Privacy Policy

📋 1. Introduction

Welcome to SmartMedi ("the App"), a medicine reminder and health management application developed and operated by NaharSoft Limited ("we," "us," or "our").

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application. We are committed to protecting your personal data and your right to privacy.

By downloading, installing, or using SmartMedi, you agree to the terms of this Privacy Policy. If you do not agree with the terms, please discontinue use of the App immediately.

📦 2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, and profile photo when you sign up via Google Sign-In or email/password authentication.
• Medicine Data: Medicine names, dosages, frequencies, schedules, start/end dates, and notes that you enter into the App.
• Medication Logs: Records of doses taken, missed, skipped, or snoozed, along with timestamps.
• Preferences: Language selection, theme preference (dark/light), notification settings, and reminder configurations.

2.2 Information Collected Automatically

• Device Information: Device model, operating system version, device language, and timezone for scheduling accurate reminders.
• Crash Reports: Anonymous crash logs and performance data via Firebase Crashlytics to improve app stability.
• Analytics: Anonymous usage patterns via Firebase Analytics, such as screen views and feature usage frequency.
• Advertising Data: Google AdMob may collect device advertising identifiers and general location for ad personalization (see Section 9).

2.3 Information We Do NOT Collect

• We do not collect your medical history or health diagnoses.
• We do not access your contacts, camera, microphone, or file storage.
• We do not collect GPS location data.
• We do not sell, rent, or share your personal data with third parties for marketing purposes.

🎯 3. How We Use Your Data

We use the information we collect solely for the following purposes:

• Core Functionality: To schedule and deliver medicine reminders, track medication adherence, and display health insights.
• Cloud Synchronization: To sync your medicine data and logs across your devices via your Google account.
• Account Management: To authenticate your identity and maintain your account.
• App Improvement: To analyze anonymous usage patterns and crash reports to improve performance, fix bugs, and develop new features.
• Advertising: To display non-intrusive banner advertisements via Google AdMob (free tier users only).
• Customer Support: To respond to your inquiries, feedback, and bug reports.

☁️ 4. Firebase & Cloud Database Usage

SmartMedi uses Google Firebase for backend services:

4.1 Firebase Authentication

Handles user sign-up and sign-in via Google Sign-In and email/password. We store only your UID, display name, email, and profile photo URL.

4.2 Cloud Firestore

Your medicine data, intake logs, and preferences are stored in Cloud Firestore. Each user's data is strictly isolated — you can only read and write your own data. Firestore Security Rules enforce this at the database level.

4.3 Firebase Crashlytics

Collects anonymous crash reports including stack traces, device model, and OS version. No personal health data is included in crash reports.

4.4 Firebase Analytics

Collects anonymous, aggregated usage statistics such as screen views and session duration. This helps us understand which features are most used and where improvements are needed.

4.5 Local Storage (Hive)

Medicine data and preferences are also cached locally on your device using Hive (an encrypted local database) for offline access. This data never leaves your device unless cloud sync is active.

👤 5. User Account Information

When you create an account, we store the following:

• Display name (from Google account or manually entered)
• Email address
• Profile photo URL (Google accounts only)
• Authentication provider type (Google or Email)
• Account creation timestamp

We do not store passwords. Authentication is handled entirely by Firebase Authentication, which uses industry-standard encryption and security practices.

🔔 6. Notification Permissions

SmartMedi requests notification-related permissions to deliver timely medicine reminders:

• POST_NOTIFICATIONS: Required on Android 13+ to display reminder notifications.
• SCHEDULE_EXACT_ALARM / USE_EXACT_ALARM: Ensures reminders fire at the exact scheduled time, even in battery-saving modes.
• USE_FULL_SCREEN_INTENT: Allows alarm-style full-screen reminders that appear even when the phone is locked.
• VIBRATE: Provides haptic feedback with notifications.
• WAKE_LOCK: Temporarily wakes the device to display time-critical reminders.
• RECEIVE_BOOT_COMPLETED: Reschedules all reminders after the device restarts.
• REQUEST_IGNORE_BATTERY_OPTIMIZATIONS: Prevents the system from killing the app's background reminder service.

All permissions are optional and can be managed through your device settings. However, disabling them may affect reminder reliability.

🔒 7. Data Security

We take the security of your data seriously and implement the following measures:

• Encryption in Transit: All data transmitted between the App and our servers uses TLS/SSL encryption (HTTPS).
• Encryption at Rest: Firebase stores data with AES-256 encryption at rest.
• User Isolation: Firestore Security Rules ensure each user can only access their own data. No user can read, write, or modify another user's records.
• R8 Code Obfuscation: The App's release build uses R8 code shrinking and obfuscation to protect against reverse engineering.
• No Plain-Text Credentials: API keys and sensitive configuration values are injected at build time via environment variables, never hardcoded.
• ProGuard Rules: Custom ProGuard rules protect all third-party library integrations from unintended stripping.

