kit: Performs on-device text recognition for scanning medication labels. ML Kit processes image frame data entirely on your local device without sending camera images to external servers.
-
OpenFDA API: Used to query public clinical medicine details for auto-populating medication information. Search queries sent to OpenFDA include standard network request metadata (such as IP address) required for HTTP transmission.
5 Permissions Requested
To deliver its features, ShelfMed requests the following device permissions:
| Permission | Purpose |
|---|---|
| Camera | Scans medicine bottle labels and QR codes for family sync pairing. |
| Notifications & Alarms | Delivers scheduled medication reminders on time. |
| Network & Wi-Fi State | Discovers family devices on local Wi-Fi networks and routes encrypted sync messages. |
6 Data Control & Deletion
You maintain complete ownership of your data. Because all database records reside on your physical device, you can permanently wipe all stored app data at any time by:
- Clearing app data via your Android System Settings, or
- Uninstalling the ShelfMed application from your device.
7 Changes to This Policy
We may update our Privacy Policy periodically. Any changes will be published directly to this page with an updated effective date.
8 Contact Us
If you have questions or feedback regarding this Privacy Policy, please reach out: