PillCounter Privacy Policy

Effective 2026-09-21

Who operates PillCounter

PillCounter is operated by Eric Hakhyeon Lee, located in Ontario, Canada ("we," "us," or "our"). We are the operator responsible for the processing described here. Privacy and support questions may be sent to mrlightsource@gmail.com.

Purpose and scope

PillCounter is an assistive tool that photographs tablets or capsules, estimates their count, and lets the user inspect and correct every displayed detection. It does not identify medication, select a dose, diagnose a condition, or make a clinical decision. Keep patient names, prescription labels, Rx numbers, birth dates, addresses, health-card numbers, paperwork, screens, faces, and other identifying information outside photos.

The twenty-count Free allowance and no-expiry history described below apply to app version 1.3.3 and later, subject to update availability in Google Play. Earlier versions may still limit Free to three Accurate counts per day and automatically delete Free history after ten days. Update before that expiry or export records you need to keep; updating cannot restore previously deleted records.

Information processed

• Count photos: the app captures temporary still images and selects the sharper suitable image. Accurate sends a resized JPEG to the cloud counting service. Speed processes the photo on the device.
• Count and review data: predicted counts, detection locations, confidence, timing, image-quality signals, and user corrections are processed to display and verify a result.
• Installation identifier: the app creates a random installation identifier for abuse prevention and rate limiting. It is not an advertising, hardware, account, or patient identifier.
• Purchase and entitlement data: for Pro, the app and service process the Google Play product ID, purchase token, subscription status and expiry, an obfuscated installation identifier, and a short-lived signed entitlement. Google Play processes the payment. We do not receive or store the user's card or bank details.
• Security and network information: a platform security provider processes genuine-app and device-integrity signals. A third-party cloud infrastructure provider, inference processor, platform security provider, distribution platform, and network providers may process an IP address, timestamps, TLS or HTTP metadata, and operational security logs needed to transmit and protect a request.
• Local records: private app storage may contain count totals, timestamps, confidence, inference duration, settings, and saved correction photos and annotations.
• Reviewed training submissions: only when the user presses Send for review, the reviewed correction photo, final dots, model predictions, count details, random installation identifier, and app-integrity proof are uploaded to a private training-review intake.

PillCounter does not request contacts, precise location, advertising ID, microphone data, Health Connect records, payment-card details, or a PillCounter user account.

Accurate cloud processing

Free includes up to twenty Accurate counts per day, subject to shared online capacity, and Pro includes unlimited Accurate counts subject to service availability. Before camera permission is requested, the app explains that its selected count photo will be sent over an encrypted connection. The app resizes the selected photo in memory and sends the JPEG, random installation identifier, and platform integrity proof by HTTPS to a protected cloud counting service. Third-party cloud infrastructure and inference processors process the request and return count markers for review.

The cloud counting service has no application photo database, analytics system, advertising system, or user-account system. It sends no-store cache instructions. Infrastructure and inference providers may retain minimized operational records under their applicable account settings, contracts, security needs, and legal obligations. Cloud count photos are used for the current count request and are not added to a PillCounter training dataset merely because Accurate is enabled.

Speed on-device processing

Users may choose Speed. The count photo then stays on the device and is not sent to the PillCounter cloud counting service. Difficult pills may be counted less accurately, and the user must still review every detection.

Optional reviewed training submissions

The reviewed-correction sharing preference is on by default, but that preference alone does not upload anything. A correction is uploaded only after the user reviews the dots and presses Send for review. Before the first submission, the app prominently explains the data and purpose and offers Keep on device instead. Sharing can be turned off at any time. Every submitted correction also remains available locally until the user deletes it, clears app data, or uninstalls, and the user may download a local ZIP.

Submitted photos must not contain patient names, prescription labels, Rx numbers, birth dates, addresses, health-card numbers, paperwork, screens, faces, or other identifying information. Submissions are used to review errors and improve PillCounter's models; they are not sold or used for advertising.

Purposes, providers, and disclosure

We process data to provide cloud or offline counting, present user-reviewable results, save requested corrections, receive expressly submitted training corrections, improve counting models, verify Pro purchases, prevent abuse, enforce service capacity, maintain security, and troubleshoot failures. Third-party providers include Google Play for subscriptions, a cloud infrastructure provider for secure forwarding, an inference processor for pill counting, a platform security provider for app-integrity checks, and an app distribution platform. We do not sell count photos or use them for targeted advertising. We may disclose information when required by law or needed to protect users, rights, and service security.

Retention and deletion

Ordinary count photos are held temporarily for capture, counting, and review and are not newly saved in count history. Free and Pro count history has no automatic expiry and remains in private storage until the user deletes it, clears app data, or uninstalls PillCounter. A correction photo and annotations remain until the user deletes that correction, clears app data, or uninstalls. A training ZIP in a user-selected location must be deleted separately. Submitted correction archives remain in private intake storage for no more than 90 days. Material accepted into a curated training dataset may be retained until the dataset or resulting model is retired, or removed after a verified deletion request where technically feasible. Android cloud backup and device transfer are disabled for PillCounter private data. The cloud counting service does not persist ordinary count photos or predictions. Provider security logs may remain for the shortest period configured or required by the provider. Contact us to request access, correction, or deletion beyond the app controls; we may verify the request before acting.

Security and international processing

PillCounter uses HTTPS, rejects cleartext traffic, requests only Camera and Internet permissions, disables Android backup, protects release screens from screenshots and Recents previews, keeps corrections in private storage, requires app attestation for production cloud requests, verifies Pro purchases server-side, issues short-lived entitlements, limits request size and rate, and keeps provider credentials off the device. No security measure is perfect. Providers may process requests outside the user's province, state, or country subject to their safeguards and applicable law.

Health information, children, and changes

This public beta is intended for adults and is not designed for children. It is not intended to receive patient identifiers or to replace professional safeguards. Do not represent PillCounter as HIPAA, PHIPA, medical-device, or otherwise regulated-workflow compliant without a separate written agreement and confirmed safeguards. We may update this privacy policy when the product, providers, law, or operations change and will post a revised effective date.

Contact

Eric Hakhyeon Lee
Ontario, Canada
mrlightsource@gmail.com