Privacy Notice

What we store

• Device identifier — a random UUID generated in your browser (localStorage) so your data on this device stays linked to you. No account, no email required.
• Your content — prescriptions, doses, todos, shopping items, notes, reactions, caregivers — stored in our EU-region database, scoped to your device identifier.
• Push subscription endpoint — if you enable reminders, your browser's push endpoint (Apple/Google) is stored so we can deliver notifications at dose time.
• Preferences — theme, favourites, sidebar state — in localStorage only (never sent to our server).

Cookies & analytics

We use optional, anonymized analytics (Google Analytics 4 / Google Tag Manager) to understand which tools people use. Loaded only after you tap Accept on the consent banner. IP addresses are anonymized. You can withdraw consent at any time in Settings.

Essential storage (localStorage for your device identifier, preferences, login state for prescriptions) does not require consent — it is strictly necessary.

Third parties

• Stripe — if you donate, Stripe (UK/Ireland) processes the payment. We never see card details.
• Google Calendar — only if you explicitly connect your Google account to push a schedule. You can disconnect at any time.
• Gemini (Google) via Emergent — when you upload a prescription label, the image is sent for AI analysis and not retained by us.
• Web Push (Apple / Google) — delivers our reminder notifications to your device.

Your rights (GDPR / UK GDPR)

• Access, rectification, erasure, restriction, portability, objection.
• Withdraw analytics consent any time in Settings.
• Delete all data on this device: Settings → Forget this device, or clear your browser storage for verihandi.com.
• Complain to your supervisory authority (UK: ICO; EU: your national DPA).

Retention

Your prescriptions and content are retained until you delete them. Push subscriptions are removed automatically when they expire. Donation records (required for tax/accounting) are retained for 7 years.