Your routine is personal.

Beta privacy policy · Updated October 20, 2026

What the app collects

• Account: your email address, a password (stored only as a secure hash), an optional name, and your family and role.
• Your routine: the medications you enter (name, and if you add them, strength, form, instructions, how many you take per dose, and each count of how many you have on hand, with when you entered it), your reminder schedule, and a record of each dose you confirm by scanning a QR code. This is health information, and we treat it that way.
• Pharmacy and prescriber (optional): the names and phone numbers you enter for your pharmacy and prescriber, and any you enter for a single medication. You and anyone in your family who manages you see them with your medications, with a Call button that opens your phone’s dialer. Pesky Pill never calls, texts or shares them.
• Call reminders (optional): if you turn them on, your phone number, when you gave consent, whether reminders are on hold, any hold you’ve asked for (when it would end, and who in your family answered it), and a record of each reminder call (status, duration, cost). Quiet hours were removed in October 2026; any quiet-hours times set before then are still stored but no longer used, and will be deleted.
• Your device: a push-notification token once you allow notifications, and your phone’s time zone so reminders stay at local time.
• Printed organizers: which organizer is paired to whom. The code printed on an organizer contains no personal information.

The camera is used only to read QR codes. No photo is saved or uploaded. Pesky Pill does not collect your location or your phone’s contacts, does not use advertising identifiers, and has no analytics or tracking.

What stays on your phone

• Your sign-in: kept in the iPhone Keychain, or on Android encrypted with a key that never leaves the phone.
• Android backup reminders: so reminders still work offline and after a restart, the Android app keeps the last reminder schedule it received: dose-time names and times, which of today’s doses were taken, and, only if you choose Detailed notifications, the names of the medications due at each time. It’s encrypted, left out of phone backups and transfers, never sent anywhere, and deleted when you sign out.
• Push token: each app keeps a copy of its own push token, so signing out can remove this phone, and only this phone, from your account.
• Reminders: signing out or deleting your account removes the reminders scheduled on this phone, so it stops reminding you about an account that’s gone.
• Printed QR sheets: Print QR codes makes the sheet on your phone. It shows your name (or email), and its codes hold your account and dose-time IDs, which mean nothing without signing in. It goes only to the printer, print service or PDF you choose. Nothing about printing reaches Pesky Pill.
• Printed or shared dose history: History → Print or share makes a PDF on your phone of the dates you pick: a first name, each day’s dose times and when each was scanned. It names medications only if that person chose Detailed notifications. It leaves the app only when you tap Print or Share, and goes only to the printer, app or person you choose; Pesky Pill never sends it on its own. A copy made for sharing is deleted from the phone afterward (on Android, at the next share or when you sign out).

Why

Only to run the service: sign you in, remind you, record doses, let family members you’ve chosen help, place the reminder calls you opted into, and send invite and password-reset emails. Pesky Pill does not sell your information or use it for advertising.

Email updates from this website

Signing up for updates on this website is optional and separate from the app. It doesn’t create a Pesky Pill account, and the list never includes medication or account information.

• What’s kept: your email address, and when you signed up and confirmed.
• Who holds it: Buttondown, our newsletter service, which sends the emails through Postmark. Your browser sends the form straight to Buttondown, so Buttondown also receives your IP address and the website you came from, which it uses to prevent spam. This website stores nothing.
• What it’s for: only Pesky Pill news and beta invitations. Open and click tracking are turned off, and the list is never sold or shared.
• Leaving: every email has an unsubscribe link. After you unsubscribe, your address is kept only as unsubscribed, so you aren’t emailed again. To have it removed completely, email support@dytym.com.

The organizer download on this website

The organizer’s print files are made in your web browser when you download them. Nothing about a download reaches us or anyone else: the page only fetches the same template files for every visitor.

• Organizer IDs and serial numbers: made in your browser for each download. They’re in the downloaded files and the printed codes, and nowhere else until you set the organizer up in the app.
• Initials, if you type them: they go only into the downloaded files and onto the printed organizer. They aren’t sent, logged or kept, not even in your browser’s storage, and they never reach the app.

Who can see it

You can see your own medications and dose history. Within a family, parents can see and manage children, and admins can see and manage parents and children. When someone you manage misses a dose, you get an alert that names them, then an hourly reminder while the dose stays unscanned, with how many reminder calls they’ve had, and a note once it’s scanned. No one outside your family can see your information.

Notifications and calls

Notifications appear on your lock screen, where others may see them. By default they never name your medications: reminders say it’s time to take your medicine and to open Pesky Pill. If you choose Detailed in the app’s settings, reminders list your medication names. Family alerts say a family member hasn’t taken their medicine, without naming it. Reminder calls never mention medication; they only ask you to scan your organizer. You can turn notifications off in your phone’s settings, and calls off in the app at any time.

Services that process your information

• Railway hosts the Pesky Pill server and database in the United States. Its request logs record which parts of the service were used, IP addresses and account IDs for troubleshooting, but never passwords or medication details.
• Amazon Web Services stores an encrypted nightly backup copy of the Pesky Pill database in the United States, so your information can be recovered if something goes wrong. Each copy is deleted after 30 days.
• Sentry receives error reports from the Pesky Pill server so problems can be found and fixed. Reports are set up to leave out what you entered, such as medication details, passwords, phone numbers and email addresses.
• Twilio sends phone-verification codes and places reminder calls, so it receives your phone number.
• Apple delivers push notifications to iPhones, so it receives your device token and the notification text. When your reminders are put on hold or resumed, it also delivers a silent message that tells the app to update them; that message holds nothing else.
• Google Firebase Cloud Messaging delivers push notifications to Android phones, so it receives your device token, the notification text and the same silent message Apple gets, and nothing else about your account. The Android app only contacts it once you’re signed in and have allowed notifications.
• Resend sends invite and password-reset emails, so it receives the recipient’s email address and the email content.
• Buttondown holds the optional email-updates list from this website and sends those emails through Postmark, in the United States. See Email updates above.
• Amazon Web Services (CloudFront) hosts this website. Its request logging is turned off. We see only overall traffic reports, such as which pages are popular, which sites link here, and visitors’ countries and device types. This website has no tracking cookies or analytics scripts, and its only form is the optional email-updates signup, which goes straight to Buttondown.

How long it’s kept, and deleting it

Your information is kept while your account exists. Invites expire after 7 days and password-reset links after 1 hour. To delete your account and everything linked to it, open the app’s Settings and choose Delete my account (under Help and privacy), or email support@dytym.com from your account’s email address. Other members of your family keep their accounts; if you’re the last one, the family and its organizers are deleted too. A family admin or parent can also remove a member they manage, which deletes that member’s information. Deleted information can remain in backup copies for up to 30 days, until those copies are deleted. Records kept by the services above, such as call and email logs, are deleted on their own schedules.

Contact

Questions or requests: support@dytym.com. See also the support page. Please don’t send medication details by email.

Changes

If this policy changes in a way that affects what’s collected or who receives it, the date above will change and beta testers will be told before it applies.