🔗 8. Third-Party Services

SmartMedi integrates the following third-party services, each with its own privacy policy:

• Google Firebase (Authentication, Firestore, Crashlytics, Analytics) — Firebase Privacy Policy
• Google Sign-In — Google Privacy Policy
• Google AdMob (Advertising) — Google Ads Privacy
• Google Play Billing (In-App Purchases) — Google Play Policy

We encourage you to review the privacy policies of these third-party service providers to understand how they handle your data.

📢 9. Advertising Policy

SmartMedi displays banner advertisements via Google AdMob to support free access to the App.

9.1 Ad Behavior

• Ads are non-intrusive banner ads only — no interstitial, video, or pop-up ads.
• Ads appear only on main content screens (Dashboard, Medicines, Schedule, History, Settings).
• Ads are not shown on sensitive screens such as splash, onboarding, login, permission, or loading screens.
• Ads are not shown until the user has added at least one medicine.

9.2 Ad Data Collection

Google AdMob may collect:

• Device advertising identifier (GAID)
• General location (country/region level, not GPS)
• Device information (model, OS version, screen size)

Your medicine data and health information are never shared with or used by the advertising system.

9.3 Premium (Ad-Free)

Users can subscribe to SmartMedi Premium ($9.99/year) to remove all advertisements. Premium subscriptions are processed through Google Play Billing and can be managed in your Google Play account settings.

🧒 10. Children's Privacy

SmartMedi is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@naharsoft.com and we will promptly delete such information.

⚖️ 11. Your Rights

You have the following rights regarding your personal data:

• Access: You can view all your data within the App at any time.
• Correction: You can edit your medicine data, profile information, and preferences directly within the App.
• Deletion: You can request complete deletion of your account and all associated data (see Section 13).
• Data Portability: Your data is accessible through the App interface and can be manually recorded.
• Withdraw Consent: You can revoke permissions (notifications, battery optimization) through your device settings at any time.
• Opt-Out of Ads: You can subscribe to Premium to remove all ads, or adjust ad personalization in your device's Google settings.

🗄️ 12. Data Retention Policy

We retain your data as follows:

• Active Account: Your data is retained for as long as your account is active and you continue to use the App.
• Inactive Accounts: If your account remains inactive for more than 24 months, we may delete your data after sending a notification to your registered email.
• Post-Deletion: After account deletion, all personal data is permanently removed from our servers within 30 days. Anonymized analytics data may be retained for statistical purposes.
• Local Data: Data cached on your device (Hive database) remains until you uninstall the App or clear the App's data through device settings.

🗑️ 13. Account Deletion Request

You can delete your account in two ways:

Option 1: In-App Deletion

Navigate to Settings → Sign Out in the App. This signs you out and you can request data deletion.

Option 2: Email Request

Send an email to support@naharsoft.com with the subject line "Account Deletion Request" and include the email address associated with your account.

📜 14. Terms & Conditions

14.1 Acceptance of Terms

By downloading, installing, or using SmartMedi, you agree to be bound by these Terms and Conditions. If you disagree, you must uninstall the App.

14.2 License

We grant you a limited, non-exclusive, non-transferable, revocable license to use SmartMedi for your personal, non-commercial purposes.

14.3 Prohibited Uses

• Reverse engineer, decompile, or disassemble the App.
• Use the App for any unlawful purpose.
• Attempt to gain unauthorized access to other users' data.
• Distribute, sublicense, or resell the App.
• Use automated systems to access the App.

14.4 Intellectual Property

All intellectual property rights in SmartMedi, including but not limited to design, code, graphics, logos, and content, are owned by NaharSoft Limited. Unauthorized reproduction is strictly prohibited.

14.5 Subscription Terms

• SmartMedi Premium is a yearly auto-renewable subscription at $9.99/year.
• Payment is charged to your Google Play account upon confirmation.
• Subscription auto-renews unless canceled at least 24 hours before the end of the current period.
• You can manage and cancel subscriptions in Google Play Store → Subscriptions.
• No refund is provided for the unused portion of a subscription period, unless required by applicable law.

14.6 Limitation of Liability

SmartMedi is provided "as is" without warranties of any kind. NaharSoft Limited shall not be liable for any direct, indirect, incidental, or consequential damages arising from your use of the App.

14.7 Governing Law

These Terms shall be governed by and construed in accordance with the laws of Bangladesh, without regard to conflict of law provisions.

⚠️ 15. Disclaimer

• The App is a reminder tool only — it does not diagnose, treat, cure, or prevent any disease or medical condition.
• Always consult a qualified healthcare professional before starting, stopping, or changing any medication.
• NaharSoft Limited is not responsible for any health consequences resulting from missed, incorrect, or delayed medication reminders.
• The App relies on device hardware (clock, alarm system, notifications) which may be affected by device settings, battery optimization, or manufacturer restrictions.
• We do not guarantee 100% delivery of notifications on all devices and configurations.

🔄 16. Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or new features.

• The "Last Updated" date at the top of this page indicates when the policy was most recently revised.
• Material changes will be communicated through the App or via email to registered users.
• Your continued use of SmartMedi after any changes constitutes acceptance of the updated policy.

We encourage you to review this Privacy Policy periodically.

📧 17. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

We aim to respond to all inquiries within 48 hours.